Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: SAyQvlhwFOTpF86Do1Xch/FkUo3qsWbN090mCa/aHY8=
Subject key identifier: E5:18:FC:9E:E8:2E:F5:86:A4:14:F2:81:3E:13:7F:CD:54:91:77:91
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 019A202D213F5F098C6FC9832C8437ABCC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 142C
Signing time: Sun 26 Oct 2025 11:00:19 +0000
Manifest this update: Sun 26 Oct 2025 11:00:19 +0000
Manifest next update: Mon 27 Oct 2025 11:00:19 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: /ho7ugk58GZvszDtVC7RMqauk6eY8HIKhtt0ANzkOx4=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:21:3f:5f:09:8c:6f:c9:83:2c:84:37:ab:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Oct 26 11:00:19 2025 GMT
Not After : Oct 27 11:00:19 2025 GMT
Subject: CN=e518fc9ee82ef586a414f2813e137fcd54917791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:58:8f:b5:9a:fb:14:15:eb:14:40:8c:c1:
05:6d:73:2a:d3:4f:4c:19:d8:9c:5c:9c:da:63:fe:
62:c6:73:3e:a3:86:07:62:d5:fa:bc:31:b4:9a:aa:
7c:df:59:8f:be:4e:3e:de:d8:f0:71:70:3e:5a:23:
b1:59:01:ce:d1:93:b2:2a:72:45:fe:a4:8d:18:17:
f0:d4:cd:f2:61:58:96:65:be:f7:f6:23:50:6f:33:
c0:74:de:10:8d:bb:cb:7b:d6:4e:ce:ab:49:c9:16:
2d:d3:0e:61:68:81:e5:64:9a:33:31:ef:c7:52:46:
7c:87:de:eb:60:c1:07:f5:ad:20:d0:76:a5:f9:97:
5e:2f:e8:33:3d:7e:8c:df:66:25:a8:5c:14:bc:a5:
fe:6c:79:ee:43:63:2e:84:4c:d4:be:72:56:af:5a:
a3:d5:f7:64:96:25:e0:cc:34:d2:e3:c0:4d:10:24:
5b:21:66:5f:a8:f5:7b:e5:e6:bf:85:53:b9:06:2b:
f8:c4:4d:48:b0:47:dd:0b:85:b9:cc:f4:ef:c4:0a:
37:87:10:1f:e8:92:ed:14:c3:e6:0e:34:aa:41:82:
0b:c8:cf:0f:1f:45:2c:e8:59:78:b6:21:0c:a4:56:
f8:b4:f1:59:51:64:a9:13:63:7f:6e:ea:8b:da:a0:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:18:FC:9E:E8:2E:F5:86:A4:14:F2:81:3E:13:7F:CD:54:91:77:91
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e8:20:a8:b6:74:b4:da:a0:0e:4c:2c:da:ea:69:2b:99:2c:
71:dd:93:89:61:d1:b6:01:5f:aa:50:59:47:2d:33:d2:64:3f:
d8:02:85:25:1e:ec:61:44:37:28:9f:13:5e:60:99:29:cb:7f:
01:94:a1:4e:c1:82:58:91:4d:26:0e:e6:2b:69:56:8f:35:e5:
ef:76:b4:07:22:33:35:41:e3:8d:a7:f9:02:64:32:35:09:8e:
48:a2:6f:15:92:fd:bb:7d:b9:80:b5:ae:d2:07:c4:6d:4a:5e:
a9:ea:57:41:87:08:2b:08:6c:b9:1c:fc:85:9a:8b:7b:ae:93:
7c:e0:00:1a:1f:73:fd:0b:34:8a:d1:8f:14:d2:e5:33:ea:e1:
1e:a4:7f:82:6b:98:7f:a9:9a:34:fa:f8:ed:db:94:28:a8:73:
47:25:85:86:1f:2e:fa:ce:57:4c:94:69:b1:a8:8c:a9:eb:1a:
5d:12:39:01:ea:c5:72:35:03:58:c9:d2:1f:1d:01:98:ea:a2:
ea:8a:7c:27:a7:12:48:b5:6c:59:77:76:07:86:89:0c:07:cd:
f0:98:d9:b6:57:b5:38:03:5a:32:79:24:98:2d:43:82:4d:08:
01:86:f5:78:c3:78:f2:7e:5f:ff:7d:71:5d:0b:28:9e:63:11:
51:9e:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:59:23 2025 by rpki-client