Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: 2NEwoKXwr3QaEf1iDqDVOejYVmDXzXBW+SwzqcomMnM=
Subject key identifier: DC:E3:C5:5A:40:34:01:9D:52:7B:68:14:79:7C:03:DB:4B:B6:B4:33
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 019A0035E5C0AA35DD549E97DD13167314F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 03D9
Signing time: Mon 20 Oct 2025 06:02:03 +0000
Manifest this update: Mon 20 Oct 2025 06:02:03 +0000
Manifest next update: Tue 21 Oct 2025 06:02:03 +0000
Files and hashes: 1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=)
2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: do0wSnISx/XFXvpXtyuc4yOOGmpz3gYSviT/flEIy9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:e5:c0:aa:35:dd:54:9e:97:dd:13:16:73:14:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Oct 20 06:02:03 2025 GMT
Not After : Oct 21 06:02:03 2025 GMT
Subject: CN=dce3c55a4034019d527b6814797c03db4bb6b433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:e0:f5:eb:f8:ea:ef:95:8b:1d:86:2b:12:
22:b1:24:72:c1:f6:88:ac:23:b8:68:37:1e:71:5e:
e2:19:3b:c7:b0:ea:a6:ce:62:22:6b:15:51:84:76:
22:b0:b7:d6:51:19:96:71:3f:08:25:6a:d1:0d:c9:
55:5e:38:6c:c6:de:9b:27:6e:01:86:80:c4:b0:0c:
ee:ff:86:f2:90:1a:c1:74:02:02:8e:2b:c3:13:bd:
ad:22:ff:8f:bb:09:1f:61:04:6e:55:dd:a8:b9:3e:
12:4b:3a:09:3d:69:23:5c:97:82:ef:74:df:c7:dd:
f4:b3:ea:23:c8:0a:90:cf:d3:de:16:a9:36:be:6b:
6b:0b:23:ec:5f:1e:fc:80:67:50:7f:1f:4c:60:2d:
c1:92:c4:b3:3c:12:8d:99:14:86:e7:0e:80:f2:f0:
2c:5f:13:35:13:5b:12:b0:c8:d7:99:fb:7c:b7:e7:
0a:8b:f5:2d:1b:c0:85:3f:c2:17:16:08:d5:ba:33:
40:a3:69:46:9c:26:e9:91:ee:bc:81:b6:18:37:5b:
d5:a9:5d:de:44:74:37:61:5a:24:50:2e:6d:7d:e2:
41:ff:63:82:bc:b6:1b:5f:11:e1:75:1f:97:5d:f2:
15:ad:ad:a2:54:62:7c:be:eb:19:0a:98:b5:bf:dd:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:C5:5A:40:34:01:9D:52:7B:68:14:79:7C:03:DB:4B:B6:B4:33
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f6:04:8f:25:8f:e6:06:91:22:95:3b:ae:d6:7d:48:c7:d2:
37:60:5e:d0:38:31:ed:f9:5c:eb:14:fc:6d:d2:eb:0f:ab:a6:
96:c6:f8:2c:13:b3:c3:b7:06:2a:f6:ae:a0:94:e9:94:da:f9:
00:6f:e7:bc:09:53:61:5b:06:6f:3c:d3:cc:da:12:6f:1f:ae:
bd:04:6e:e8:5c:f5:3c:83:77:6c:77:50:ce:85:a6:56:db:98:
7e:d5:52:36:40:f1:39:d6:bb:75:d1:25:6c:11:f0:41:c5:36:
19:0d:f8:18:dd:a8:99:6c:ae:13:0f:6f:b0:48:14:d1:30:09:
79:65:e0:c6:9b:06:8a:db:97:77:f5:f7:0a:1f:2e:ca:4d:a0:
9f:ae:6b:7f:5d:f7:bc:b1:c5:67:22:43:61:1c:89:e1:66:5e:
6b:ea:91:bb:7f:10:75:79:7a:fe:bf:28:48:1e:40:8e:be:e4:
f4:f4:90:f9:47:35:c0:ba:af:47:27:2b:75:16:75:5f:63:9e:
7e:79:93:9a:36:12:64:63:fe:78:46:1f:99:c0:0d:e4:33:dd:
35:ab:89:60:da:3c:9d:a9:64:ca:bd:62:9a:48:13:20:a2:3e:
91:2c:12:7b:69:66:ec:26:de:f8:78:0c:25:dc:70:30:e8:81:
7e:60:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:24 2025 by rpki-client