Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: 8Ukn2+adV4Mo/l+MeYG7cZa0TCwZUNnZQmsp5h31JS8=
Subject key identifier: 3F:BC:34:08:61:92:FA:EE:37:53:6C:DF:20:CE:DA:E8:73:E4:1F:50
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019A0B5CE3269EA7B5F189EADA80FA203719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 056B
Signing time: Wed 22 Oct 2025 10:00:27 +0000
Manifest this update: Wed 22 Oct 2025 10:00:27 +0000
Manifest next update: Thu 23 Oct 2025 10:00:27 +0000
Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: BKAStklh9aFqeT7E2LPP7XFm0isyqiExvlZegMWpyeI=)
3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5c:e3:26:9e:a7:b5:f1:89:ea:da:80:fa:20:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Oct 22 10:00:27 2025 GMT
Not After : Oct 23 10:00:27 2025 GMT
Subject: CN=3fbc34086192faee37536cdf20cedae873e41f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:ed:8f:80:04:c8:cc:c7:8e:23:23:22:bc:
81:60:b6:11:5a:a1:af:e6:16:f1:76:48:b9:5f:a1:
7e:44:95:4c:6e:ba:53:ab:50:e6:d8:a9:14:e5:82:
a5:d2:64:a9:32:d1:38:73:5f:5c:e1:d5:03:99:e8:
f5:d4:49:21:63:16:fa:dd:9c:d0:d7:cd:51:95:ed:
7b:28:1c:52:ee:95:e6:c0:60:83:c8:be:1c:d3:47:
57:81:22:80:ee:59:94:71:60:70:49:fd:fd:78:01:
df:bc:63:08:07:42:52:9b:70:fc:19:74:72:d1:be:
15:3c:c2:22:db:a9:9e:ca:7c:91:cf:2a:74:d3:6c:
e2:d5:0a:e3:f9:7e:87:8b:00:56:49:8d:74:13:2f:
5c:2c:0d:74:c4:5f:e7:fa:69:fd:1d:6e:be:2b:91:
86:49:da:b1:e6:68:dd:b7:1f:b9:0f:23:52:e7:23:
af:b7:e4:06:1c:df:29:a6:23:3d:c4:83:24:a8:99:
90:b5:97:9b:f7:f7:60:be:ce:09:84:54:19:2e:4d:
b6:87:23:a9:4e:c2:07:9f:55:fa:16:c9:bd:70:d7:
a0:67:c4:f1:64:3b:69:5d:b6:ef:75:90:ac:8d:32:
9a:27:4c:77:dd:34:6b:7e:97:29:35:de:78:9a:5e:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:34:08:61:92:FA:EE:37:53:6C:DF:20:CE:DA:E8:73:E4:1F:50
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:07:3d:0a:22:7d:6a:27:75:15:34:3c:45:c2:23:9d:de:61:
46:67:1c:4f:9a:c9:6e:13:03:f5:c5:4d:a4:9f:88:71:8f:3e:
0f:ab:d2:ce:15:cb:d4:9e:7c:4e:ff:b0:64:a1:cf:11:9c:6f:
7f:67:ef:34:7b:d9:15:28:01:f9:9e:6d:9f:42:b7:88:9f:49:
c0:46:48:11:9e:50:08:cc:5a:ee:d1:68:c8:4c:ad:30:36:61:
74:11:72:fb:95:30:a1:64:ed:0f:cf:3d:0e:1c:97:a4:02:b8:
c7:05:ea:9f:dc:e0:5b:5a:5c:18:32:af:33:03:1b:ae:13:6d:
22:9b:f3:f7:31:16:42:2b:4c:bb:28:89:a7:a0:fa:79:ba:00:
de:14:d4:b0:84:19:c6:f5:d7:53:f6:5f:05:5e:59:cd:41:7b:
15:61:8d:fd:fc:f4:0f:35:9b:cc:58:41:a3:4f:39:cb:05:be:
1c:5b:28:ec:88:52:71:82:85:12:25:fc:23:c3:d1:be:88:f2:
05:4e:66:b3:9b:a4:35:7d:af:80:57:b7:22:2a:55:9a:22:41:
9e:1e:7b:0b:92:e8:78:6e:64:45:79:c3:8b:cf:7b:47:7c:18:
14:f4:3a:12:06:72:08:e8:4f:67:0d:b9:8b:84:6e:e1:96:3f:
54:86:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:44:53 2025 by rpki-client