Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: OyxTHD3AmkDI2ZFOJRZhhjqFtZmBwfL4C9SFc9y8Y0Y=
Subject key identifier: C8:05:D1:86:E0:EC:C8:97:77:79:0C:40:90:46:C0:00:F0:D1:61:DC
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 0199FBEB1688D1A2233EC227101E16E1B7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: gUIFdKDdcdpEEmf76vyVc2GDM0HWN2W6yrIsVMHb0aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:16:88:d1:a2:23:3e:c2:27:10:1e:16:e1:b7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=c805d186e0ecc89777790c409046c000f0d161dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:f4:b8:f3:50:c9:2f:1a:16:80:7c:c7:6b:
63:5b:53:12:a0:77:b2:77:be:e9:28:5d:a1:13:fe:
b6:01:fe:01:0e:f1:de:16:43:6b:0b:a0:19:56:16:
01:58:0b:f3:e2:f1:c9:f3:39:1a:b0:4d:30:53:71:
bc:a4:08:06:95:b6:ff:7d:58:fa:52:64:4f:8f:77:
0e:63:69:30:1d:8e:8b:88:6b:ca:73:d3:83:40:64:
4b:5c:ce:d0:e2:e8:05:35:ff:21:77:71:d8:41:53:
37:84:87:51:e4:49:cf:a2:94:d5:cf:8e:86:1e:3f:
f8:64:f0:0b:32:82:4f:27:05:96:d5:33:da:5e:17:
51:65:0a:92:e2:b5:df:56:7d:e3:bc:b9:37:ab:5d:
90:a9:c6:95:58:bb:05:16:bd:c7:55:27:8c:f3:48:
1b:65:08:3a:47:2c:de:00:e5:1a:73:ac:06:0e:8e:
9e:07:18:61:69:c0:c8:0f:f5:93:ae:8c:5d:15:ec:
54:95:f9:ab:20:d2:f0:23:f9:b2:fc:59:65:18:9f:
a4:ed:8a:61:78:52:e0:d5:82:9e:6b:a7:dc:7f:19:
a7:02:99:10:00:b2:4d:0e:d1:68:e1:39:98:03:b8:
fc:e5:46:7e:bb:32:95:1c:15:de:c4:3b:8c:e4:ac:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:D1:86:E0:EC:C8:97:77:79:0C:40:90:46:C0:00:F0:D1:61:DC
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b6:78:62:d8:a6:6b:00:d3:93:19:14:68:14:26:74:f9:36:
4d:0f:dc:1d:25:e8:f4:37:30:d3:10:2e:3a:c6:cb:99:5b:3e:
9e:bb:d1:3a:d7:ed:68:44:b1:9a:31:cb:09:93:18:dd:48:4c:
6a:e2:a3:90:76:53:d3:91:6c:46:5a:c6:88:86:7c:c4:22:46:
70:5f:33:7e:be:88:ca:10:87:cd:db:d9:47:58:95:65:a1:4b:
f9:30:d6:16:37:3b:ff:ac:17:28:9a:03:02:1a:60:05:a5:52:
bb:2b:29:2b:e6:da:ef:0e:f1:26:f7:58:f5:24:90:1c:0c:64:
9a:63:25:c0:5c:2a:90:29:81:c3:99:ad:d3:90:be:db:95:0b:
42:27:8b:86:bb:a1:55:a6:9d:8d:7a:6a:1a:79:c8:26:ae:fb:
0e:d8:81:cb:b4:be:4c:99:a7:28:27:7b:dc:55:f8:6c:81:14:
df:9d:f1:e7:bf:5a:6f:43:75:39:17:82:86:b8:10:04:a1:20:
7b:61:a2:d1:a7:17:b2:45:be:ec:55:d9:c3:52:72:54:3c:e9:
6e:89:f1:73:2e:2d:3a:8d:08:8c:47:8e:66:9e:7d:09:34:86:
78:16:93:e6:2d:9b:2f:89:d1:c8:97:f9:2a:97:6f:20:75:da:
bf:b7:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:06 2025 by rpki-client