Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File: c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier: uxD9M8vuFu+lfe8SRJAZMhi71gFG+Q23wOKfkwiDMo8=
Subject key identifier: 32:9F:F9:0F:88:7F:89:4F:1C:92:87:ED:F2:AC:D6:2C:AC:17:DC:E5
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer: /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial: 0198733D954EDFB1C3D3B8A5470148077B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number: 1433
Signing time: Mon 04 Aug 2025 04:01:12 +0000
Manifest this update: Mon 04 Aug 2025 04:01:12 +0000
Manifest next update: Tue 05 Aug 2025 04:01:12 +0000
Files and hashes: 1: Pb8L9pbGV7NQfgKmcvhMk6D02_s.roa (hash: CoNWry2kYRJwo9FhSFsPeMR2m6gz3FAFYuGEKzEDx5w=)
2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: Ux9pxxgO/Pz/fZP4w/CAb5W5y6plDCpJ1Xkf56mCcoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:95:4e:df:b1:c3:d3:b8:a5:47:01:48:07:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
Validity
Not Before: Aug 4 04:01:12 2025 GMT
Not After : Aug 5 04:01:12 2025 GMT
Subject: CN=329ff90f887f894f1c9287edf2acd62cac17dce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:dc:4a:77:ee:13:28:69:a2:0d:f8:5d:e9:
01:1f:ca:cb:fa:ff:30:46:9e:c2:f6:6a:56:6f:96:
9b:f6:95:fd:84:15:3b:ad:d9:09:c9:35:13:43:64:
57:7a:18:ea:8b:78:d4:b5:7e:e0:0b:5c:b7:61:ee:
2b:00:48:3a:04:60:92:fa:e9:32:e4:e5:66:3d:b8:
ae:04:b6:53:d7:2c:01:b7:a3:cb:01:19:f2:6b:c1:
4b:35:5e:2c:6c:32:77:d5:91:38:f5:f6:91:74:7a:
8b:59:fa:e2:60:70:98:13:1e:15:aa:95:2c:da:0d:
b4:18:5c:65:43:dd:65:a1:01:aa:5a:a8:70:9c:ce:
9a:cc:5c:b4:52:9a:21:c4:bb:da:88:9a:13:4d:1f:
ff:75:de:8e:b6:ab:44:37:ef:e7:12:38:b3:df:96:
ab:47:dc:c8:d8:0b:cf:ee:4d:b7:ef:cd:ff:29:eb:
39:ed:89:f6:4c:90:c6:a2:12:87:b0:5b:97:95:91:
2d:98:f4:69:93:30:a1:13:94:31:76:bf:b8:50:0b:
5f:37:fd:67:62:9a:0e:e2:6d:50:2b:73:05:84:53:
e1:ae:a0:df:49:d9:e0:7e:92:db:5d:ce:8b:c0:ac:
c7:b8:be:20:8f:7c:93:cb:66:27:05:0b:11:01:6f:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:F9:0F:88:7F:89:4F:1C:92:87:ED:F2:AC:D6:2C:AC:17:DC:E5
X509v3 Authority Key Identifier:
keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fd:8a:97:cf:ac:9f:f2:96:c5:f8:68:03:19:6c:94:6e:ab:
c4:b0:0e:cb:a7:95:2c:7a:d9:9a:22:2d:72:b4:c1:f0:48:cb:
1c:44:4b:ed:56:2a:6d:92:d2:6c:80:6a:33:83:ac:6c:be:96:
ef:8c:3b:6f:68:cb:03:c7:a6:8d:92:75:b6:52:c8:4c:0c:5e:
d2:a1:65:1d:3a:a9:05:cb:20:ec:c6:79:d0:cc:81:02:55:cb:
fe:8d:f2:41:71:f9:ee:9b:91:12:1a:8a:6c:5b:c6:95:05:0b:
ba:11:de:04:72:24:91:fd:df:f6:da:37:0a:bf:37:24:7a:8f:
9a:dc:04:4b:64:f9:8a:51:64:7d:97:17:b7:a0:8b:02:eb:bb:
f0:42:fc:bf:e2:c1:be:c7:4f:ce:9c:4b:51:9a:74:ef:2b:4f:
d1:f5:92:54:52:e2:18:7a:d1:29:bb:bf:7b:db:5b:34:43:6f:
1c:fb:35:22:dc:53:89:81:88:b2:42:d0:f3:2f:cf:b3:d8:7d:
ef:3b:26:ab:08:25:89:f4:45:b9:c6:58:5b:77:d7:1e:7f:85:
a9:5e:27:ab:fc:ca:b6:0b:8e:c7:f9:5c:b6:76:72:d3:c0:68:
e5:cf:a4:42:5d:26:11:61:af:e2:b2:91:f5:77:1e:44:95:3a:
27:73:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:38 2025 by rpki-client