Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: E+KVNofGN5Eu4TqCoHYsevW/47hOWVacqDUbU3t0WB8=
Subject key identifier: 56:43:8F:5C:0A:CD:2A:77:4B:4C:98:94:51:59:C4:3F:AE:FA:B0:F2
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 0199FFC7E8BB247FCA13A2F5CA484BA4ACA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 04:01:55 +0000
Manifest this update: Mon 20 Oct 2025 04:01:55 +0000
Manifest next update: Tue 21 Oct 2025 04:01:55 +0000
Files and hashes: 1: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: jXXmW4xt9z0nAWUKC1HuHHpFKF1Ok6SFJJsk/Ev9UTg=)
2: VEEuJRf1IaY-i7njwh4GTFyz4KQ.roa (hash: K73j5BLwJXJOZ/R7FX/mXQkCi9Da4esGEBz7JkbDtTI=)
3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=)
4: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:e8:bb:24:7f:ca:13:a2:f5:ca:48:4b:a4:ac:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Oct 20 04:01:55 2025 GMT
Not After : Oct 21 04:01:55 2025 GMT
Subject: CN=56438f5c0acd2a774b4c98945159c43faefab0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:ad:01:e5:d2:bc:72:9f:5d:d0:81:12:c4:
ed:24:c9:ae:5b:6c:9c:0f:d1:9e:6e:1e:7a:25:12:
14:f4:5a:7b:f4:dc:f0:6e:b9:c5:6b:99:81:05:5a:
87:d9:aa:0d:3a:31:9c:6f:62:2f:d1:2f:a0:f6:9d:
27:6f:e0:9b:e6:7c:a2:54:db:59:93:0e:db:0b:a1:
a7:a2:6c:95:b8:4d:ac:11:80:ed:9c:86:8b:70:f3:
7b:1f:01:ee:39:cd:b1:26:29:db:6b:2f:a0:ab:71:
94:14:de:7f:59:19:19:87:21:12:ee:84:dd:53:68:
6a:a8:b0:b2:b3:ae:18:f0:c6:c3:bb:8b:89:ec:25:
45:ce:28:8e:30:25:8e:c0:d6:94:d6:3f:a5:b3:1d:
71:b3:60:b9:ad:a6:5a:07:81:34:96:55:0e:a0:15:
bc:39:7b:06:c5:7a:f9:d1:43:37:9b:c4:ea:31:f8:
49:aa:46:98:2f:1c:ce:7c:62:99:df:52:6d:3f:73:
10:19:e7:08:c1:4a:a7:f7:9b:b8:d3:68:63:e1:95:
33:94:56:3c:61:52:1a:d1:d3:1c:42:98:6f:ca:79:
af:51:5a:e0:91:fb:6b:e9:96:7e:6d:d2:c4:de:f7:
66:a2:5a:b2:a9:3f:c2:ce:ab:50:9c:75:c4:4d:2c:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:43:8F:5C:0A:CD:2A:77:4B:4C:98:94:51:59:C4:3F:AE:FA:B0:F2
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d1:da:1d:e9:84:d1:08:04:23:64:d6:90:a6:52:35:4c:33:
77:13:3b:2b:b6:b4:24:f0:51:af:9f:87:33:39:86:7a:8d:16:
1d:a5:63:38:69:d5:a9:70:d1:28:55:04:4a:bc:ba:4c:ea:e5:
c3:eb:58:88:0d:5d:b9:49:8b:50:5a:75:7d:62:36:90:aa:dc:
00:23:59:ff:00:13:07:e3:0f:ff:98:f6:88:8b:b9:9c:8d:29:
a0:6e:d5:2e:1c:94:62:38:a6:fe:b1:5c:83:b6:aa:ea:c9:47:
f8:37:9a:31:eb:4d:e1:67:0b:95:c0:83:73:2e:c6:ea:6a:eb:
ad:17:4a:bd:12:92:95:18:f1:70:82:da:ff:3c:37:02:19:df:
c9:6c:29:2f:93:f5:8c:02:57:02:b9:f3:e5:88:80:96:85:a9:
60:fd:0e:21:88:7f:26:a8:21:aa:2e:80:29:b2:cc:a6:10:7a:
9b:66:21:3f:7d:0d:d3:b0:58:72:d3:b5:4c:18:45:79:bc:bb:
2b:2c:88:c1:ab:11:d3:8c:13:99:53:d4:5e:2a:54:9b:24:eb:
25:4b:2b:f1:8c:83:64:4a:1a:54:d7:71:d5:2f:79:b4:b8:b9:
61:23:46:f1:f3:dd:66:43:70:90:75:18:70:3f:e9:93:3f:09:
1f:26:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:09 2025 by rpki-client