Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: dK0bTgQxZ2aIFnmNNCqtRMbjyqPfWW5QVC2fZyFNQYc=
Subject key identifier: 6F:99:5D:CB:A5:01:42:54:0D:D6:F1:A9:56:3F:B4:83:49:B1:18:F2
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019A269D49A13AD36170F8629AF3D24403E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 17:00:33 +0000
Manifest this update: Mon 27 Oct 2025 17:00:33 +0000
Manifest next update: Tue 28 Oct 2025 17:00:33 +0000
Files and hashes: 1: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: mF/unJguPCTwYRtfqsUfp8ONX087A10Y3/5i3FzpoL0=)
2: fXIhT7Ydqm5HytjfeB-NmrbrFRI.roa (hash: EsiKR1dMs1SsEJue6V9U6b9V/XFN9Zx4S62/KpEzEqg=)
3: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (hash: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=)
4: mprfUYWLFFvcoporgivp8S18oz0.roa (hash: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=)
5: nqfgPZyBGUMJjXZ82ONF8M_wX2o.roa (hash: cAq2+4Plhv+25M/XxaCNm4UA7TT+v8QHyzJDH25TDn4=)
6: zShwLkkDPGWGSwVW1WaNYQqy4QY.roa (hash: cc7GaLAsHY9PJBKnUzOfoPoWS1viq2gLzvzxAmdtn+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:49:a1:3a:d3:61:70:f8:62:9a:f3:d2:44:03:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Oct 27 17:00:33 2025 GMT
Not After : Oct 28 17:00:33 2025 GMT
Subject: CN=6f995dcba50142540dd6f1a9563fb48349b118f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:3d:e6:ff:cf:ff:de:ee:54:01:d3:80:50:
46:db:f6:9e:5c:b0:10:39:3a:e7:d4:32:d4:de:c8:
3f:0b:6f:68:2a:92:66:86:f6:47:c5:07:76:49:42:
14:10:0f:d0:1c:01:0d:b0:72:f9:2c:55:02:4c:00:
45:7c:56:06:46:92:d2:6a:8f:c2:84:bf:d6:ae:d6:
e7:c3:6f:5b:14:0c:31:58:c5:67:dc:24:55:bb:73:
a5:a9:7b:86:e0:2c:d1:5f:c6:ed:cb:5a:16:ad:4b:
0a:2f:05:e9:06:5e:65:de:e8:c0:88:a7:ea:52:d5:
5d:fd:80:6c:5b:e5:80:a6:db:5b:2a:0c:49:87:17:
69:59:09:65:7e:76:c8:a1:2b:aa:0b:33:b5:43:ad:
c5:0e:f0:ca:c9:11:80:c3:8f:53:63:b3:6c:74:d9:
58:89:07:8f:d3:a1:b1:96:ee:97:6b:3b:d6:33:f5:
6e:4b:96:e3:aa:07:0f:38:cf:94:a9:28:f8:23:73:
fb:2d:69:c6:6c:4b:81:07:0a:2e:94:cf:30:9c:77:
ab:1a:c8:26:c3:72:5a:76:5d:b9:e0:a2:c8:48:d5:
e5:fe:de:29:21:d1:3b:ae:47:e5:2f:6d:ae:32:7a:
9c:a1:cc:d1:ca:d8:47:25:85:18:14:39:e4:2a:74:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:5D:CB:A5:01:42:54:0D:D6:F1:A9:56:3F:B4:83:49:B1:18:F2
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b6:f7:3b:57:22:60:7f:f1:93:1b:11:54:dd:f5:28:c2:39:
1b:63:ef:fa:d9:4e:86:74:42:43:26:0f:5c:db:76:c0:b0:2c:
3c:10:18:b9:79:fb:9b:2c:1c:09:b0:b4:e3:f3:08:67:39:5d:
5d:2f:22:7c:6a:30:a1:1b:59:57:f8:6a:a0:08:65:19:16:33:
32:28:41:7e:5e:db:b3:3f:57:60:fd:d5:c9:27:82:74:a9:e8:
d0:c1:44:f5:95:28:da:d0:d9:82:19:22:c7:b6:b5:56:25:8d:
32:ab:7a:7f:8f:a2:69:79:ff:8a:8d:cc:e7:90:c3:2c:29:be:
bd:f5:8c:db:b9:20:37:ce:35:40:07:2f:8f:28:9e:b8:27:9f:
fe:e5:97:3f:4f:01:6f:27:cb:0f:b9:2d:ab:a1:8c:bb:af:c3:
18:b0:4f:e8:28:5e:2d:e5:d9:b3:e8:54:1e:27:d8:de:99:9a:
6f:20:47:40:51:e6:0c:aa:e0:c7:af:c4:d6:aa:79:2b:fb:ad:
c8:2e:b5:30:4a:14:2f:47:44:32:54:ba:70:b9:b2:03:73:5b:
a3:9f:9a:15:83:24:43:92:0c:20:5f:b6:f9:6e:54:51:81:08:
36:dd:46:11:1e:c6:92:44:c1:11:c2:92:fc:1c:67:9d:4d:44:
a9:1b:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:46:05 2025 by rpki-client