Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: 0v0PEhJq9W/RulF0AYOR1dGt6kYREIo8CExm8d5Q5to=
Subject key identifier: 65:45:98:5F:14:CF:51:80:11:57:A9:BB:64:55:84:F7:4D:97:58:72
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019A1B3E6227B2E4DC8D233C6CB9567B60AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 07EE
Signing time: Sat 25 Oct 2025 12:01:04 +0000
Manifest this update: Sat 25 Oct 2025 12:01:04 +0000
Manifest next update: Sun 26 Oct 2025 12:01:04 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: Iakr71B9+dZtOUqkcbqcbO0C+lue0NRbo6KT004IlOU=)
2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:62:27:b2:e4:dc:8d:23:3c:6c:b9:56:7b:60:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Oct 25 12:01:04 2025 GMT
Not After : Oct 26 12:01:04 2025 GMT
Subject: CN=6545985f14cf51801157a9bb645584f74d975872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bf:e5:39:fc:22:93:77:f1:1f:50:ee:69:69:
e6:bd:9a:ef:34:57:bd:37:e1:97:af:2b:c0:bd:da:
be:00:b5:66:2b:3d:6b:7b:0e:74:99:9c:3a:9b:b1:
85:3e:6c:8e:62:17:0e:fc:79:ef:4c:22:3d:70:d8:
78:4e:75:a9:6b:4e:4f:e8:ac:44:5f:54:12:3e:b1:
28:0a:69:01:00:2b:76:e3:45:c9:da:72:68:1f:69:
82:74:58:9b:92:a5:93:08:14:7f:63:81:9d:e0:f2:
72:40:75:9a:5c:70:99:1d:12:da:ea:3a:6c:b9:9a:
52:fe:50:ee:e2:f8:34:70:ed:f9:f9:15:74:7f:f7:
c1:b4:94:60:5f:03:a8:2a:d3:58:26:80:4e:c1:7e:
a4:8f:d8:1d:be:8f:19:df:6a:b0:2c:9a:78:2a:54:
b5:80:7c:4c:07:c5:1e:af:1b:33:0d:22:43:bb:2c:
e6:85:36:94:51:8f:3b:d5:aa:9a:48:26:3f:0f:36:
20:59:dc:08:da:5e:9c:80:ee:ee:43:45:ca:04:2e:
e4:e1:1a:aa:d5:7c:f1:ed:d8:14:4e:e7:e9:48:c3:
6f:1b:89:2c:27:da:82:47:24:83:e2:26:a9:a1:ea:
a6:9b:64:c8:a8:ac:40:45:55:69:2a:3c:ca:ea:57:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:98:5F:14:CF:51:80:11:57:A9:BB:64:55:84:F7:4D:97:58:72
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:13:9c:03:fc:c3:71:27:d4:91:f6:c3:9b:f8:ee:0e:3d:fd:
22:54:7a:fc:ba:02:64:a8:c4:7b:55:21:5f:5e:1f:9b:68:ad:
85:b9:38:43:87:76:c3:5d:53:1c:8d:87:b8:c6:bd:2e:b1:4a:
15:8d:6c:25:1c:98:4c:74:6a:e4:07:c8:07:58:e8:d4:3a:29:
c7:28:f1:02:05:f7:9a:48:4b:66:7d:29:29:3d:5a:a2:91:c3:
46:02:8e:47:40:67:07:05:2a:bb:13:c3:d2:db:d2:fe:37:b7:
9c:46:7c:72:45:e4:d3:6e:10:ea:c4:d5:d8:86:2a:2b:bb:66:
da:7b:1f:dc:70:c5:36:1c:16:c4:e2:d3:d0:3f:11:5a:37:a6:
78:e3:13:60:7e:38:60:02:7c:5d:f5:b0:81:12:d6:f8:1b:77:
78:a3:a4:f5:e3:8a:88:63:96:5b:a6:62:04:6a:49:59:0a:24:
9b:71:5b:ca:8c:43:e0:3c:f5:63:be:50:3a:92:ce:fc:5d:55:
cb:c7:d2:fd:e5:d5:a6:2f:85:12:12:0c:22:5b:b6:96:4a:7a:
bc:f9:81:54:a5:2a:47:9c:a7:87:1b:f6:18:9a:f9:96:f9:cd:
0e:ba:f3:ea:6b:a2:76:25:74:5b:db:a3:36:aa:c6:7c:af:05:
c8:c3:fa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:06:16 2025 by rpki-client