Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File: csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier: PsZAgPcZYYom9gZgSGP9Q/p37DamcWDZsEprGRRl7bk=
Subject key identifier: A8:FE:4D:22:44:13:C2:24:BE:C1:70:5D:C4:95:33:DE:E1:E3:47:A7
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 01992F36671D42D3F4DE24DB0B0625A564EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number: 09E5
Signing time: Tue 09 Sep 2025 16:01:58 +0000
Manifest this update: Tue 09 Sep 2025 16:01:58 +0000
Manifest next update: Wed 10 Sep 2025 16:01:58 +0000
Files and hashes: 1: 8FajeVqA6rp1U8VNJu9yQBP6r54.roa (hash: UxuQ4k50fW+4+o9lGY7FVNHYu3QDBc/d+VkzXgLQ8PU=)
2: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (hash: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=)
3: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (hash: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=)
4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: MQyd91Qwq2MSrqwsukeMQTGRMLbIRTJIbb5CDuIrOds=)
5: ho0kqJfEMlf2sbVibqdADBrNulw.roa (hash: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=)
6: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (hash: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=)
7: spZ3gq52Rs1Brqgro5g4rfptHLc.roa (hash: JmluqSt/yaPZfKeNSsXMXym5ysVFHQT+kOW0mDU1DxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:67:1d:42:d3:f4:de:24:db:0b:06:25:a5:64:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Sep 9 16:01:58 2025 GMT
Not After : Sep 10 16:01:58 2025 GMT
Subject: CN=a8fe4d224413c224bec1705dc49533dee1e347a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:47:55:c2:c0:85:f2:cd:f0:26:90:9b:3a:
53:db:cf:7b:79:2a:dd:5d:e8:39:a2:74:61:bd:da:
c4:b2:47:8b:ea:a7:a7:72:e6:9b:66:56:cf:80:f7:
52:01:52:12:b3:ee:e1:17:35:c6:20:62:eb:ae:90:
78:1b:7a:8e:e9:74:6e:54:1d:95:0e:3c:21:cc:66:
7a:c0:6f:e7:fb:aa:25:8c:97:96:e6:f7:f7:da:fc:
fa:07:1a:bc:a1:83:47:b5:dd:a1:71:82:89:c9:df:
aa:0f:3b:11:04:76:08:6f:5b:52:a8:be:ea:44:8f:
e3:9a:e9:2b:fa:34:6d:d2:05:f6:8f:36:30:5c:37:
79:94:46:a7:03:18:72:f7:6a:80:bc:64:75:10:79:
b4:56:07:64:10:43:ca:70:b7:44:b8:a7:15:af:81:
2b:3d:97:35:22:c0:08:b9:71:27:46:c6:51:a5:58:
45:69:d3:33:cd:f1:63:98:e9:64:98:0e:dc:3a:c9:
92:e2:d1:c1:ee:2d:7e:4c:2a:71:1e:89:eb:c3:bd:
fc:c4:fc:8e:a4:ae:ca:95:3b:f1:61:59:b7:a3:fa:
63:d1:8e:2f:64:ce:b3:0a:fe:58:67:1e:0d:f4:46:
a9:74:f7:1f:7a:f9:c8:99:2d:6d:db:1d:a3:f2:23:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:4D:22:44:13:C2:24:BE:C1:70:5D:C4:95:33:DE:E1:E3:47:A7
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:49:55:9d:b8:8f:a9:52:02:d6:71:80:62:3f:6f:a5:b5:85:
8f:98:41:82:34:75:ff:7e:d2:4c:b7:e4:0a:9b:5c:c7:be:1e:
26:e0:0e:73:56:93:a9:87:b3:d3:6a:52:7f:89:87:02:df:6e:
88:67:26:f0:56:c6:ee:3e:dc:df:ff:d3:60:51:09:18:1d:39:
7b:19:0e:d6:e5:e2:11:c3:f9:5c:a9:b7:4c:38:84:ac:c3:25:
f2:17:9b:1b:04:da:d3:86:f6:98:f7:18:39:47:00:88:4c:a5:
3a:4f:9f:bd:79:79:4a:99:29:49:ef:db:a9:68:ed:ef:30:7f:
eb:ee:38:dd:e9:e4:8d:d0:00:26:7a:32:8b:af:6e:b0:7c:44:
4d:7e:ca:e5:bb:86:f9:87:85:a4:9f:a9:67:63:c0:c9:ef:65:
db:54:c7:79:03:86:dc:01:84:68:e3:7d:c1:d0:fb:25:42:b8:
33:3b:2a:d0:3a:62:15:93:9d:b0:23:71:b4:84:15:70:10:03:
7c:b1:cc:7b:b1:e9:3f:2c:5a:e9:7b:8a:53:27:e4:69:f9:2f:
46:0c:90:53:7b:5f:82:32:5b:b7:7e:4d:27:96:df:ca:50:21:
22:0c:00:b9:a3:f9:f8:cc:81:d9:30:c2:4d:a6:2f:7f:9f:73:
88:90:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:09:35 2025 by rpki-client