Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: nMCAR2MhQoZL5n699oaq7gODD8Uj/m36AOnYtsFO5uI=
Subject key identifier: 8C:44:DC:F6:EA:32:38:8F:62:8D:AB:DA:F5:D0:BB:62:E5:27:C8:D9
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 019A71809580891DB978F0FAF4732B0133D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: uIeiM0to5J39eXw+ZN+wDJiElt4jwnOsjMZNFlHr+tY=)
2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:95:80:89:1d:b9:78:f0:fa:f4:73:2b:01:33:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=8c44dcf6ea32388f628dabdaf5d0bb62e527c8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:0b:34:f0:33:f8:39:14:17:f2:fa:46:6d:
82:69:c8:c6:67:61:c6:47:0a:12:c0:e0:9d:03:40:
d3:95:0c:43:61:e6:48:b0:54:c5:e0:7e:75:72:dd:
bc:c2:dd:dd:76:e4:67:65:ab:37:30:0e:21:d5:fe:
45:02:f5:67:b2:c4:8e:43:bb:9a:d8:ea:28:95:df:
99:20:a9:42:48:de:43:9e:8a:41:c7:4f:59:45:19:
68:b9:6e:25:2b:49:be:61:4d:b9:1d:bb:b8:c4:91:
9c:8c:e0:51:d7:e8:fe:c3:9e:80:44:3a:d6:5a:e5:
f3:e7:d0:5e:8b:ef:87:de:f2:65:c7:31:b5:5a:c3:
7e:a2:aa:12:c1:ce:84:b2:4a:7b:bd:d8:80:e0:aa:
80:2b:0c:9e:48:e6:59:50:79:4b:4b:ff:85:d4:cd:
fd:1b:42:2b:ad:95:ab:d5:34:63:6e:70:27:5d:79:
66:ac:a4:58:78:20:cb:95:bf:05:79:59:e9:ef:ee:
24:57:b6:71:98:41:b8:02:2f:c2:0c:c4:91:7d:c9:
50:1e:1b:e7:86:a6:c7:93:58:8b:ce:9f:13:e2:af:
b2:b4:ce:7e:77:d1:8d:d3:2b:da:7a:63:82:4e:10:
6e:4f:df:da:81:de:99:b2:19:a5:8a:1b:d6:91:68:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:DC:F6:EA:32:38:8F:62:8D:AB:DA:F5:D0:BB:62:E5:27:C8:D9
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d5:9b:79:08:23:19:60:ea:f3:48:cd:5c:ac:d7:74:a5:06:
74:02:b5:61:8e:de:c7:91:14:74:22:7e:4a:b2:5c:f4:93:6e:
fd:9d:b8:ad:88:7b:38:c8:c4:ae:1b:8d:9e:f5:17:16:86:73:
ad:09:4a:82:b6:c7:28:c7:00:40:1c:3d:99:ad:d4:fe:8e:96:
17:25:eb:c5:64:97:90:03:bf:cb:27:d8:4f:2f:a9:3c:1a:f6:
51:6d:3e:79:4d:92:8f:86:e0:c1:37:8b:7d:02:de:4b:fd:df:
87:18:45:34:6b:9a:e5:dc:1e:c5:43:1c:5a:28:6f:b1:d1:9c:
63:86:0f:60:e4:60:9e:c6:8c:c9:f9:bc:a3:66:6d:46:00:d1:
04:46:1a:fe:3a:99:e4:fb:f8:b7:e1:34:f6:d5:57:c0:2e:7f:
a9:54:83:b5:fc:ef:ef:06:95:83:22:7c:3e:f8:eb:59:c4:24:
f7:8a:6d:d4:06:fe:10:27:80:82:11:75:fe:e4:92:58:56:7d:
8f:17:05:08:74:80:7d:14:5f:94:7a:e1:44:d0:e4:d8:4f:71:
b1:53:92:a9:cd:a1:55:8b:36:84:86:e8:4d:d0:55:61:d4:a2:
f9:40:d8:17:5a:47:e8:e8:94:fb:aa:e5:45:09:b6:e5:d5:43:
b7:63:b1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:15 2025 by rpki-client