Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: HByG9dRYpOmjIw50OkrSxWxPTLTMi8wwMWZtZh39tAo=
Subject key identifier: E6:F7:FD:72:A0:DB:6D:6A:25:78:B1:EF:10:EB:96:08:8F:98:FF:22
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 0199FC8F58606041BBE792A2665BAD8849A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 164A
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: LwD1MhI+OZVK35ULFeq1TYgP7S5VK1PtqAoLQo7fKU4=)
2: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:58:60:60:41:bb:e7:92:a2:66:5b:ad:88:49:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=e6f7fd72a0db6d6a2578b1ef10eb96088f98ff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:aa:8a:b5:35:85:d7:76:97:c0:7b:a4:33:
1f:03:2f:37:fd:53:1f:5c:e3:f7:c8:b1:1b:1c:81:
7a:fb:33:c8:f1:e3:aa:a1:86:0d:94:ff:9a:5b:95:
49:a6:85:06:00:96:3e:dd:32:fc:a2:d9:50:b6:22:
c0:db:4b:a3:3a:d1:29:35:d6:54:ff:22:78:3f:7c:
7c:c8:8f:ca:65:84:91:d3:6d:7e:d1:2f:66:20:41:
56:25:b0:c4:3d:37:15:e9:63:ff:55:2c:e4:c7:a5:
54:19:e3:17:4f:b4:6a:08:89:92:7e:4a:df:61:77:
d4:72:58:78:ce:29:e6:7e:cb:96:19:bd:ef:de:5a:
58:1c:f7:a6:43:39:3a:5c:af:93:a8:8c:b3:23:81:
20:b9:b9:1b:5a:cb:ea:3e:25:75:eb:2c:76:d8:16:
3a:d6:03:91:e1:b3:81:7b:f4:93:aa:90:af:ca:ff:
cd:9a:82:f0:77:47:cd:6c:a4:b9:d0:85:b8:78:c0:
a1:a6:97:03:d8:ef:17:4f:d6:36:68:15:b7:85:79:
16:18:af:89:73:de:94:01:45:29:fe:da:3b:89:e6:
15:2f:91:c7:5c:4b:80:ab:96:63:34:51:0e:e9:23:
6d:fd:3e:ce:ff:d3:75:32:ed:68:67:36:31:5e:a5:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:FD:72:A0:DB:6D:6A:25:78:B1:EF:10:EB:96:08:8F:98:FF:22
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:71:cb:a5:1b:4e:6a:17:7f:b4:94:8b:00:73:42:f8:16:7e:
1a:1c:e3:d4:c2:8f:f3:ed:3d:00:72:dc:e5:92:9e:94:04:83:
4a:38:bf:31:b4:50:87:b0:6d:45:84:0f:43:fd:99:84:e4:cd:
48:a1:9e:08:47:df:f3:56:7e:a8:11:dd:88:b4:da:b3:34:56:
c4:b8:1c:b8:90:d4:07:94:b8:57:6d:27:75:b5:b4:98:84:26:
9a:63:79:86:82:ae:be:a0:38:40:ef:07:7a:9f:a4:af:9e:b2:
d7:19:f9:45:6b:35:38:f6:96:7e:a1:a2:49:41:f1:d5:ac:c4:
35:54:77:0e:6f:17:fe:de:fa:1d:d5:ec:ce:27:c6:23:a6:93:
90:ab:88:12:54:78:37:aa:b5:e2:69:29:8e:e6:67:7a:b1:d5:
6f:f7:97:d4:4c:07:5b:f3:3f:47:a8:47:40:d4:b7:ed:28:57:
3a:a5:a3:c2:fa:55:96:08:dc:20:6a:33:d0:04:82:04:d7:5c:
46:81:df:28:cd:13:76:78:e9:11:81:6f:ea:34:49:0b:49:ad:
ed:67:00:53:eb:f4:5a:d5:e6:39:8f:cd:7c:79:2d:f3:3f:08:
0a:93:68:c6:6b:4c:c2:f0:af:01:0e:36:0f:38:03:c0:37:3f:
e5:1e:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:47 2025 by rpki-client