Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: oJr1tXfgWuMc4AaGYOocTxww6o4qpU3ARgBjfh/4vHo=
Subject key identifier: 29:A3:8F:D2:12:FA:71:F5:A6:0E:79:6D:7C:2E:87:65:29:61:63:EF
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019A247788A9861B2748F06CC2A3D910B2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 07:00:04 +0000
Manifest this update: Mon 27 Oct 2025 07:00:04 +0000
Manifest next update: Tue 28 Oct 2025 07:00:04 +0000
Files and hashes: 1: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: hkyALpbF/iktYuw+r2lbcBNZE2xYffVLgclHEP/FntI=)
2: VEEuJRf1IaY-i7njwh4GTFyz4KQ.roa (hash: K73j5BLwJXJOZ/R7FX/mXQkCi9Da4esGEBz7JkbDtTI=)
3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=)
4: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:88:a9:86:1b:27:48:f0:6c:c2:a3:d9:10:b2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Oct 27 07:00:04 2025 GMT
Not After : Oct 28 07:00:04 2025 GMT
Subject: CN=29a38fd212fa71f5a60e796d7c2e8765296163ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:85:4d:9f:d4:1e:32:66:4c:b0:69:68:47:
40:1f:5d:65:d0:54:bc:a4:6b:79:8f:41:c8:ca:e2:
2d:f6:ae:d8:11:89:59:5a:60:60:9b:9c:8f:2f:40:
59:a4:2b:af:7d:ce:3f:ef:ff:86:6a:5a:7e:9d:a7:
d3:96:47:26:4d:89:a7:84:1c:5c:8e:c8:98:3c:9a:
21:58:38:a1:69:da:48:9f:87:fc:83:2d:14:90:70:
5c:b8:ce:3b:a1:92:be:9f:c0:b9:4c:3d:f9:2e:8c:
91:2f:c2:81:2c:fb:27:81:67:2e:3b:c4:6d:97:b2:
25:27:f9:e8:34:e3:77:a8:42:f2:09:6e:9b:dd:6e:
65:56:86:1a:fe:7d:92:6b:2b:34:f2:5c:20:52:7a:
9a:d7:65:7c:3c:e8:1e:83:80:cc:15:54:7b:c1:c7:
26:d9:52:b9:42:a7:83:4a:ee:6b:fc:99:e8:ab:fa:
45:50:e8:9e:a4:79:70:d4:9c:a5:c7:17:f5:9b:c4:
1a:90:ca:c4:59:3d:84:ef:e8:06:92:79:ce:8f:88:
3b:0a:0c:52:83:e3:61:7f:4a:eb:0f:f9:7d:18:72:
25:bf:e2:5e:a6:cd:1f:fe:a5:6f:bb:ef:51:a0:dd:
e7:9b:20:54:c5:8d:45:38:d5:d6:9b:d1:a5:f6:6e:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:8F:D2:12:FA:71:F5:A6:0E:79:6D:7C:2E:87:65:29:61:63:EF
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a3:a6:eb:e4:8a:8b:2a:a8:49:d5:55:67:f5:39:c0:b1:23:
b8:92:47:7c:43:b4:96:d1:51:3d:19:f4:1c:e0:a9:7d:e0:06:
0f:aa:cc:4a:36:5c:fd:f1:e2:8e:73:17:ea:c7:8b:27:a9:31:
97:cb:0c:e8:98:a9:ef:3a:c1:71:4a:08:04:12:c7:b1:f5:b6:
d5:47:3d:7c:34:05:1a:c7:e6:1b:4f:2f:07:98:e0:91:da:40:
2a:f7:67:20:aa:cc:b3:5a:a6:72:9a:64:fd:11:7e:09:db:0d:
0b:78:eb:c4:29:a3:07:65:7f:bd:cf:d3:2c:af:ae:f3:3b:cd:
c6:1c:df:ec:a6:f8:9b:11:15:78:82:3b:fa:da:f4:48:03:0d:
fa:c0:53:7f:ac:d4:a8:df:6f:d1:e5:7a:52:d3:61:69:cc:a6:
66:63:37:ca:83:e9:11:78:00:47:af:93:72:46:2f:8a:98:c3:
94:02:e5:23:a4:5e:3d:1b:0d:7b:cf:31:93:4f:10:51:cc:e3:
16:41:e4:14:d9:19:e6:64:70:a8:7b:eb:95:b9:b1:47:ac:99:
1d:e0:f5:26:1b:87:18:73:60:df:ea:b0:3b:a6:1e:f2:59:72:
4b:d2:00:ac:9d:b7:17:ca:4b:f2:2b:c1:82:77:32:24:2a:db:
26:de:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:01:47 2025 by rpki-client