Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: 7+nzZFCM3AH1IUwEzi8URcRmINIKjHIzHLrj+xQxt8E=
Subject key identifier: 72:54:B1:22:00:41:30:84:7F:1B:EC:9D:31:D7:C3:32:1B:A4:F6:8A
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019A4EF44078210143F1B393989A2463CCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: yzB6lK9cOhXv1TC2eYvs6W0MjV4kXy4PDheULq0JUCA=)
2: VEEuJRf1IaY-i7njwh4GTFyz4KQ.roa (hash: K73j5BLwJXJOZ/R7FX/mXQkCi9Da4esGEBz7JkbDtTI=)
3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=)
4: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:40:78:21:01:43:f1:b3:93:98:9a:24:63:cc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=7254b122004130847f1bec9d31d7c3321ba4f68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:e6:99:81:75:d5:c3:c1:f4:24:28:de:3c:
1b:52:1a:f5:b6:cd:92:66:dc:43:a7:6b:d5:ba:ae:
99:1b:88:7f:84:0b:12:e6:9f:8f:b0:35:ae:82:a4:
d1:dc:64:b5:b7:1e:bf:56:e6:f4:c4:61:a0:cb:1f:
53:13:83:d9:9e:b4:8e:f4:ea:05:e2:23:30:17:69:
3f:89:f5:42:5f:22:cf:94:54:28:34:56:ef:a8:de:
9a:c7:cc:39:56:60:eb:68:1c:a9:02:07:25:73:a8:
1f:c3:87:31:73:7b:92:a7:02:26:02:1e:54:73:ad:
ba:d7:6f:cd:57:39:f0:eb:36:fa:ac:6d:c3:59:d7:
91:95:41:e1:30:ef:2c:9a:ac:28:6d:91:df:0b:79:
57:5c:5c:76:f5:47:2e:b1:27:32:69:f4:c6:da:a2:
87:9e:e5:6f:b7:36:b3:e3:e7:11:6a:3d:e2:45:07:
79:05:94:35:0e:d8:00:98:c4:64:35:c3:fd:cb:ba:
78:ca:ab:ef:f7:38:c9:8f:25:6b:ae:19:8a:37:70:
89:bb:6c:7d:e0:da:e7:ca:3d:f0:b9:96:d9:af:69:
2c:62:fa:36:5c:18:dd:24:ad:b3:f2:be:f3:a5:fe:
41:b0:89:e8:59:5e:82:62:3a:17:ee:d7:61:19:38:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:54:B1:22:00:41:30:84:7F:1B:EC:9D:31:D7:C3:32:1B:A4:F6:8A
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4d:6c:43:de:d2:a8:61:4b:83:ef:c3:79:da:96:48:89:41:
89:af:80:ca:db:5f:bb:33:28:ed:92:55:ca:42:c4:be:b6:20:
bc:e2:e6:79:93:0a:05:55:cb:fc:a7:57:e4:dd:40:b1:a1:d8:
13:80:af:e7:7c:83:49:78:36:45:9a:90:14:31:bd:ee:07:72:
42:ab:94:f5:2f:71:81:c1:af:d5:1b:1e:c3:62:aa:dd:66:ef:
44:72:f8:1f:43:c9:72:d5:38:31:f1:cf:38:f9:07:0f:b3:21:
7b:9a:ac:1a:b7:9f:16:b8:21:da:ff:7e:09:ca:8a:55:e7:66:
60:08:e6:07:00:84:bb:05:42:68:25:be:3a:f1:84:82:6c:49:
e7:e1:c7:2f:21:a3:4a:61:bc:cd:5b:c7:9f:23:b3:90:86:da:
0d:c9:a6:76:96:3e:96:98:f0:2a:d3:aa:08:6e:fb:fb:08:e2:
d7:4c:d8:21:89:b3:7a:fe:c5:68:01:b9:26:c2:b6:40:97:20:
09:9b:33:50:88:b1:4d:ff:59:13:9d:51:ea:30:83:71:62:42:
22:74:94:93:38:73:92:0b:00:33:81:e1:89:14:7f:35:b1:52:
aa:23:8d:cc:ee:3e:dd:72:a3:0c:bd:ac:73:ef:9c:ad:b5:51:
e1:f1:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:24 2025 by rpki-client