Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: PCwgtC7bES8QGpKy89Gun5UsTUxwsN+9wq0V1IQitNw=
Subject key identifier: C4:9B:62:A3:06:72:81:AF:08:E5:D0:59:CC:EE:A9:2E:FF:CF:06:94
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 0199FBEA9D4C9659589E4EF7F9FB40A076AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0DB1
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=)
2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: edfpWIVXQ+Gdhe3FTxuWyRysCxieoJiAp7JtCJXeGIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9d:4c:96:59:58:9e:4e:f7:f9:fb:40:a0:76:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=c49b62a3067281af08e5d059cceea92effcf0694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:c4:69:4f:ea:46:48:74:9a:7e:66:1f:e3:
5c:80:ec:2f:43:23:92:37:b9:cf:da:bc:24:3c:42:
8a:43:7e:4a:0d:4e:7a:76:f6:fb:50:57:16:6c:ae:
5c:8f:6b:d6:dc:17:b0:ec:98:1b:62:b5:0b:37:a6:
4b:67:72:20:e3:e6:15:68:9d:ab:17:82:fc:d7:f5:
fd:6f:38:ca:4f:59:cc:d4:36:2d:44:9c:cd:17:ae:
42:9f:d1:a3:07:aa:ae:21:40:cd:13:83:d1:fa:4c:
6e:f7:ad:7a:3d:5c:dd:e6:64:52:4d:33:1f:34:0b:
46:4e:e6:64:4c:c3:21:fd:5b:f0:31:94:c8:a8:92:
bb:2c:8a:b5:29:9a:97:76:36:04:dd:62:20:66:c7:
0c:b8:48:43:de:20:d6:ae:6d:c9:49:68:d4:9e:ce:
6d:7c:19:92:ab:8b:bf:4a:95:b4:1f:2c:6e:79:bb:
c8:b7:55:61:7c:16:fb:e7:12:52:16:35:60:8c:22:
5c:d8:0c:6d:93:63:41:ac:5f:76:ac:16:2d:64:33:
ac:46:52:4f:a2:e0:0d:6f:dd:fd:93:0a:e6:1e:bd:
02:e0:1f:e9:91:ad:05:2f:cb:45:60:1c:bf:e6:52:
6b:e4:2c:d4:2c:c8:1f:d8:7f:0a:a1:98:46:5a:c6:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:62:A3:06:72:81:AF:08:E5:D0:59:CC:EE:A9:2E:FF:CF:06:94
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ef:3d:7f:35:4c:f2:ad:9b:19:c4:e0:72:56:7c:e5:38:32:
cb:86:1c:bf:36:3d:58:00:ea:19:92:d5:15:93:1f:32:c3:63:
60:9c:6c:1e:27:54:de:08:4a:34:76:12:d5:c0:78:6b:3d:f1:
16:f3:2e:77:b5:41:10:0b:74:a7:fa:57:48:5a:c1:5d:5e:0f:
5b:62:fe:05:9e:69:dd:b2:96:bf:ea:d6:d3:cd:9a:42:d7:d8:
89:ce:85:75:0f:f9:29:44:58:2a:ed:54:97:35:62:23:84:42:
1e:04:49:56:1d:56:21:94:06:46:65:8d:24:ed:fc:21:b2:d7:
86:99:7e:0e:2f:7a:a3:8a:34:48:5f:3b:f9:81:5f:38:a9:96:
dd:da:79:49:5a:43:b7:aa:07:d3:98:e1:d3:c5:05:2e:96:70:
c4:dc:b4:f4:59:4a:98:91:89:65:b7:0d:1e:55:dc:03:48:fc:
54:71:23:a8:3f:b8:58:1d:b6:96:18:7d:61:74:44:02:44:5f:
e5:6d:5d:1d:04:3e:70:a8:43:ba:67:65:ab:70:a2:c1:1e:85:
ed:e1:d8:6f:00:aa:9d:bd:05:7e:cb:7c:4d:37:7c:08:79:62:
bf:fc:56:b9:d1:5a:f9:a2:9f:1c:9b:0b:91:39:42:7f:6f:ca:
5b:27:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:18 2025 by rpki-client