Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: rabDnsZEHGCI1IMz6hMHiGpJZY9DmLPJy1zulGCdGZE=
Subject key identifier: 5C:4A:FF:D0:2D:FA:DD:B3:14:F0:08:B6:41:AF:9B:F0:06:BE:25:50
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 019879E41A9D19F020FA907FA1025B65A649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0B49
Signing time: Tue 05 Aug 2025 11:00:48 +0000
Manifest this update: Tue 05 Aug 2025 11:00:48 +0000
Manifest next update: Wed 06 Aug 2025 11:00:48 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: wFo3XnaznvPTatcSSZqKHTHYh0ktkh1tun8Lm15EAIs=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:1a:9d:19:f0:20:fa:90:7f:a1:02:5b:65:a6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Aug 5 11:00:48 2025 GMT
Not After : Aug 6 11:00:48 2025 GMT
Subject: CN=5c4affd02dfaddb314f008b641af9bf006be2550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:f2:dd:9b:1f:9d:23:a4:0a:6a:b3:1f:be:
b1:33:e3:c2:76:78:1a:3f:5c:f4:c1:4b:1b:ab:d6:
68:b3:d3:22:7f:c0:9a:df:71:6c:40:2c:95:2c:4d:
91:d4:52:ee:22:f3:d4:5a:06:61:92:91:6f:4a:8d:
a1:bb:9f:80:88:ba:53:e8:04:0d:02:ee:18:e0:34:
b9:d2:c0:09:d7:55:37:18:8e:a7:0f:50:ef:88:aa:
a8:8b:22:07:65:20:f3:a8:03:cd:91:8b:ad:54:c4:
f2:ed:15:92:39:e4:a7:7b:87:0b:01:a6:33:2b:ac:
b6:a7:96:d6:25:3d:b8:76:92:ca:30:a6:42:3f:a6:
c2:e2:fc:29:8b:a1:00:f1:00:65:95:08:db:be:8c:
07:2b:3b:4a:77:c7:8f:ca:f1:13:df:5c:5f:e6:b3:
9e:be:07:d3:e7:9a:9f:4f:81:23:81:15:ce:a3:f2:
5e:71:96:b1:81:77:a3:22:59:8d:a1:76:82:e6:03:
e9:79:30:8d:b5:48:85:9a:3c:44:89:6a:e8:10:d6:
1d:99:e1:47:b0:ec:59:51:91:e3:00:10:7f:9e:2a:
d0:bc:90:7f:71:86:28:0a:e1:00:06:c5:bc:d9:79:
f2:99:9e:a4:75:89:fb:e1:fc:b1:a3:1c:78:22:50:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:FF:D0:2D:FA:DD:B3:14:F0:08:B6:41:AF:9B:F0:06:BE:25:50
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4f:09:4d:c9:8e:0d:1f:6e:1a:ae:5c:5f:30:b9:c2:c0:3f:
cd:e0:31:1d:9d:2b:1f:13:90:82:81:79:e9:e4:9f:07:28:20:
90:4a:e9:30:3a:a9:d9:95:4e:b7:fb:7f:b5:74:00:e4:06:a6:
2b:c6:b5:93:02:5d:83:93:e3:80:b3:53:b9:95:db:02:d8:3a:
9d:b5:ad:db:3f:10:89:10:fb:1c:d9:2d:41:75:48:c3:65:57:
28:c4:c9:86:6f:01:02:e6:b5:60:6b:0b:a5:08:06:8b:f2:f6:
42:be:7b:71:57:72:eb:84:0f:6e:ab:69:50:d5:8c:72:a6:9c:
ab:3c:15:00:00:d3:0c:28:cd:03:ca:af:71:e8:49:f2:12:5f:
d9:d2:07:66:29:f9:b2:f7:7f:a5:fe:5f:a1:d3:e2:06:20:99:
c5:26:b3:22:d2:e5:56:c8:77:0c:ee:af:59:a1:34:af:9f:96:
90:18:2f:ea:55:17:26:d1:93:ca:ed:dc:6e:42:76:fb:97:b8:
a5:e1:22:30:72:e9:65:1a:92:b9:09:07:cc:40:c5:8f:db:4f:
a8:97:c9:66:f3:5d:e8:8c:66:74:05:9c:90:7e:ae:da:fd:a5:
0a:34:ca:9e:7c:94:dd:aa:b8:e2:a8:e1:e6:8a:e4:f6:8d:3e:
95:9c:7d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:36:47 2025 by rpki-client