Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: UkGPhHcA0HlXEvG/m0UwvX86JZ2WBW1hMBJcaph6XLA=
Subject key identifier: 05:81:4F:1A:60:E0:94:D8:3B:5A:B9:6F:1C:CC:3D:B0:79:5E:69:FE
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 0198D65F72E79BD98385B0DCF62AD7251AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: QAQKXDWFHEC3v9PQ41mGeOvp17rxoF1MGb+IZx2JoXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:72:e7:9b:d9:83:85:b0:dc:f6:2a:d7:25:1a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=05814f1a60e094d83b5ab96f1ccc3db0795e69fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a3:43:34:89:f1:41:12:0f:8a:51:04:b3:76:
5e:26:f9:e4:50:c4:e1:cd:8f:79:eb:66:1d:35:16:
dd:59:ac:4d:35:91:2b:72:42:7c:14:eb:f5:d5:26:
5a:3a:67:86:8a:04:ee:25:fe:31:99:69:43:41:c9:
3e:d5:fd:b8:9d:e2:3a:1d:58:0b:8f:65:19:ee:8d:
60:1d:8f:39:bf:ed:08:31:ef:ee:60:3a:6b:e4:d9:
04:e8:7d:66:d1:bb:ae:c0:dc:5b:d4:8f:54:95:90:
26:a5:e7:7a:6f:a5:a1:87:62:75:ac:4a:b4:b5:93:
e0:e8:97:06:3a:ff:79:a4:51:91:30:50:6c:ad:c5:
84:96:f3:64:54:a8:31:6a:99:bb:97:51:cd:1f:ec:
09:2a:d6:47:c4:5c:5a:c2:ab:75:aa:d4:45:d1:d6:
cd:4e:64:55:2d:e7:f4:e2:03:43:81:8b:29:67:d7:
14:e1:83:0e:af:05:be:45:99:9f:0b:31:52:1f:52:
7d:e7:29:ce:1b:fc:cb:6a:96:38:77:8c:e2:f1:f7:
26:2e:b3:d5:56:e9:48:a2:03:a3:57:23:46:ac:3e:
39:a1:bd:b8:c0:7f:f5:83:d0:8e:38:cf:f7:f2:67:
0d:fc:2e:02:9b:e9:48:71:06:3e:1e:ef:01:87:37:
4d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:81:4F:1A:60:E0:94:D8:3B:5A:B9:6F:1C:CC:3D:B0:79:5E:69:FE
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0e:86:8b:cc:28:a8:d9:1b:51:3a:81:40:d4:0b:0a:b5:bf:
90:5f:6b:cc:1a:41:07:c5:2d:d3:e3:3a:a2:59:8a:9a:ef:85:
35:68:a5:da:4b:c1:77:a0:ed:5d:a1:20:9b:14:2a:11:31:9c:
23:e4:e1:99:87:54:5e:49:5c:85:d8:f9:e8:1b:0d:7e:d7:03:
16:8f:3e:b5:da:6c:a7:27:ca:18:e2:06:8a:b2:fa:e5:62:e7:
83:46:4b:50:0a:c4:41:1b:fd:ef:75:a0:1d:43:58:9d:5a:f1:
52:17:1b:86:b2:c1:49:ed:53:83:68:ee:4f:20:79:9f:00:44:
f2:90:fa:96:fa:d0:ca:61:cb:bd:ee:77:93:a3:5e:e7:79:13:
89:a1:9a:f9:91:5c:55:20:03:79:ea:ec:86:ed:4f:da:02:11:
84:17:6b:11:5a:7f:5f:8d:5e:b7:04:c4:e5:c2:c8:2c:69:4a:
21:f2:0f:a3:13:93:b5:03:1f:ec:89:ce:76:1f:5b:8b:a1:3d:
f2:bc:d1:ad:9d:b5:89:7a:45:5b:50:ea:7d:10:0a:26:54:3f:
5a:60:58:de:cc:25:5e:e0:db:3a:fb:31:a4:f8:47:00:d2:f9:
02:10:42:32:2a:b4:93:ce:ba:ab:03:b5:de:1d:93:99:86:6c:
df:5b:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:23 2025 by rpki-client