Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: 9txVWWXLq1YqFF68Ij9MZ/xCzCT1epQnJAgS9/J8dDI=
Subject key identifier: 0A:1E:95:9B:91:08:F0:1A:67:1C:92:73:4D:70:5A:23:77:E8:CC:8D
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 019A4E867B7A34363FD6568EDE53679A0DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 1444
Signing time: Tue 04 Nov 2025 11:00:27 +0000
Manifest this update: Tue 04 Nov 2025 11:00:27 +0000
Manifest next update: Wed 05 Nov 2025 11:00:27 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: YAXLYTXD5qe93X6KDv6UP1zAbqJlwFi4cfY1BtPugDM=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:7b:7a:34:36:3f:d6:56:8e:de:53:67:9a:0d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Nov 4 11:00:27 2025 GMT
Not After : Nov 5 11:00:27 2025 GMT
Subject: CN=0a1e959b9108f01a671c92734d705a2377e8cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:2a:e4:ac:e0:3d:20:1f:83:41:b1:51:e9:
8f:25:bd:26:a8:6a:69:f3:7b:67:93:41:77:d5:58:
e3:53:00:5f:15:09:5d:81:2f:42:d8:72:00:6d:27:
98:ba:21:7b:81:76:6d:d5:0c:83:cf:16:7d:c3:f3:
0c:65:8d:13:b0:f7:50:59:33:ae:ab:26:14:99:4e:
77:62:83:e7:94:b7:e0:b6:c0:93:38:3d:9e:5a:50:
80:2f:84:ea:d4:09:c4:c0:fd:60:8e:3d:33:89:35:
4a:3e:5b:d6:1e:6d:f2:4c:72:ed:61:15:16:c6:1a:
84:d8:f2:a6:c4:91:e1:43:ac:d9:ae:2a:d5:46:a1:
3f:a0:4b:5a:ce:13:3a:09:c3:86:b2:6a:34:42:9f:
32:d3:ff:8f:2b:aa:38:82:49:a0:b1:41:0a:93:2d:
1d:dd:84:36:84:f1:58:31:89:36:2c:93:6e:89:c2:
82:76:27:1c:7e:80:68:a8:78:af:e0:5c:90:b5:4c:
60:04:c1:24:bb:74:eb:2d:98:96:37:cf:7b:ba:3b:
e8:06:8a:a4:d0:8d:e9:ce:07:78:63:4d:ce:2d:81:
bc:5e:22:3a:fb:7d:5c:86:bb:e1:b9:3f:34:b8:65:
6b:dc:68:c8:cf:cd:93:6c:11:bb:4b:af:6a:43:37:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1E:95:9B:91:08:F0:1A:67:1C:92:73:4D:70:5A:23:77:E8:CC:8D
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:96:6d:3d:b5:e8:39:51:37:8c:18:bd:be:fd:d4:66:4a:32:
3e:a7:89:d8:07:a2:64:e3:02:5a:c1:0d:57:e6:f5:b9:e9:e4:
57:76:58:e7:82:aa:2b:5a:08:49:b8:96:4f:f6:18:b6:e9:8f:
f5:c2:26:28:a1:5c:56:71:39:0c:d3:e5:b0:f1:79:e9:3e:97:
56:58:2d:5b:b2:af:d7:75:0e:f2:6f:ed:24:d3:80:17:ac:9b:
9f:fd:dd:f6:e9:11:8e:4e:bf:04:91:21:f7:ce:72:20:95:d2:
35:24:ef:29:7b:5f:7e:a9:df:d6:20:48:04:5e:26:ea:b6:b1:
aa:f9:9a:cb:a0:67:3d:53:ee:2b:a2:20:c8:5c:b3:0f:df:0e:
cf:e7:b9:bc:89:b9:95:f1:4f:d3:5b:90:a6:f0:f7:16:ff:38:
6f:c4:07:d7:63:e9:eb:fd:5a:d3:15:2a:b9:63:4c:a4:f2:a7:
09:74:42:ab:2e:a4:80:5d:8f:c3:32:21:6d:c9:f2:59:ca:3d:
64:a5:6a:5c:61:01:0d:e4:f7:5a:49:a2:65:c9:c2:a4:8a:d7:
3e:72:e9:b1:35:ff:45:d7:f9:d8:31:37:6a:08:52:d8:16:d7:
78:f7:5c:ac:0c:81:d4:ec:e3:30:bf:43:7c:59:35:82:90:b0:
e9:6f:4a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:44 2025 by rpki-client