Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: M4AZmbhaBiDBQGP1pFHnX3Je7yB/EkPwHbr8T6PcoVg=
Subject key identifier: 8B:1C:1A:4F:DF:F6:BB:AE:EE:2A:4E:DB:D6:FC:D2:42:2B:2C:9A:61
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 0199FC21AEC1D583DEE4A39EEADFC6AB3B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0C11
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: jOWQFi4fpvmTLc6fla7mGGFJOcqQtcDPkntw11qntzw=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ae:c1:d5:83:de:e4:a3:9e:ea:df:c6:ab:3b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=8b1c1a4fdff6bbaeee2a4edbd6fcd2422b2c9a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:75:6f:4b:5d:f3:c0:e7:0d:ea:d3:06:0b:
fa:df:23:ff:79:59:8d:ce:66:de:99:92:2d:8c:57:
b5:b7:4d:c5:2b:4a:2d:99:ef:67:f2:af:a7:1b:7d:
fb:28:60:aa:cb:25:b2:a2:3b:c1:29:9b:ac:87:67:
78:bd:c8:36:a6:83:51:97:5c:a4:50:72:56:0a:73:
c5:f9:1e:85:7f:66:0e:fb:cd:bb:4e:3a:e4:ff:e9:
39:28:cd:6d:ce:1e:b5:40:eb:90:ce:e1:6c:5e:86:
5b:e1:fd:84:2e:d4:51:9c:21:9a:5f:fe:74:fc:71:
54:b1:c9:15:78:cb:7c:e2:6a:df:cb:bc:8b:1d:02:
ee:3d:9d:71:53:9b:50:01:d5:10:3a:f6:ba:dd:41:
55:d9:f0:f7:b8:0f:f6:dd:9d:fd:e7:c3:f8:1c:29:
99:9b:a2:51:fe:c0:49:49:60:10:34:22:b0:7f:c4:
46:d2:c3:ab:79:45:1e:d9:ff:72:33:6d:73:78:f7:
f5:7d:a1:1c:ac:90:bb:db:28:c0:0e:ba:a8:f1:9a:
0b:7a:aa:61:11:8c:7f:51:04:f7:71:4f:d1:74:cd:
28:d3:ce:c3:d0:a7:22:c2:e0:67:a9:b8:f4:2e:7c:
b7:e8:a3:bc:09:64:f9:e5:92:2b:77:7b:73:c0:96:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1C:1A:4F:DF:F6:BB:AE:EE:2A:4E:DB:D6:FC:D2:42:2B:2C:9A:61
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9d:14:ba:65:79:b3:c2:f6:e8:af:d8:06:3f:d2:11:e2:7c:
08:ac:69:2f:1c:90:24:88:52:a4:17:38:a1:f6:04:08:03:65:
d4:c7:a9:c0:83:fb:72:55:28:bc:21:fb:35:f4:92:57:37:3b:
45:db:60:7c:db:3c:06:30:37:9f:db:d4:83:17:9a:f1:6e:ff:
7a:35:ed:68:b7:43:34:cb:eb:40:df:ed:13:b1:bb:c2:01:34:
5b:95:c6:c5:f9:e3:ba:05:f6:52:cc:66:de:2f:74:70:06:56:
9e:c4:f9:bd:11:fe:2e:0e:f4:f4:dc:fb:1b:22:a5:c5:ac:44:
47:8c:0a:fc:7f:dd:bf:56:85:ef:e8:45:d8:79:00:f8:2f:dc:
1a:9b:b1:1c:cc:3d:e7:b1:a1:5f:33:fc:a1:b7:6c:96:76:6f:
79:49:e4:c2:24:38:27:2c:aa:83:63:7a:4b:f2:19:44:ce:81:
7a:49:9d:f5:f6:2c:32:ac:23:db:f3:fa:68:95:4a:5e:4c:ed:
89:94:50:3a:a0:5b:40:e4:9e:1c:59:bd:79:89:11:09:d0:0f:
80:79:a5:e8:36:14:2f:e1:3e:3a:40:e4:cd:f1:ef:bc:74:b4:
41:33:10:2a:ae:e7:c5:58:6f:70:23:78:a6:94:4b:32:47:80:
ce:07:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:13 2025 by rpki-client