Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: SezkQrI5NSgAAhEVoCXxA438ActV18ng0iKzIIJ0CZw=
Subject key identifier: E5:23:B6:BA:BB:5E:8C:DC:A2:4E:4C:C4:8D:F1:BB:7C:92:39:CE:3B
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 01993680965A27E0C1373E23E4A6B008611E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 15E3
Signing time: Thu 11 Sep 2025 02:00:20 +0000
Manifest this update: Thu 11 Sep 2025 02:00:20 +0000
Manifest next update: Fri 12 Sep 2025 02:00:20 +0000
Files and hashes: 1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: xJ5LbqDeXJVItCAI01Hoy0HGDcEiVv06Nr1N5pR12ds=)
4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:96:5a:27:e0:c1:37:3e:23:e4:a6:b0:08:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Sep 11 02:00:20 2025 GMT
Not After : Sep 12 02:00:20 2025 GMT
Subject: CN=e523b6babb5e8cdca24e4cc48df1bb7c9239ce3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:9e:d5:bf:89:35:d4:a4:92:95:86:23:13:
b7:75:40:6d:6a:45:0e:4e:6a:92:9a:d3:a3:1e:b5:
f7:ab:7a:fd:03:33:5e:f1:53:b5:7e:2b:ba:ce:fd:
a4:d4:a2:b1:45:18:2a:31:18:10:95:d7:b0:d9:86:
e9:0d:8c:57:60:02:ca:a2:4e:d3:7e:a3:22:e6:0b:
cc:8d:92:18:05:27:7c:27:c4:4c:a0:6f:71:38:dd:
e4:76:a9:e7:6d:db:26:b7:85:1a:43:21:b4:cc:e1:
e0:c8:b4:1b:4a:50:aa:05:6e:d1:a8:4b:a7:c7:b8:
d4:0a:08:9f:70:71:05:c0:71:a4:c3:23:09:9b:cd:
e3:07:52:ce:23:65:41:a4:20:15:07:b5:d8:f0:63:
92:95:a4:0a:3c:15:e7:06:00:7e:e5:69:38:c1:b7:
af:eb:57:04:da:92:0f:02:50:30:f0:e9:fa:32:73:
a4:21:cf:0e:96:5e:92:93:ef:24:5b:86:dc:c4:53:
6d:f4:d0:07:36:75:2f:91:4c:f7:a9:be:8d:f8:5e:
07:09:fd:bb:56:da:f8:62:c1:14:01:a1:a2:a5:7a:
4a:36:0d:bb:10:83:65:0a:95:1f:0d:19:d3:03:f8:
02:98:46:2c:19:dc:24:09:f3:6e:2a:03:54:46:c1:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:B6:BA:BB:5E:8C:DC:A2:4E:4C:C4:8D:F1:BB:7C:92:39:CE:3B
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4e:9d:3b:44:f1:08:d7:dd:6a:f1:de:10:9c:e3:b6:42:65:
58:58:e0:ff:7e:d3:ba:dd:6d:75:08:bd:03:93:e8:f2:c8:d0:
5b:be:e7:29:05:a6:b2:ea:65:9d:7d:11:d3:21:65:2f:23:8a:
2c:47:86:70:43:8d:de:72:13:a5:c9:e5:b9:ed:e2:72:c4:90:
83:e4:08:ea:2d:9a:8b:85:70:62:d2:5f:20:94:df:ff:fd:e2:
57:4a:22:be:fc:96:35:ee:f1:6d:a9:db:2f:f2:26:ca:20:e8:
1b:05:1e:c0:7c:5f:a0:2a:40:1f:fe:a1:c9:03:bf:d2:94:d4:
b9:12:63:d7:25:ce:7a:a7:a9:f3:ee:9f:d8:39:6c:6c:31:05:
b0:02:a5:36:a6:b3:35:8a:77:71:95:88:c1:ce:58:ef:59:4c:
c8:90:3d:0a:aa:53:9e:82:f9:92:62:24:42:5d:9d:01:4b:ac:
1c:b1:84:08:c7:30:a7:19:10:96:4e:88:dd:e1:b1:3b:97:7a:
25:3f:50:3d:f9:23:be:e7:53:84:90:c7:60:f0:45:3e:0a:45:
d8:3d:f3:f5:8b:71:a4:4c:39:7d:b3:ad:be:67:76:ac:7f:c6:
4a:ac:cd:5a:4a:1e:ca:c7:49:9f:e1:f3:b4:fc:2f:8e:ef:8b:
2e:f5:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:20:13 2025 by rpki-client