Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: j8ILJxyY7L8ruk/Ldkfa4tS6Qc58423NHeLxsLfLb1Q=
Subject key identifier: FE:2C:28:0F:37:F9:13:BF:CA:CC:96:2F:7C:9B:47:03:87:BA:E5:95
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 0197B6D77CAAAF07BC4B7C32CE492239F36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0AE4
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: GzMkIuL/Nv7JEGXL5W8NB4RokgSMJ8uTVZuHfiQWxAw=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7c:aa:af:07:bc:4b:7c:32:ce:49:22:39:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=fe2c280f37f913bfcacc962f7c9b470387bae595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:77:a1:8a:df:b3:80:48:1a:da:6d:f4:15:
cf:90:ce:b6:cb:7b:90:d7:eb:00:07:80:c5:0b:38:
69:1b:69:e1:8a:28:97:85:24:08:4b:0b:ba:da:8e:
94:1d:5c:a1:af:2c:61:12:30:7c:08:2a:8b:04:82:
83:1d:db:bb:e2:41:4b:1a:83:57:13:2e:57:0e:13:
a6:57:ed:6e:bb:3f:6d:e2:a7:9c:4a:de:e2:b6:74:
18:9c:f3:f0:93:86:aa:5c:d0:ff:97:a2:30:4b:23:
5e:92:98:f6:b8:f9:59:71:87:54:82:0c:a4:df:0e:
63:40:69:66:86:7d:e3:3c:45:3a:2e:e4:2d:7a:b9:
c6:db:69:2a:dd:17:b6:3b:2e:d9:af:57:e9:e8:7a:
3b:9b:aa:10:f4:e7:58:6e:3a:f3:29:4e:21:a6:cd:
68:95:c8:a8:9e:5d:21:a2:69:bc:c9:d7:22:3e:69:
66:5c:c1:64:12:fa:f8:71:70:bb:d0:60:a6:6f:a3:
2a:d7:9f:9d:22:29:d5:04:6c:f7:fc:0e:24:29:b0:
ad:d4:19:b0:ba:b7:c5:44:f3:a5:98:b5:0c:70:f6:
6c:0e:42:16:63:2d:78:3e:c2:ae:55:fe:7f:e3:49:
5b:93:3a:34:34:25:8e:f1:46:79:2e:84:df:eb:0f:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:28:0F:37:F9:13:BF:CA:CC:96:2F:7C:9B:47:03:87:BA:E5:95
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:67:37:48:90:b7:6d:a5:16:c8:4b:7c:85:eb:61:39:be:e4:
03:ca:52:6e:f6:16:74:e9:89:89:f8:df:73:3d:af:14:2f:74:
47:d6:94:3b:b9:0d:a9:90:e0:ac:81:c6:74:3b:02:e0:25:0d:
fb:22:b9:6d:56:80:4c:e8:de:0c:7e:48:59:3a:69:90:3c:b3:
ec:64:ca:92:79:14:d3:c6:36:e2:19:06:6b:37:a7:d7:4c:f1:
bd:fa:f1:ff:ab:ba:a3:b4:19:99:b1:db:d3:96:e1:63:00:f2:
fe:54:ba:fe:6b:19:65:85:ec:a0:49:fe:b6:56:11:01:8c:33:
38:9a:67:8e:02:07:55:6e:32:8d:21:67:03:ac:56:4d:f6:b7:
79:60:41:99:90:c7:cd:1d:9f:b9:18:0b:ce:30:c6:9e:39:31:
32:54:c8:92:a2:1d:a4:98:a1:8a:01:b8:3e:30:8c:55:fa:e8:
8f:31:12:ce:a8:b1:1e:3c:5e:5d:4c:a0:84:42:e9:02:1e:53:
34:a9:06:4e:59:fa:12:5c:33:c3:37:74:0a:4d:2a:13:93:37:
81:2a:c8:a9:b0:c5:ea:0e:69:9a:21:14:ed:07:3b:41:6a:c5:
8c:48:3c:77:e0:14:8f:2b:bd:76:08:c3:7c:74:21:08:8f:01:
80:d0:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:31 2025 by rpki-client