Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: QHs4vRlg3B0tyG09cDjVq57Nm8zaDE6GLhcYePAQfOQ=
Subject key identifier: D6:A5:0A:30:19:E7:8D:4F:D6:B8:EA:3C:68:C8:06:18:2F:71:6A:4C
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 019A72CA1BE876A5A78471CD90718C35F0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 100C
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: 1xdt--r7pLEFi9mXxf_8plnoO9U.roa (hash: uBNn/aL6HR9ZcIyFxzznkQDCk3CxgIi9L2wMoXNB7qk=)
2: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: ccs0SUI9016eIktaMU+j0EXcrVhZ7VblJdvGg49LdtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1b:e8:76:a5:a7:84:71:cd:90:71:8c:35:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=d6a50a3019e78d4fd6b8ea3c68c806182f716a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:54:82:e3:73:fe:5c:57:3c:aa:03:24:c4:
73:e6:38:0c:4d:0c:46:f0:43:fc:f5:96:c5:96:64:
9e:d3:b8:34:3d:ef:5d:37:2d:ab:dd:da:ab:99:fd:
d0:d9:a3:25:66:58:67:48:ae:26:16:26:22:bf:db:
ac:13:e1:d1:2b:90:a1:59:fa:09:5c:29:39:77:08:
f1:51:b6:dc:6f:43:f8:17:a4:e1:3f:07:a7:9e:e3:
42:16:5c:56:25:3a:7f:0f:76:fe:e9:4e:58:7c:ca:
5e:35:18:a8:43:95:22:5c:f2:1f:02:fd:e9:83:55:
6c:8f:77:46:e7:cd:e2:32:2b:f8:ab:05:0d:e8:8b:
55:b2:9a:d0:7b:5e:cf:a9:53:f8:17:97:24:c8:b9:
2b:c8:f4:87:6b:a3:e1:46:aa:1f:ac:9a:93:b5:00:
5a:a0:45:86:e0:86:e6:cc:ef:ab:cc:39:de:c0:f9:
2b:5e:fa:13:42:19:07:50:6f:71:a8:c5:3e:1f:28:
57:69:84:50:d6:18:fb:0d:45:ff:60:e7:b4:c3:a7:
73:4d:35:47:14:d5:9e:00:75:fe:7b:58:b4:66:fb:
e5:d7:b8:94:36:c0:c8:6c:7e:bc:93:02:49:64:f1:
c2:b7:52:d5:3a:c1:a0:3b:8f:af:6e:99:0f:91:3e:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:0A:30:19:E7:8D:4F:D6:B8:EA:3C:68:C8:06:18:2F:71:6A:4C
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:eb:e9:57:b5:36:98:f9:18:00:81:65:3b:a7:9f:c7:b7:7b:
9b:39:0e:0d:b0:be:c8:8c:68:3c:17:39:fb:b0:a8:ca:d7:e5:
82:94:8f:56:da:3a:54:95:ca:a9:2f:45:01:80:70:8f:92:5c:
4e:db:ce:5b:7e:06:c7:f7:88:51:28:be:36:a9:51:9c:a9:83:
ba:31:ce:ba:5b:06:00:7a:d1:f1:f2:89:ec:ee:bd:b5:66:21:
fb:64:9f:36:ad:41:6d:cf:03:cd:16:a3:a2:86:35:5b:45:cf:
d7:eb:1f:78:e7:38:45:31:65:b9:23:a7:1e:e4:d5:d8:df:05:
44:54:97:17:f8:03:8c:e1:98:cb:54:7a:7f:e1:8f:8c:29:b7:
74:2c:8f:3f:8c:fa:3f:d2:94:e1:70:23:a4:f4:36:d3:cd:c9:
67:28:6c:1a:37:3f:cc:96:ac:c0:62:ab:d2:35:10:89:39:f2:
2d:e4:0c:5b:0f:aa:dd:19:df:8f:1d:7c:6b:de:b9:93:80:ac:
8d:33:b6:fb:e2:ab:3d:cd:ac:cd:b7:0e:8e:ec:e8:98:53:ab:
1a:a7:5b:3e:88:c5:4b:2e:99:cb:84:8a:ee:e3:df:e3:31:d4:
c5:ef:4b:13:6f:be:81:82:02:ac:f4:9f:97:a6:a4:00:19:05:
a2:0c:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:58 2025 by rpki-client