Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: T7HgPoanfWSO4vY6y+sztvYBJw2h4YziHQXITsmluOw=
Subject key identifier: 5F:BC:7D:31:16:71:9A:D1:85:2A:00:52:FE:55:D6:BB:98:C7:B2:68
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 019A02C77939E25FF5C32A00B2EA93EA73EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 0FD2
Signing time: Mon 20 Oct 2025 18:00:18 +0000
Manifest this update: Mon 20 Oct 2025 18:00:18 +0000
Manifest next update: Tue 21 Oct 2025 18:00:18 +0000
Files and hashes: 1: 1xdt--r7pLEFi9mXxf_8plnoO9U.roa (hash: uBNn/aL6HR9ZcIyFxzznkQDCk3CxgIi9L2wMoXNB7qk=)
2: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: my1bKY+38ZW8adNfFMYCuq8hoGZlyBP92gZ4MGN1aBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:79:39:e2:5f:f5:c3:2a:00:b2:ea:93:ea:73:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Oct 20 18:00:18 2025 GMT
Not After : Oct 21 18:00:18 2025 GMT
Subject: CN=5fbc7d3116719ad1852a0052fe55d6bb98c7b268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:cb:c6:7d:b4:08:48:0f:90:3f:82:cd:34:
88:38:4e:77:9a:3c:d1:ea:78:c5:02:4c:a5:c3:dc:
3f:77:cc:8c:f1:b1:f0:3f:6a:af:77:86:fb:b0:0a:
65:1d:69:33:80:8c:08:41:cf:82:c6:03:61:d8:be:
aa:47:ba:f7:f4:2a:86:6d:e9:c8:23:bb:cc:9f:a4:
c0:7a:2c:4d:58:ce:38:53:9c:d8:fa:5b:7f:d1:4d:
16:0a:73:14:ab:3a:26:fb:87:bb:a4:66:bf:96:29:
35:e1:df:07:62:8d:82:20:a3:74:41:61:fb:78:eb:
46:bb:db:e9:a9:e2:a0:8e:11:00:cf:43:b9:2c:be:
7b:5e:6f:8b:22:4c:59:c9:e9:2c:e0:8b:c2:70:9a:
42:35:e3:ab:27:25:95:21:c6:4a:28:13:46:e6:4a:
0b:58:0b:8e:45:af:a2:27:93:16:37:dc:28:73:23:
61:1b:b9:5a:44:4a:91:5b:c9:a1:14:62:06:b7:c6:
71:ff:01:80:89:5a:d3:52:27:a9:0e:c7:97:9f:ef:
f6:a2:3d:ef:03:37:ec:b8:d8:d8:88:6d:3f:8a:64:
a7:01:d3:f8:82:ac:c9:dd:b4:92:66:24:b2:da:ce:
c5:42:4e:c4:26:55:d9:d5:47:5a:f4:d3:5a:f2:28:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BC:7D:31:16:71:9A:D1:85:2A:00:52:FE:55:D6:BB:98:C7:B2:68
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6b:df:f0:93:6c:21:ba:f3:0c:27:02:72:47:d2:8c:14:6e:
4c:12:8c:cc:3d:e2:23:b8:5b:26:58:fe:f4:e6:c9:15:15:d2:
61:6e:0b:53:3b:34:0a:a3:5e:a6:a9:cb:2b:33:86:03:96:18:
83:f7:5e:73:b0:f4:a9:5c:ee:01:b5:61:c4:79:5a:e6:63:5a:
10:65:4c:a4:20:df:be:92:09:9c:4f:96:d4:ab:01:52:d3:83:
04:62:e5:9d:42:2a:7c:40:c4:06:3d:04:e4:5d:3f:16:98:d2:
3c:4e:45:f0:2e:95:72:03:c8:3c:b5:1f:78:89:2b:b9:6e:b7:
18:7b:8a:61:e0:f6:bb:64:92:ce:7c:26:67:1c:be:13:7b:b5:
21:8d:1b:17:3d:d4:88:c0:26:59:23:30:ae:42:4d:fd:b3:81:
cc:04:f7:5d:41:36:94:c1:01:46:ee:fb:3b:8e:2c:4c:d3:32:
33:85:3f:0a:f9:6d:d4:82:dc:e1:68:a4:b2:6f:65:e9:e7:9a:
42:41:1e:f3:d9:9d:44:35:53:f7:4d:4f:97:63:5c:e2:78:b9:
9d:63:3f:d0:93:da:b1:32:5a:25:d6:15:c9:fe:6d:b4:ef:87:
e4:bb:67:9e:2e:26:c4:d5:c7:93:b3:5b:1b:9d:69:79:0c:70:
65:d7:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:36:07 2025 by rpki-client