Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: SkON77pUJmA3Ur5/xoRdPLuUQJF8FAqBj88jC5I97cU=
Subject key identifier: BF:C8:1B:99:8B:5D:5C:F9:5E:B2:00:1F:2A:D6:1B:7F:FE:31:49:31
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 0199FC588DDE91020CB4C419EFA25A7CD6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (hash: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=)
2: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: kNRU0H5OQLaDyq57B9UFWA3qwUKHW1K9dZPVGZQLcTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8d:de:91:02:0c:b4:c4:19:ef:a2:5a:7c:d6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=bfc81b998b5d5cf95eb2001f2ad61b7ffe314931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:95:82:cf:ba:c0:fa:98:4f:3f:06:e3:94:
79:6a:39:3b:5c:07:6b:b5:b4:93:6b:e8:b4:38:bc:
a0:a8:aa:0d:16:42:5e:e7:60:17:d8:49:70:3a:f2:
4b:32:27:3d:b4:d6:d7:c1:11:fc:aa:39:03:ae:13:
5b:9e:b8:0b:d9:c6:b4:5d:42:3e:58:71:00:ae:02:
84:e4:8e:53:9f:13:4b:49:4c:c9:37:db:71:12:ac:
eb:7b:eb:0f:a2:0a:bd:72:d5:00:a3:04:93:8f:ff:
7e:d1:73:f1:bb:63:23:f7:36:52:05:a7:c0:bc:09:
73:ba:27:3f:5b:da:91:14:cb:c9:9f:45:2f:b8:fa:
99:ff:49:3f:d3:ed:d9:26:06:28:42:1b:33:f9:cc:
68:16:ca:1d:52:27:7d:38:eb:a4:88:31:8e:e2:e9:
a8:7a:19:d4:a6:60:5f:69:c1:4f:da:c1:f8:91:33:
6d:15:29:d8:83:41:ca:ca:0d:44:8f:99:e2:92:79:
20:c9:26:69:df:06:c2:0a:9d:d5:aa:b7:e2:ed:ac:
f1:dc:7e:10:61:78:eb:a3:b9:a0:b1:e4:23:1e:71:
a1:a3:56:44:26:33:d5:95:bf:14:cd:96:48:16:71:
99:0e:2d:52:71:ae:d9:15:0c:61:40:21:f8:2b:68:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C8:1B:99:8B:5D:5C:F9:5E:B2:00:1F:2A:D6:1B:7F:FE:31:49:31
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c6:8a:f2:f2:bd:39:29:d2:59:a0:5f:2f:7e:d7:7b:db:04:
50:fb:03:39:56:01:34:32:17:40:29:03:93:66:fb:b7:04:3b:
c9:62:65:f1:06:3a:4f:9c:69:3b:4e:b9:90:56:b8:20:fd:af:
0d:ab:d7:cd:eb:b4:47:59:52:8b:6f:88:bf:de:48:7c:0d:02:
a0:40:eb:c1:57:3b:33:69:69:47:6d:16:e3:c2:5d:3f:25:e9:
a7:be:3a:fc:43:3e:a3:ad:6e:fd:86:72:7b:cf:37:5b:a7:47:
b5:3c:da:7a:9c:a2:ed:a1:ff:9a:88:b0:f8:af:e3:c7:71:94:
a0:51:ee:a2:96:d0:2b:5b:e9:65:09:32:42:07:11:de:b9:82:
3b:2e:bf:18:d3:e3:fc:00:f3:fa:08:a1:21:16:a8:b6:c7:0d:
4f:8d:b1:c1:2f:a2:9a:74:f1:05:14:b7:5b:4c:2d:56:6e:64:
0d:ba:08:52:b0:12:ec:0e:e4:95:2d:94:58:78:02:fd:6c:df:
9b:6e:41:24:91:30:24:fd:65:9d:f1:36:78:7e:f9:7e:de:0b:
a0:15:ad:0b:79:6c:fa:c6:27:41:12:4b:b5:91:2e:60:43:4d:
66:6b:c0:9f:b8:84:38:e2:57:f6:1c:fd:54:e8:70:06:23:dc:
8f:e6:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:14 2025 by rpki-client