
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: kdz4ndap3k23h4umrx0Si/l2RNT/Bxs4epzhPBVAesI=
Subject key identifier: 43:0C:1B:3B:40:D7:5E:63:D3:0E:42:DE:D5:F2:2F:E3:6E:FA:03:AE
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 0198D5BC0648349B3C9CD9351BAD431AF684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: A4
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=)
2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: 8lTRSthXLn4bf3/cWbcMrXH9xIK1FImZcrY+TcEW0VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:06:48:34:9b:3c:9c:d9:35:1b:ad:43:1a:f6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=430c1b3b40d75e63d30e42ded5f22fe36efa03ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:08:3d:d8:39:29:86:f6:8c:14:cd:83:48:
e3:1d:10:93:5f:a0:52:4b:82:5b:8b:1c:eb:3d:6a:
58:54:ca:ce:fd:58:aa:81:1b:de:72:83:09:cf:eb:
a2:04:f6:01:ed:fa:8b:27:72:ac:7d:d6:88:db:28:
35:be:1e:60:16:87:de:4e:bd:93:cd:d2:49:68:cc:
9d:e6:fe:fb:93:6a:4c:6e:5c:fa:dd:dd:d4:df:31:
c8:f5:74:10:a8:ed:8f:5c:2e:30:25:72:a9:45:91:
ac:ec:2f:a0:04:7b:ef:d9:8c:2b:0b:df:28:06:b2:
9b:9f:03:00:39:5a:44:46:62:a6:4b:7a:0c:c2:c3:
74:7a:68:c8:5e:93:db:1f:d0:07:37:57:c2:2d:5b:
7c:00:ed:77:02:70:12:b3:66:cd:5c:5e:2c:42:fb:
4c:ec:a2:e5:e4:fd:6a:0d:e1:bc:29:d5:ff:b9:79:
67:0e:21:6e:18:5c:b0:f3:f3:4e:f6:ed:64:dd:92:
0b:af:47:f0:d2:1a:4d:9d:e5:32:54:c9:31:fb:84:
53:47:03:bf:32:ef:7a:84:5a:22:e3:33:14:ce:19:
e2:51:b2:4e:dc:ad:ff:c3:76:22:d8:40:6d:56:7e:
67:58:bc:62:0b:bc:13:e2:63:74:09:65:16:33:bf:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:1B:3B:40:D7:5E:63:D3:0E:42:DE:D5:F2:2F:E3:6E:FA:03:AE
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ae:d3:ca:40:a3:81:af:a2:74:78:de:65:08:92:75:fc:f1:
ee:69:31:fd:9b:43:2f:ba:16:dc:86:58:8f:5b:46:d7:89:0a:
8d:b8:08:40:b1:87:25:d3:6b:34:cd:00:55:3b:2e:86:a8:18:
36:b7:6c:22:ab:7b:73:84:d9:d1:1f:5b:d8:e1:93:b4:32:b1:
88:ef:83:a1:1a:70:ff:63:43:49:5e:c4:6b:0c:29:00:5e:4b:
00:10:c8:22:f6:3d:77:ff:2f:60:5b:f8:d1:c9:e4:be:d9:e0:
9a:18:ac:f4:52:7a:64:8d:ec:87:1a:7c:98:8f:de:d6:fc:ce:
7b:a8:c3:2d:e1:1b:20:2f:4b:5c:e7:d6:34:7f:b1:51:d7:b9:
d5:e2:6e:9a:80:d1:5d:06:98:53:dd:09:b1:b9:05:0c:3e:23:
6c:ce:af:c7:01:9b:b9:b5:ab:59:75:7a:50:00:d1:7b:a6:d6:
9f:0a:83:da:12:11:14:8d:02:c7:fe:eb:86:dc:6f:b3:7f:70:
1e:66:e5:a2:ec:ab:b4:bf:5b:49:8f:d7:1a:e7:42:0e:fc:7a:
98:f6:4d:03:e1:5a:1c:d4:2d:2b:fd:4d:49:c3:dc:c5:04:cf:
33:90:b5:72:37:c9:b0:02:9b:9c:b8:e2:aa:58:a1:55:ff:97:
58:05:fe:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:23 2025 by rpki-client