Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: h4avFrGSRU+lnXnZSBPrJNlLm5+IbR328uz2tug67fQ=
Subject key identifier: 1E:18:AC:A9:98:DB:F8:D2:B9:5F:0C:28:4A:16:00:E3:CF:D7:8D:42
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 0199FF90209E37CD103BCDA8C19F19B320D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 03:00:59 +0000
Manifest this update: Mon 20 Oct 2025 03:00:59 +0000
Manifest next update: Tue 21 Oct 2025 03:00:59 +0000
Files and hashes: 1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: 9WmsvLjw2VQFo1PKAN4b7JC4VOYuDowe763clODCHWo=)
2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:20:9e:37:cd:10:3b:cd:a8:c1:9f:19:b3:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Oct 20 03:00:59 2025 GMT
Not After : Oct 21 03:00:59 2025 GMT
Subject: CN=1e18aca998dbf8d2b95f0c284a1600e3cfd78d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:15:ce:d6:07:1d:89:bc:e0:68:54:8a:77:
d0:3a:e7:f7:f0:ff:f4:9b:de:01:b2:7b:b7:83:76:
47:9a:e3:33:9d:e5:62:79:a6:88:33:26:1d:e4:59:
4b:af:d9:5c:c7:9d:7b:3c:9b:64:01:d0:21:f4:36:
2e:3c:0a:56:11:9c:b4:ab:1a:08:b1:bd:4b:8e:1a:
aa:fd:e8:a8:f4:eb:8f:75:e1:08:67:b4:a0:4b:67:
36:45:ee:ec:88:08:ea:8b:69:b8:35:2b:5e:f3:d8:
58:1a:b5:96:52:02:c7:96:ab:33:b5:c3:30:7d:c4:
45:cc:bf:1c:ed:86:5c:ca:00:66:96:24:0f:4b:80:
15:81:ed:b5:a6:69:ca:64:2f:17:6c:17:a2:da:26:
4f:2d:c6:1d:5d:6a:a2:fe:8e:39:19:68:fb:e0:a1:
bd:6c:e0:69:c7:c6:a8:94:bf:02:bf:90:ff:9c:6f:
5e:99:35:31:f9:74:95:47:53:de:ec:c2:1e:21:c0:
de:c2:7e:55:b8:49:db:9a:54:0b:94:fb:d8:5d:67:
09:4e:40:58:ac:b8:e9:a2:68:30:9d:43:46:22:f2:
b0:51:e8:44:90:f4:ba:32:9e:71:e8:d1:12:b8:88:
a8:48:8a:b6:88:c1:48:35:5c:c6:e5:d2:52:47:09:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:18:AC:A9:98:DB:F8:D2:B9:5F:0C:28:4A:16:00:E3:CF:D7:8D:42
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ce:72:f7:55:da:3d:98:d4:a0:0d:2a:41:b4:5a:c5:58:b7:
43:f4:2a:f3:98:fa:cd:36:c2:fc:21:ab:71:6a:60:27:f6:d3:
4a:18:4c:35:8d:de:3b:b7:aa:42:3b:6f:c8:1a:14:18:25:a8:
3a:3b:bb:af:91:99:1e:5f:ad:24:de:a0:3a:3a:84:8d:2f:45:
38:ee:ea:88:8c:c2:d2:33:21:b3:6a:30:9d:0e:66:28:a3:64:
7c:a0:fd:9e:58:8e:8d:74:4f:56:d6:6f:95:2f:db:5e:ad:cc:
8b:0a:8b:43:d2:56:fd:18:cb:65:9a:a0:8e:fc:b9:71:f4:5c:
14:df:6f:fa:90:77:41:5e:ff:7e:8d:0d:6f:4c:21:de:3d:62:
a1:0b:5e:12:dd:51:09:df:d9:55:9f:c2:f4:20:3d:14:52:2c:
36:91:dc:12:d6:3e:bb:5e:bc:65:41:0b:c0:81:ea:c1:97:a8:
18:f5:4d:d4:64:82:60:3b:d0:40:b1:b0:dc:85:c9:e1:45:c7:
14:1a:ba:35:02:fc:ed:c0:5f:46:6d:46:03:27:b5:df:0d:88:
08:2b:de:b4:dc:1c:93:94:d2:2c:cf:d1:b8:96:86:ab:aa:82:
39:b1:24:85:54:73:ac:b7:ae:2f:fc:e4:5a:96:fa:83:a6:eb:
fe:53:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:45:36 2025 by rpki-client