Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: xYvR5DmJ8uPYb/ExvMSHfwo8kEA49UbcuzsmLnA4GSE=
Subject key identifier: 35:00:03:D6:FF:D9:49:4A:46:35:43:F6:3F:87:57:23:B7:B6:8C:FB
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 0198499C2BE0746340F25F4E6F725CF72D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0B30
Signing time: Sun 27 Jul 2025 02:00:28 +0000
Manifest this update: Sun 27 Jul 2025 02:00:28 +0000
Manifest next update: Mon 28 Jul 2025 02:00:28 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: is72vBj229YOvebwfsXHDCXfRyYinLGf5n5qK97X7rg=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:2b:e0:74:63:40:f2:5f:4e:6f:72:5c:f7:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Jul 27 02:00:28 2025 GMT
Not After : Jul 28 02:00:28 2025 GMT
Subject: CN=350003d6ffd9494a463543f63f875723b7b68cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:aa:53:4e:b9:13:73:42:1e:e2:3c:6d:8e:
9e:0f:67:7d:6c:4e:42:c6:84:85:fe:31:8d:a9:bf:
92:b3:72:31:13:c4:49:f2:cc:af:d3:5e:8f:ab:32:
ad:24:06:35:54:f8:5c:4f:06:2f:37:93:45:3d:d3:
4e:2d:17:4f:5d:d2:cc:ea:f8:f8:0b:40:37:42:8d:
45:00:5c:1b:8b:4d:59:3e:62:1a:39:f1:d8:32:3a:
35:08:97:14:5a:d9:f9:e3:bb:3c:44:06:f4:9d:56:
c8:53:8d:51:d8:28:14:79:16:cb:7b:a5:6f:e0:0b:
81:f8:7a:8c:6c:a7:13:8c:e2:e6:be:c1:e3:9b:62:
6b:1a:ab:0a:a0:69:0e:8e:b8:e8:58:b2:2a:79:94:
88:ce:0a:9a:a1:3f:a0:c4:07:e6:8d:6f:1e:8c:2c:
e3:2d:c4:8b:5a:cc:b2:85:b5:50:8b:4a:ef:58:7f:
da:f7:ce:87:97:50:e6:a0:37:98:86:6b:07:ae:ff:
27:0a:c1:7f:a5:f5:76:dc:d7:35:c4:4b:84:ce:30:
5c:81:75:47:ed:ea:52:af:38:70:e2:98:4e:d8:f3:
e4:65:ee:ae:1c:7d:9f:6f:ad:ab:a7:22:b5:69:d7:
e0:98:b4:21:4a:16:cf:45:a1:4c:52:f9:1e:ba:fc:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:00:03:D6:FF:D9:49:4A:46:35:43:F6:3F:87:57:23:B7:B6:8C:FB
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e4:1a:1d:c3:b7:dc:ed:aa:eb:53:05:51:1f:48:34:44:39:
c6:d9:a0:aa:a3:fc:a7:8a:0b:03:42:b0:fd:bd:4b:09:f4:03:
00:e6:e7:a6:03:a8:94:ac:2c:e0:78:3e:f2:fd:8e:b8:04:b6:
59:f9:fe:71:a8:1e:dc:a3:d5:8d:2f:3e:b1:d8:af:df:f8:49:
2f:c4:b9:69:c2:b7:56:5f:ae:f4:87:4f:78:89:86:8a:79:b8:
16:7a:cc:68:5e:b3:54:f3:23:1f:9a:70:bb:52:24:32:eb:62:
77:8c:b2:58:a5:ca:ea:be:dc:52:67:8a:de:f5:4c:5a:57:55:
f2:27:14:07:fd:1d:15:80:4d:af:d9:95:f9:80:8e:1f:28:7c:
ff:d4:e0:5a:e9:c7:eb:99:d5:d8:8b:0e:88:1b:14:02:ec:80:
7b:0f:c8:c5:60:f4:a6:ad:89:0b:8e:c7:31:a1:60:8d:0f:d1:
ce:08:ba:c0:0a:75:c3:28:19:df:ee:83:ed:c7:f3:3f:6b:18:
81:78:9f:46:a7:d7:79:90:e8:41:88:3f:cb:ff:7d:32:8b:b8:
b3:b8:56:d0:5b:91:e8:ba:d7:39:cf:4d:8f:15:2d:4f:55:c5:
43:e9:e8:49:14:fd:c9:38:32:5c:f5:35:ea:d9:1a:d1:f0:7c:
51:f2:20:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnCvgdGNA8l9Ob3Jc9y0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzgxN2ZlNDg2YWM3N2JlOTRlMjk3YWNlM2E5NWNmMjdk
ZmZiMWEwHhcNMjUwNzI3MDIwMDI4WhcNMjUwNzI4MDIwMDI4WjAzMTEwLwYDVQQD
EygzNTAwMDNkNmZmZDk0OTRhNDYzNTQzZjYzZjg3NTcyM2I3YjY4Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmumqU065E3NCHuI8bY6eD2d9bE5C
xoSF/jGNqb+Ss3IxE8RJ8syv016PqzKtJAY1VPhcTwYvN5NFPdNOLRdPXdLM6vj4
C0A3Qo1FAFwbi01ZPmIaOfHYMjo1CJcUWtn547s8RAb0nVbIU41R2CgUeRbLe6Vv
4AuB+HqMbKcTjOLmvsHjm2JrGqsKoGkOjrjoWLIqeZSIzgqaoT+gxAfmjW8ejCzj
LcSLWsyyhbVQi0rvWH/a986Hl1DmoDeYhmsHrv8nCsF/pfV23Nc1xEuEzjBcgXVH
7epSrzhw4phO2PPkZe6uHH2fb62rpyK1adfgmLQhShbPRaFMUvkeuvxggQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUAA9b/2UlKRjVD9j+HVyO3toz7MB8GA1UdIwQY
MBaAFArIF/5Iasd76U4pes46lc8n3/saMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEt
ZDdmYzhjNWQwMGFhLzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEtZDdmYzhjNWQwMGFh
LzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuQaHcO3
3O2q61MFUR9INEQ5xtmgqqP8p4oLA0Kw/b1LCfQDAObnpgOolKws4Hg+8v2OuAS2
Wfn+cage3KPVjS8+sdiv3/hJL8S5acK3Vl+u9IdPeImGinm4FnrMaF6zVPMjH5pw
u1IkMutid4yyWKXK6r7cUmeK3vVMWldV8icUB/0dFYBNr9mV+YCOHyh8/9TgWunH
65nV2IsOiBsUAuyAew/IxWD0pq2JC47HMaFgjQ/Rzgi6wAp1wygZ3+6D7cfzP2sY
gXifRqfXeZDoQYg/y/99Mou4s7hW0FuR6LrXOc9NjxUtT1XFQ+noSRT9yTgyXPU1
6tka0fB8UfIguQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:57 2025 by rpki-client