Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: V+M3fVLW5fH/BP07YUlJtP3TRrqekEdGBboLm/LsNx4=
Subject key identifier: 64:E6:8C:6A:46:1E:3B:B0:6A:05:7C:CE:95:1F:91:0C:86:51:A4:7A
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 0199FFC8DD79136AB4FE3430143C32CB0A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0565
Signing time: Mon 20 Oct 2025 04:02:57 +0000
Manifest this update: Mon 20 Oct 2025 04:02:57 +0000
Manifest next update: Tue 21 Oct 2025 04:02:57 +0000
Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: SpS4oKp8i39bD9VZMwk86Bu9Ulekivy0LoU6ld8E0iQ=)
3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:dd:79:13:6a:b4:fe:34:30:14:3c:32:cb:0a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Oct 20 04:02:57 2025 GMT
Not After : Oct 21 04:02:57 2025 GMT
Subject: CN=64e68c6a461e3bb06a057cce951f910c8651a47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:15:39:43:5c:d7:97:03:2a:63:c5:11:e7:
22:03:41:58:59:07:46:86:fb:e0:3c:58:49:55:1e:
5f:5c:f4:18:7a:cf:c4:d1:81:4d:db:33:eb:fe:83:
de:93:c2:b0:35:64:8d:31:76:36:65:ec:03:92:4c:
c4:7f:90:48:47:7a:9e:e1:a7:0e:9b:f7:01:70:bd:
9c:22:6e:dc:82:2e:19:d8:4c:86:c2:f6:ac:70:e6:
0b:78:a1:28:2d:2f:85:7e:45:57:70:36:16:72:c2:
8c:ad:73:50:b5:f9:2d:8d:f5:46:e9:94:dc:8d:a6:
9a:5c:ae:82:ac:bd:39:d7:2b:7e:85:0b:41:65:6e:
3a:14:66:70:ba:b7:22:87:27:9d:57:ff:97:71:3b:
db:00:0c:12:3d:f3:61:68:bc:62:06:c6:94:6f:6a:
34:c8:da:eb:9a:db:67:41:42:00:a8:d0:98:d7:21:
fe:d9:bd:2a:ca:46:d8:4f:70:51:2f:88:82:24:90:
21:4f:88:2d:5e:ac:57:57:53:45:df:88:e6:4e:b9:
ec:40:33:99:da:96:d8:2d:f8:ed:63:d4:25:96:1a:
46:83:7e:3f:6d:37:c3:23:81:f0:67:b6:21:e3:53:
a1:b4:89:a4:2e:8a:ca:18:1d:16:3b:14:1c:46:d2:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:8C:6A:46:1E:3B:B0:6A:05:7C:CE:95:1F:91:0C:86:51:A4:7A
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2b:e1:1f:e4:0c:4d:3e:78:78:2d:2f:58:45:f5:b5:22:c9:
b1:55:fe:53:4f:84:3f:5d:7c:07:df:57:84:97:40:d6:ae:50:
c1:70:b4:54:27:9f:b4:92:0f:3d:0d:fe:ec:82:88:7f:b9:2a:
7c:a6:66:02:a4:91:2b:74:0f:43:28:4f:2c:e4:24:9e:c2:56:
61:fd:28:c0:b7:1e:5c:c2:fe:1e:ad:96:3d:0d:1f:3d:17:f9:
7e:71:b4:17:ed:66:22:8b:43:4e:33:92:2a:59:b2:67:29:a1:
21:79:d6:c4:14:46:2d:0d:79:30:2e:8f:33:ed:55:d6:da:6a:
16:62:ba:2b:d8:ff:9e:a3:bc:e0:1f:21:05:a5:28:bf:89:2c:
18:9f:45:39:10:25:b8:62:2f:8f:f2:bd:21:54:dd:22:47:2a:
13:3b:e1:52:cd:2a:e2:a8:96:43:22:45:38:15:d4:64:96:21:
7d:74:05:c6:eb:f7:80:c8:f2:f4:c6:72:62:cb:3c:63:51:d6:
ad:79:fe:57:59:9e:53:50:cf:eb:40:4f:ba:1f:7d:0a:4d:5d:
7b:f2:33:e8:be:1b:e2:fa:35:3f:72:64:fe:c9:6d:7e:e0:ac:
97:ba:4c:f9:eb:7d:bd:35:ce:e2:5e:c4:22:7b:83:95:35:77:
59:50:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:58 2025 by rpki-client