Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: iJcEAQ4E6v/huKowuS9F4FLyN+B8rAPUFDTzQ/1Rwbs=
Subject key identifier: A4:55:C6:D1:72:C0:01:10:CE:BC:6B:48:D3:16:1C:EA:9F:5F:FB:12
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 0198D4A82C562B2D44F1CDF32159FC94CC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0B78
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: FGTXdSRii/yTnlQVJl24U0ZYRrhqcrLh2GINCSYnggo=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2c:56:2b:2d:44:f1:cd:f3:21:59:fc:94:cc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=a455c6d172c00110cebc6b48d3161cea9f5ffb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:e7:98:82:26:92:e1:76:8c:87:d3:ad:78:
86:f1:ad:48:2c:62:39:40:d9:8b:27:85:2b:f6:2f:
d7:71:80:59:d9:ea:ef:9d:e8:56:5e:94:91:20:1c:
85:a8:3d:63:6d:c5:bf:6f:05:10:9e:b9:43:05:3a:
d8:9d:4a:d5:85:ce:1d:1e:2e:41:f9:19:1a:a6:14:
5c:7a:ae:08:60:58:fa:7b:5e:68:26:1a:35:47:58:
76:7e:1c:f0:fd:f1:4c:38:c6:64:e4:ef:2e:bb:27:
b8:05:24:f8:58:88:eb:2b:ca:75:88:04:e7:6c:91:
33:93:b2:97:e4:40:85:f4:7f:39:32:82:af:b9:d3:
3c:1b:6c:28:49:fe:f5:dc:df:77:92:04:10:6a:c0:
53:3c:6b:ab:c3:62:17:40:d7:fe:38:49:85:33:93:
44:44:96:48:1a:cf:38:79:35:c6:ce:d8:4f:f5:2f:
c8:7f:5a:0a:ec:e4:8d:2c:10:31:21:a1:6d:b4:c3:
6f:1e:f3:39:23:df:5b:b4:8e:24:d7:81:be:fe:bc:
69:25:08:0a:1b:94:b1:e3:e8:ed:38:7e:40:38:ad:
cd:ed:c0:b0:2a:49:ea:c8:55:6c:3b:57:05:3b:56:
19:19:5e:ca:5d:21:d0:3c:b9:01:f7:bb:19:0a:d8:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:C6:D1:72:C0:01:10:CE:BC:6B:48:D3:16:1C:EA:9F:5F:FB:12
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b6:c1:3b:21:ae:7b:25:14:31:5d:18:fa:de:0a:7d:64:12:
91:10:b4:d5:53:96:6d:d3:30:60:03:78:18:2a:b6:1d:f4:07:
6c:b2:52:41:18:dd:d4:54:97:f1:32:32:d9:2e:c2:49:79:dd:
4f:2b:89:a9:a2:73:78:b6:07:a1:58:0d:dd:21:ab:fa:98:16:
14:a5:94:84:17:ae:0f:2d:d5:7f:c5:6c:ae:f6:7b:cf:90:5a:
72:c6:4a:1e:24:3d:d9:5b:7f:fe:63:ad:14:23:d8:79:16:88:
72:cf:14:d2:e7:4e:c4:09:5f:7a:3f:3d:9d:f4:69:c0:f1:ff:
d6:83:35:b8:a4:b7:e6:e0:fb:c9:74:88:3e:76:09:94:44:c3:
57:29:f8:a6:26:78:b6:be:5a:4a:69:37:9f:6f:5f:f8:da:04:
3f:c0:71:a0:3a:f6:f7:1f:13:e6:49:50:12:83:fe:32:ee:a0:
02:b6:15:dd:b5:b5:ed:21:12:cd:69:97:83:4c:11:4f:08:8b:
19:20:87:75:ec:79:fa:ad:5d:10:f4:84:6e:46:eb:28:d2:23:
77:ce:62:41:b0:13:d3:06:58:40:74:7a:5a:5b:19:f8:7b:5c:
24:2d:42:8e:27:16:4e:84:46:52:ff:88:b0:1c:be:6a:7d:f6:
a2:96:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:49 2025 by rpki-client