Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: MMfheKo8OZE0ZzEmUjNHbLCm21bc+dNmAHCxhuaduWg=
Subject key identifier: 4E:09:96:70:CD:22:6F:0E:57:D8:81:A8:E6:F4:A9:97:FC:99:4A:5C
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 019A172A68E8FC655028163B13AC596C2279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0C1F
Signing time: Fri 24 Oct 2025 17:00:46 +0000
Manifest this update: Fri 24 Oct 2025 17:00:46 +0000
Manifest next update: Sat 25 Oct 2025 17:00:46 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: d1GQGwV2lnfxkn2GZgrtiOXel1lZFm2CfZylhFMua4Q=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:2a:68:e8:fc:65:50:28:16:3b:13:ac:59:6c:22:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Oct 24 17:00:46 2025 GMT
Not After : Oct 25 17:00:46 2025 GMT
Subject: CN=4e099670cd226f0e57d881a8e6f4a997fc994a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:53:ef:f5:e0:b9:0c:bb:d5:2e:db:e4:71:
b5:f4:22:36:76:0e:1d:52:79:15:50:ca:f3:c3:cd:
92:0d:c2:f1:32:02:9e:89:49:13:8e:b8:db:9c:a2:
28:1d:e5:62:45:5e:60:38:27:15:aa:19:be:7d:5a:
d2:80:bb:a4:64:9e:20:17:f5:ac:0d:d2:5f:55:63:
f5:f3:b5:49:60:b3:b7:44:e5:3c:b3:03:b4:ca:77:
04:e0:ea:6b:49:71:02:b1:e4:d1:6d:ab:d8:8c:c7:
24:00:27:1e:69:0a:ff:1d:b1:9a:8d:5b:db:fe:75:
72:ee:24:72:1e:74:21:55:cf:5e:c0:30:b5:38:ec:
5d:50:09:28:34:72:a9:f2:da:7b:39:d7:a7:35:29:
df:87:a3:18:5a:88:31:c5:7e:c6:3b:22:74:44:98:
5c:bc:55:50:d3:b0:c5:a3:eb:c8:05:52:2b:d6:73:
8c:f2:7c:0b:14:fc:49:5e:da:83:71:d6:88:df:2f:
39:ef:85:6d:73:e8:b8:1b:3c:c0:ce:e1:f7:27:4a:
25:72:2f:ae:b9:30:df:c9:bc:90:b5:52:c4:44:64:
23:af:bd:e5:0a:c8:cc:44:9f:ae:62:74:dd:ad:af:
20:0c:a6:70:cf:d7:95:e2:90:f0:0e:6a:b2:4d:9f:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:09:96:70:CD:22:6F:0E:57:D8:81:A8:E6:F4:A9:97:FC:99:4A:5C
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7f:61:95:84:56:76:44:ae:8f:0e:62:47:31:62:33:ed:46:
4b:62:95:9b:2c:b3:8e:2c:14:59:df:07:e5:38:93:df:47:7f:
89:71:5b:c6:01:e8:3d:86:eb:52:75:de:67:d3:8d:5b:16:fe:
2e:8a:23:da:54:9f:72:34:c4:5e:0e:98:4c:ec:4d:21:14:86:
58:3c:b7:80:ae:f6:eb:60:3f:88:8f:bc:5c:81:92:fb:f4:03:
fd:51:c2:cd:02:f2:39:05:56:0e:a8:d5:cc:d4:57:49:bb:a1:
4e:39:38:3e:83:d3:d6:e2:99:22:e2:65:07:96:ce:34:9e:45:
99:02:ef:30:f8:24:88:d8:02:06:42:e9:03:d0:e2:f8:90:7a:
57:b3:53:1e:d9:59:34:15:ed:0c:04:1f:d3:3c:18:66:8d:a0:
78:f6:7c:75:7e:c8:ba:89:95:33:36:15:f6:98:76:7a:6f:36:
95:18:cf:52:a5:b9:a4:b3:38:cc:94:59:30:45:3a:ad:08:86:
66:92:3f:7f:25:82:7d:e2:6e:d9:df:fc:d0:98:8c:a4:56:0f:
a2:24:29:17:f0:c1:ed:9c:4c:08:8a:9a:e3:05:c6:c3:00:26:
31:bb:f0:2d:31:83:25:1a:08:3d:0e:86:f9:55:2b:48:10:9f:
05:93:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:54:41 2025 by rpki-client