Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: Q83A2ffPoMXoPy48BnzAZ6FMQrce2O+dXrh3unb6hcE=
Subject key identifier: 4A:96:84:68:88:92:C6:C1:49:E8:B6:4A:93:DD:6F:CC:DA:2A:D9:4B
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 0199FFC830312D081005EC3ED524189286D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:13 +0000
Manifest this update: Mon 20 Oct 2025 04:02:13 +0000
Manifest next update: Tue 21 Oct 2025 04:02:13 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: 7JNoVFVL3K8tpUfM1dOrRLucecADUyTE2Sc9BwYsyX0=)
2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:30:31:2d:08:10:05:ec:3e:d5:24:18:92:86:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Oct 20 04:02:13 2025 GMT
Not After : Oct 21 04:02:13 2025 GMT
Subject: CN=4a9684688892c6c149e8b64a93dd6fccda2ad94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:4a:da:22:95:a1:57:d4:da:14:b2:c9:e1:
b0:1d:fa:39:05:51:5a:dc:55:16:65:9d:63:12:b6:
9f:fe:12:b2:3b:d2:c9:53:c0:cf:5e:b0:df:02:7a:
e4:0b:2a:30:a8:51:5d:b9:a9:d1:06:55:e5:e1:ed:
57:40:4d:20:d6:1b:91:04:c6:4a:40:88:a2:de:8e:
3d:13:09:d2:a3:d2:7f:70:55:88:c8:fb:f6:e7:2f:
51:ed:9c:d9:77:35:a2:22:a5:98:1c:7f:1c:c7:03:
31:b4:67:e9:e0:d1:bf:78:ed:61:fd:3d:b9:75:3b:
ae:51:5d:6d:a9:80:e0:33:93:ce:29:85:81:84:aa:
f7:c9:7b:d7:c8:32:1f:a4:a3:a1:b6:5d:51:b6:b7:
b3:b4:64:e6:cb:54:96:e7:50:e0:80:a5:6c:9b:99:
5c:0f:c2:02:c6:3a:9c:b0:a8:e0:62:b4:36:7e:f3:
04:46:a9:ef:67:3a:f5:fa:8d:66:10:0f:fe:b3:a0:
fc:17:a9:52:74:ab:a0:2d:ce:d2:3f:98:80:5b:57:
e3:82:68:29:3f:b0:d9:3a:de:42:6a:fc:09:e1:1f:
7a:52:1b:bf:80:74:93:ec:56:b7:39:83:30:d9:a1:
c5:80:7a:98:e7:f6:da:99:2e:21:de:81:60:8b:39:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:96:84:68:88:92:C6:C1:49:E8:B6:4A:93:DD:6F:CC:DA:2A:D9:4B
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:93:05:6d:5f:5c:84:7e:96:c0:15:1f:62:24:26:a5:05:9c:
a5:47:f1:d3:75:04:5e:fd:84:07:99:29:14:6f:3e:3f:cd:e2:
3e:63:60:8f:3e:9c:dd:61:50:05:a3:62:6e:59:6c:2b:02:dd:
d1:cb:2d:d8:88:5e:0b:c3:25:ad:4b:bb:1e:3f:00:6e:b2:8c:
c1:bc:53:94:58:aa:8b:c0:f3:96:ab:a9:3a:9a:7c:60:dd:58:
5e:f7:f6:1b:f6:7f:51:e9:55:89:1f:84:6e:54:b4:28:39:2e:
71:6f:72:16:77:1f:7d:7f:cf:6d:17:d3:3f:16:03:94:bf:44:
98:c9:72:3a:a9:ef:da:fc:d5:c4:59:25:f1:aa:b0:f1:83:cf:
bd:91:fa:58:67:d4:a7:e4:3a:14:ac:20:95:43:c7:ad:4d:fa:
fb:9c:e6:09:aa:4e:f9:90:a7:d2:23:cf:59:b0:2d:d6:61:56:
4a:69:e6:e5:76:1f:49:b6:50:98:17:32:ff:f5:fb:7c:63:ea:
21:62:31:c1:bc:fc:e7:4e:e8:c5:3d:a7:bb:32:63:1d:e0:4c:
5e:38:74:12:05:c4:8d:bf:bf:4f:16:6a:0f:65:74:05:74:6e:
2a:a0:ed:02:80:01:90:20:14:c4:70:34:fa:a5:90:8a:b6:40:
96:13:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:09 2025 by rpki-client