Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: sRqzDH94nujjFOmN8hsFSXRBHuvJVq6nbLHv34l3j9M=
Subject key identifier: 0F:19:67:C7:78:EC:01:97:7D:FC:C3:BC:F6:1D:49:71:19:A8:98:A0
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 0199FBEB9493DFBE961048F5928011C1C203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: AIBieMIH0iZoM5oA+AvNBHwts3xtKmdCFb8SQoO0dZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:94:93:df:be:96:10:48:f5:92:80:11:c1:c2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=0f1967c778ec01977dfcc3bcf61d497119a898a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:0f:50:94:e5:04:f4:87:4f:18:a0:df:fd:
90:55:0b:0a:59:7e:d7:61:95:79:22:26:33:cb:23:
ce:47:b3:6f:e1:85:b4:e5:0e:33:02:54:b2:97:8b:
1d:b9:49:8d:20:44:1e:8b:5c:7f:e2:a4:0f:0a:3a:
b7:30:0e:5d:39:56:45:e7:79:71:26:54:d8:be:1e:
13:d1:b5:15:45:42:5a:18:8a:86:fe:d1:01:05:29:
11:e9:8c:2b:60:ea:fe:6d:f3:6a:50:4a:68:81:73:
10:08:b7:59:bc:41:2f:45:c8:3f:b7:02:2d:2a:9d:
9e:f9:57:7e:71:64:1d:1d:3e:58:4d:b9:8e:44:3d:
a1:fb:71:d5:5e:c5:4b:d9:3c:cc:ab:9c:a5:aa:e5:
93:7b:98:01:ab:ec:c5:e8:48:ab:b3:37:c5:3d:fb:
18:be:9d:63:8d:68:65:86:74:30:bf:fb:23:5d:42:
79:0f:08:51:bc:64:c9:f7:60:c0:dc:9f:aa:a8:b7:
ef:34:20:af:87:97:4e:d1:91:32:c1:93:6b:e3:64:
df:2c:f1:06:0b:78:2e:fe:32:71:6d:a0:88:60:9a:
38:fc:8d:7c:cc:0c:78:53:28:a5:94:81:1e:47:d0:
76:8b:07:f3:cd:9d:e1:a4:08:0e:95:32:7d:20:2d:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:67:C7:78:EC:01:97:7D:FC:C3:BC:F6:1D:49:71:19:A8:98:A0
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bd:58:c3:76:90:6c:c5:fc:7f:7c:5f:1f:09:a9:66:f5:2b:
5b:f5:86:68:c5:79:7a:f3:e8:bf:94:4f:9d:66:9e:65:b3:8f:
06:c2:ed:d0:4e:7e:c7:0f:7c:e0:bd:1a:6e:2b:d7:76:8e:2e:
7c:cb:21:af:b1:fd:37:0a:91:13:3d:74:24:6a:67:40:6a:9a:
cd:56:97:44:5e:6f:d9:84:42:bd:67:98:b5:c3:10:6f:99:2d:
64:01:05:c2:0d:a1:fe:70:85:fa:5e:06:08:0b:3b:62:56:64:
d8:c0:6b:be:fe:15:3f:64:1f:53:54:91:b9:78:29:15:33:4b:
e6:11:c4:d6:82:02:05:3c:9f:07:2b:3d:3e:6d:22:56:30:24:
08:ae:6d:9f:98:0e:b0:d6:eb:37:92:82:13:5c:78:4f:d7:d0:
ad:ca:c6:b5:c8:a3:cf:fb:70:73:34:fe:cc:10:67:4b:15:0e:
f4:a2:61:53:e0:07:38:b2:a9:55:b2:60:34:93:8d:45:ed:66:
e9:48:0a:cb:01:9b:c6:21:83:61:04:2e:b8:be:59:f0:93:9c:
2e:e0:31:00:6d:63:59:8c:86:b0:36:24:e0:65:b5:e3:fd:26:
dd:a3:c8:63:d4:b7:5a:30:e2:49:5d:d5:02:9b:f2:ff:9f:76:
10:ac:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:03 2025 by rpki-client