Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: ISFUcJy/RyT1UcYAZvWJVe/0xBsEmoESMR7bhxkVMqw=
Subject key identifier: 3C:37:D4:61:A3:56:DC:B7:DD:C2:17:43:DF:79:33:0C:88:71:33:B0
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 01984A7793E0B3845EB7D7B6E0AC14BFEBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 0EEE
Signing time: Sun 27 Jul 2025 06:00:07 +0000
Manifest this update: Sun 27 Jul 2025 06:00:07 +0000
Manifest next update: Mon 28 Jul 2025 06:00:07 +0000
Files and hashes: 1: 1xdt--r7pLEFi9mXxf_8plnoO9U.roa (hash: uBNn/aL6HR9ZcIyFxzznkQDCk3CxgIi9L2wMoXNB7qk=)
2: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: SeCDe6E3pKr9Yp8i7eGXqglATr/Umj8Yj1JrXM5Afhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:93:e0:b3:84:5e:b7:d7:b6:e0:ac:14:bf:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Jul 27 06:00:07 2025 GMT
Not After : Jul 28 06:00:07 2025 GMT
Subject: CN=3c37d461a356dcb7ddc21743df79330c887133b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:8d:4a:bf:21:37:9f:46:b4:4e:32:4e:2a:
fb:48:c1:b0:a7:63:f9:c3:7f:8d:fb:74:68:e1:60:
38:b5:05:a3:3f:af:04:ca:56:94:2c:f3:95:2f:5d:
08:54:2a:5b:b1:b7:5c:16:89:17:d6:cf:3f:ea:96:
79:3d:83:37:9d:ff:a1:e9:e7:a6:fd:0e:e0:8e:eb:
e8:1e:f6:9c:e8:ce:a0:0f:52:eb:4a:07:4d:f7:d0:
7c:d6:f4:18:ad:fd:7e:f1:f2:6a:de:22:1d:ac:63:
48:2b:3b:d6:c7:08:5f:c1:3e:65:8d:f5:79:da:1b:
f7:d8:2c:c3:35:54:07:15:f5:38:e2:43:01:54:4c:
c5:c3:0d:37:8b:f1:c3:3c:3a:78:45:29:d6:a3:e6:
17:a8:30:b6:d2:1b:da:88:f5:c7:57:bd:7a:af:75:
9a:09:81:d7:af:27:d7:c5:22:00:e9:4b:0a:7f:15:
55:bb:d3:1a:b6:ff:fb:25:4f:a9:f9:f1:e2:dd:79:
21:50:53:5d:f6:67:04:4a:3c:35:b7:c6:1e:07:fb:
fb:f2:a9:6f:4f:80:22:c9:f0:3c:13:39:9b:59:a0:
9c:4a:dd:5a:49:82:81:f3:23:2c:94:06:9f:a7:c9:
72:d7:04:c2:db:8c:45:97:b1:51:8d:1c:70:ca:90:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:D4:61:A3:56:DC:B7:DD:C2:17:43:DF:79:33:0C:88:71:33:B0
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d7:79:fc:1b:cf:dc:88:47:bd:da:21:75:16:82:31:70:29:
e8:e0:65:ec:9d:27:31:a0:4e:13:cb:41:2a:45:e3:73:a5:26:
ae:7c:d0:88:39:90:24:fc:28:6b:96:f6:db:62:49:da:6f:b2:
1b:dd:2c:a1:30:92:52:4f:29:fc:48:ff:60:1f:cc:a7:fa:52:
b1:dc:cb:6f:7c:01:48:c0:c5:5b:f8:fb:75:a9:e7:3c:19:b5:
0c:2f:91:a5:13:0a:12:98:2a:e5:7d:bf:3e:81:75:0d:25:7c:
02:c6:8d:18:f5:5b:24:6d:f6:84:97:97:a8:81:7d:bf:06:fb:
68:51:48:d5:90:44:f3:c5:da:6c:fe:20:0a:27:93:36:b3:f4:
fb:e2:21:df:c9:70:02:52:f6:9f:da:0f:ef:3a:bb:03:c4:5e:
a0:ae:8c:e8:2e:44:e5:8c:93:7e:30:b4:ff:96:7e:76:a2:f2:
51:0b:7e:e0:7d:54:48:4b:df:86:5a:93:51:ca:bf:d4:ed:8e:
0a:8c:07:08:d8:88:49:46:aa:d8:b0:71:4e:bf:4d:6b:d5:96:
48:92:5e:4b:3e:90:20:8c:d4:25:14:25:30:b1:b0:d4:b7:66:
ad:21:c0:f5:df:57:6e:32:65:03:f3:a7:c0:c7:7e:b2:02:a6:
58:22:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:15 2025 by rpki-client