Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: 8wYRkDFtjv0222OhYr54hQLZjmX1/27WRIoo2Rg7DBg=
Subject key identifier: A3:36:9D:EC:ED:85:E7:27:B5:F9:54:3C:08:10:A9:70:38:F8:38:3A
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 019923312025335B55589A756718321E51AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 13A9
Signing time: Sun 07 Sep 2025 08:00:45 +0000
Manifest this update: Sun 07 Sep 2025 08:00:45 +0000
Manifest next update: Mon 08 Sep 2025 08:00:45 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: F3iQUyAZQl/LKYxmnERH0aNOAbf1xFSSeK6U3BSHwg4=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:20:25:33:5b:55:58:9a:75:67:18:32:1e:51:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Sep 7 08:00:45 2025 GMT
Not After : Sep 8 08:00:45 2025 GMT
Subject: CN=a3369deced85e727b5f9543c0810a97038f8383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:ee:75:84:8c:1e:eb:77:d7:dc:da:19:07:
a6:4d:3d:8b:79:a2:f6:f2:22:55:1c:86:4b:53:39:
f7:b2:33:bc:b1:af:fd:d2:d6:1d:6c:c5:1c:62:90:
61:e6:f0:64:3d:c5:89:1a:49:7f:f5:83:69:e8:ae:
e8:60:f9:37:d4:56:45:ab:84:65:0f:cf:0f:e0:0e:
1f:9a:f7:90:6c:08:48:1c:b1:23:d4:a5:58:9a:9b:
35:c7:7a:8e:9c:be:08:0b:ed:db:51:ba:7a:53:40:
29:16:bc:39:94:87:96:db:bb:0f:66:db:9c:ed:8c:
3d:e0:86:c6:29:46:be:c5:2b:04:d8:87:6f:88:dc:
80:01:d2:02:c3:88:17:5a:7f:8f:82:97:c7:23:df:
75:c1:89:38:69:05:27:22:2e:b3:ef:0c:90:4e:89:
74:dd:15:a0:03:1b:d5:74:cf:6f:e5:5d:a7:b4:5d:
1b:ff:73:46:3e:f6:38:0d:e4:84:57:5e:2e:2d:9f:
63:73:b3:08:eb:99:2c:08:df:b6:51:06:72:12:ba:
c1:03:ea:b2:9f:2b:0e:8b:bf:af:2e:8a:9d:c5:0b:
11:00:0e:39:c6:ad:a5:ec:9b:07:a5:78:4f:af:93:
dc:98:b0:1a:55:45:40:c5:cb:da:de:19:79:5e:f0:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:36:9D:EC:ED:85:E7:27:B5:F9:54:3C:08:10:A9:70:38:F8:38:3A
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bd:6c:f6:09:16:e8:a9:0e:ac:50:22:19:f7:a4:25:ba:02:
7d:ee:65:04:b3:72:72:62:71:84:ca:11:94:dc:d9:28:52:b1:
9f:4b:bb:1b:d1:58:00:c7:81:5e:75:9f:9c:62:59:76:ac:bd:
ed:71:c3:4f:02:22:40:22:ba:c5:ae:d9:6b:13:b9:71:d5:b8:
fd:bd:5d:04:a4:70:09:75:39:08:fd:e9:bd:a5:b7:b2:6b:15:
17:fc:34:3a:79:79:ae:d0:ef:fd:6a:39:f5:fa:6a:55:70:cb:
34:7f:9f:a8:f8:b2:b6:0c:76:2e:ae:64:47:8d:e8:27:a5:3c:
06:48:12:63:f5:a6:0d:be:40:53:65:53:68:6f:76:e6:21:f6:
9d:57:2c:6c:e0:fd:3a:ac:bf:23:90:b6:e6:b0:fd:f1:33:aa:
45:1d:ae:0b:59:b9:3b:70:7c:21:00:d7:8e:c9:e5:83:20:1e:
52:9d:3d:fa:ac:fc:5d:25:bc:a1:52:83:1c:23:ef:21:63:32:
40:05:40:9e:57:07:ee:c0:da:90:42:b2:45:66:42:a7:4f:d0:
ab:be:81:bb:05:b3:e4:52:dc:4a:fe:59:35:34:20:d6:1a:c1:
d0:fd:08:e1:eb:76:98:d0:38:09:ae:02:b8:72:e7:39:58:2f:
d4:9d:2b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:01 2025 by rpki-client