Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: Xei3HS10YHf1ho3NhjZanzbIskQ4VyMkcEQqPItyl1o=
Subject key identifier: 06:53:F8:CC:9C:23:B7:E7:32:68:5C:AD:98:DB:81:BD:03:18:EA:74
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 0199FCC6A1B452F409A4C99324C6E4F79F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 14:01:39 +0000
Manifest this update: Sun 19 Oct 2025 14:01:39 +0000
Manifest next update: Mon 20 Oct 2025 14:01:39 +0000
Files and hashes: 1: DPZDlwC5lvIBjZjDv4jWEsMDlMI.roa (hash: JSJ9xva93NHEmD/GiUVFRsLxBb1tpR6rl5zNqgBI5EE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: QBN59uwf3muMt9KinNYU9uPl1x6PcTXaaqi6BxMz48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a1:b4:52:f4:09:a4:c9:93:24:c6:e4:f7:9f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Oct 19 14:01:39 2025 GMT
Not After : Oct 20 14:01:39 2025 GMT
Subject: CN=0653f8cc9c23b7e732685cad98db81bd0318ea74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e7:4c:7d:15:cb:61:24:c8:46:ef:f2:67:e9:
b4:6c:61:2e:a4:5a:b9:20:ca:ed:e1:83:04:db:4e:
be:ee:46:cd:93:22:76:70:2b:6c:31:a9:e4:5c:23:
ef:1f:a7:89:d5:44:64:29:31:52:33:6a:51:2b:cc:
6a:17:ae:2d:11:23:72:23:b2:cf:19:45:d1:a5:54:
40:1a:37:5a:b2:54:91:5c:31:b7:ae:e7:90:01:de:
4d:cb:a0:c6:19:08:73:90:21:a2:58:df:9b:2e:ff:
db:c0:33:78:80:9a:b9:73:39:5f:6d:c1:d5:61:68:
1f:6e:50:4a:50:88:a6:1b:23:55:73:c1:0a:1e:c0:
c8:14:0e:63:ff:b7:6a:98:02:d4:c7:67:15:5e:ea:
b5:a8:29:be:6a:33:93:22:4b:d3:1a:7f:1b:07:12:
d7:3b:45:d1:83:d1:42:b8:2e:37:67:24:57:be:c1:
1d:15:d3:f3:ce:bd:83:a1:0a:95:dd:5b:6c:e1:aa:
58:d7:60:ea:73:c4:db:eb:d7:cd:6a:aa:3f:b6:ae:
ee:05:fa:33:71:4b:a3:db:27:f3:6c:e1:47:3b:27:
e9:36:bf:e6:ec:bf:81:e9:cb:e5:53:78:11:f4:1b:
36:17:c2:a9:9e:fa:a5:b2:72:e2:78:e2:28:a3:a8:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:F8:CC:9C:23:B7:E7:32:68:5C:AD:98:DB:81:BD:03:18:EA:74
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:af:5f:d8:83:46:44:3b:02:35:17:00:38:5a:27:ec:3a:00:
46:6d:07:28:67:c4:16:f7:0a:28:21:d3:d8:91:16:b0:9b:b1:
94:2c:2d:7c:87:b4:71:0d:89:d2:0a:9b:fa:70:73:12:47:fe:
16:35:c9:71:16:0c:05:8c:1c:90:a9:89:2c:41:a5:6d:da:2c:
a2:59:85:8e:f7:43:43:54:34:59:03:5b:89:35:aa:a8:dc:ec:
e5:c5:11:2d:62:12:eb:3d:d0:fe:2f:9a:cf:a1:70:fa:14:13:
cd:1a:6a:8c:7c:27:96:3f:42:3b:84:5b:a3:7a:17:b1:29:cb:
d7:de:89:3d:5c:c8:6d:a5:52:03:da:97:70:c1:6d:1e:d3:8b:
06:56:7c:32:33:64:3d:2b:47:1e:8e:08:15:eb:c4:1e:f8:bd:
96:cb:2a:11:e7:f3:4b:7e:26:e7:07:08:7e:cb:6e:1e:62:49:
cf:c6:8e:25:6b:07:dc:a1:1f:f0:62:a0:01:be:7a:07:72:d0:
8d:a1:6e:28:ea:37:2d:d4:80:5d:59:e6:dc:a6:01:84:30:7a:
4f:13:bb:39:44:ee:ea:4d:16:7a:bb:96:1e:2f:fd:25:61:70:
ba:cd:95:02:d0:b3:3b:2d:df:78:53:bb:24:56:2c:de:1c:2d:
50:70:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:46 2025 by rpki-client