Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: QN5u5GE65aF+wjHqp80jUz4J5qLkttOPKxgkKB/0s2o=
Subject key identifier: 5C:A1:49:8E:CA:32:6E:D6:65:6A:5D:4D:B6:88:CB:01:06:3D:BF:E4
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019A4EBD546419E1936CBC8C7363A8E9CED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 12:00:22 +0000
Manifest this update: Tue 04 Nov 2025 12:00:22 +0000
Manifest next update: Wed 05 Nov 2025 12:00:22 +0000
Files and hashes: 1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: JnYxic3ULNnN8BCp3qpJ7SRqxCrgCh7dtU+mYi/uQP0=)
2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:54:64:19:e1:93:6c:bc:8c:73:63:a8:e9:ce:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Nov 4 12:00:22 2025 GMT
Not After : Nov 5 12:00:22 2025 GMT
Subject: CN=5ca1498eca326ed6656a5d4db688cb01063dbfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:eb:f6:c4:e0:00:30:c6:a1:0e:80:8a:12:
c8:a0:cb:f2:a1:06:e2:92:72:eb:ec:3a:10:d9:04:
91:fd:8c:9f:2b:41:a9:10:1f:51:02:c0:1c:63:57:
24:d1:cf:f3:3c:8f:34:f2:ab:da:41:f3:d8:95:3c:
37:e6:59:4f:22:3e:65:de:a2:26:46:fd:08:15:53:
c6:b9:63:fe:b0:8d:a4:59:a7:f9:0c:a8:4e:46:d6:
fc:f5:17:6c:46:f1:09:99:6e:b4:5a:d8:4b:18:1b:
30:2a:ca:36:16:ce:79:21:e1:0e:b5:29:f4:56:21:
41:00:af:64:88:c9:ce:65:9f:28:e1:c1:22:be:22:
27:a8:81:99:43:96:6a:98:5a:0e:94:f2:55:c1:a0:
9a:29:ad:3d:3c:b3:f2:a6:ba:53:d3:b3:f2:7f:a1:
86:70:3c:b3:43:cf:8d:87:ef:0f:29:02:0b:97:8a:
13:9a:04:e7:d1:7f:2a:e8:d9:d4:54:e8:d2:ad:de:
2a:b5:28:5e:ca:64:34:d4:ee:43:6f:2a:77:fa:bc:
e2:ae:db:49:d9:2c:8b:58:21:d1:93:17:c8:a4:2f:
ff:4e:e5:42:ad:d9:d7:fa:ce:05:03:3b:a5:6a:2a:
08:36:70:bc:7e:88:f3:de:eb:9e:8b:32:00:6a:bb:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A1:49:8E:CA:32:6E:D6:65:6A:5D:4D:B6:88:CB:01:06:3D:BF:E4
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:be:d1:e2:14:91:b6:17:89:d2:53:03:ba:f3:95:1b:b5:2e:
23:a8:b9:7d:90:c1:b6:b4:cf:38:64:5e:a1:72:98:cd:e5:72:
f6:c2:87:79:6c:e4:79:97:cd:e2:f7:f2:12:0c:2f:ea:a8:22:
a4:74:cb:cf:0e:e8:a5:3d:7a:2e:f3:60:a5:a6:b9:fe:fd:46:
4f:c8:77:1d:a5:14:5b:71:01:92:fd:df:ec:50:ba:f4:72:d1:
85:e7:69:86:a3:9f:d7:76:ce:65:01:75:48:1a:7a:7d:b0:11:
e6:b1:e5:39:af:14:33:97:33:8f:b4:7c:98:09:bc:01:5e:70:
7b:9e:e6:5f:1e:e8:94:15:70:7d:11:8d:30:e4:62:82:8c:15:
46:61:be:96:bd:1a:2c:68:ef:fe:e8:7a:9d:7e:36:bc:3b:6f:
01:2f:00:92:40:58:b3:39:9f:38:de:a8:a8:61:06:f6:cf:42:
07:ef:22:a4:16:e2:a5:02:8e:94:88:31:9d:33:74:43:ea:bf:
f8:6c:14:ca:73:0d:c2:56:8f:7b:61:76:a1:82:e9:70:d0:ca:
ed:18:8f:c5:da:cd:5a:b6:30:f1:2a:95:ac:8e:57:e8:8b:95:
53:af:e1:d0:89:3b:67:4a:00:fb:2b:c3:cd:f6:bd:b2:ab:e5:
9d:9c:ca:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:44 2025 by rpki-client