
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: zsCWUml7744JDYW22+X21MGl6EumAH+0hpXYP4MW5JU=
Subject key identifier: 96:8B:88:8D:90:29:2E:0C:45:06:C1:AE:48:AB:89:08:10:80:20:B2
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 0199FC584FE613AF39E8A209082CC0C5BB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 07DE
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: bTzlKBmhjBNhcyQ8y0eqS6Z3/jO+tLG+bkvp1fErT6g=)
2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4f:e6:13:af:39:e8:a2:09:08:2c:c0:c5:bb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=968b888d90292e0c4506c1ae48ab8908108020b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:d5:ef:12:7b:f1:12:eb:5b:1f:59:1b:2d:
e2:63:06:0d:3e:05:45:b0:cd:6d:33:4c:21:5e:dd:
23:ea:8a:5b:e4:cb:51:21:de:5b:55:af:5d:2d:63:
84:d4:b9:4d:15:33:1f:7e:ea:34:fc:ec:0f:67:6b:
8e:f2:7b:7b:35:2e:d1:1f:96:d7:4a:c8:53:1e:e4:
3a:df:20:74:6a:74:ae:a2:39:4e:5e:36:a5:93:9d:
5c:a9:9e:d9:ee:f4:a3:d0:dd:20:ba:b2:1c:77:48:
eb:9b:c3:06:c5:f2:da:60:69:62:03:29:38:73:1f:
5d:9a:2b:59:1d:63:75:c7:6f:54:07:d8:71:bb:36:
fd:6f:e0:a8:4d:ed:70:38:e7:b4:00:11:ac:22:9b:
f3:a8:e7:04:f2:ed:74:9f:94:6c:42:c0:0a:6b:e4:
df:05:c4:73:4d:0c:93:74:04:2a:39:0b:a8:1d:b9:
91:5e:9d:e8:92:81:22:d7:29:b8:3a:11:f4:a3:1a:
84:1c:02:e2:ab:71:a0:1c:86:93:a0:6b:d9:d6:b2:
ed:56:34:6c:b5:29:a8:87:cb:44:75:ca:c2:28:64:
9c:f9:62:15:ab:fe:3c:4e:7b:c6:d3:fa:4f:06:3f:
f2:30:db:4b:1b:99:3e:95:04:c5:9e:a0:e5:1c:b6:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8B:88:8D:90:29:2E:0C:45:06:C1:AE:48:AB:89:08:10:80:20:B2
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1d:fd:c7:50:8b:11:8a:28:20:99:eb:df:ef:50:7c:81:3b:
ca:71:65:11:0f:77:c0:de:c6:ed:d7:71:13:c1:38:2f:c1:86:
ca:3e:04:a2:52:25:f1:eb:09:5f:05:aa:e2:56:8d:f6:ca:cf:
21:7c:05:ff:29:0d:c5:ee:72:96:37:6f:13:cc:d5:e4:c7:c4:
61:59:0f:ac:c2:8f:49:04:2b:c4:2b:dc:b2:6c:c9:20:79:0e:
7f:42:0d:c5:6d:75:a2:8d:49:4b:95:21:9a:31:c9:9f:26:71:
42:46:08:06:05:f7:82:f2:9f:5d:75:07:c0:8c:1c:c1:5c:c9:
ee:d6:4c:41:6c:42:71:d3:cb:35:39:de:60:21:9d:38:58:5c:
53:71:af:ec:ca:5c:95:b3:23:7d:dd:29:0a:6a:c9:6e:01:7d:
0d:ef:a2:69:3d:cc:a2:1b:fe:0a:d2:ed:03:63:25:78:bd:05:
d3:1e:19:ec:e7:1c:d3:18:75:aa:50:16:a7:65:dd:ee:e1:4c:
7a:c4:1e:1c:b5:0c:dd:5a:d1:a6:40:2d:b4:c1:3d:ef:58:85:
17:79:c5:ed:69:fa:29:dd:c3:48:33:7c:a2:5f:c7:fd:8d:3f:
49:f7:c1:c6:90:4f:46:72:af:b9:26:3a:da:76:f9:6b:41:7e:
c4:ff:db:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:10 2025 by rpki-client