Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: LbeLTtFwLs8KTCIqfvxmzBg43zSqKl2FIOyzqllUSkM=
Subject key identifier: 3F:CE:F3:C9:FB:23:1B:1B:82:60:BC:A5:6E:A8:E0:99:55:71:88:C2
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 0199FCC68C51D37F085BA10DBA6A4AD897D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: tf+jtzafrH4n/TFQF2iODeQAPJEd+BpBNGCkgtoxif8=)
2: W5VtAzPYHnJg8m79kjyqgqKE878.roa (hash: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8c:51:d3:7f:08:5b:a1:0d:ba:6a:4a:d8:97:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=3fcef3c9fb231b1b8260bca56ea8e099557188c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:90:27:54:dd:14:b3:4c:db:b9:21:80:be:d6:
bb:13:d5:f3:83:31:ca:e2:aa:d4:d5:b5:c0:ee:a0:
a2:ae:ad:3d:e6:0f:4d:13:21:d8:8f:ab:da:af:6c:
80:c3:ff:c2:3c:c1:61:91:f7:cc:89:45:b7:e8:b6:
c6:50:b1:4f:35:8b:22:67:48:c8:fe:8c:17:c4:53:
4b:9b:94:e4:b7:4c:ae:a3:5d:44:dd:38:bd:70:4c:
5a:87:a1:ed:02:a3:68:b8:31:96:84:66:cd:5a:a2:
f3:9b:12:54:2e:28:92:a0:7d:2f:5d:42:5a:6e:e6:
d7:8a:1d:0a:ab:b8:94:29:50:64:7d:97:4b:6d:da:
b0:5e:cb:c8:c2:04:fa:f9:22:1a:93:78:95:5b:ff:
91:9c:97:a2:0c:9d:ee:0f:d0:c0:01:eb:bf:ee:18:
8d:bc:c8:c0:21:f7:88:97:43:74:65:b7:8d:ca:76:
96:94:a0:30:2c:f1:42:22:a4:47:0e:c6:33:d8:f0:
63:4b:9c:d7:da:a7:f3:48:06:f7:43:9d:6c:9b:9e:
70:a4:a3:ee:10:08:41:9e:19:54:d8:cd:4e:31:7d:
4f:89:0a:88:98:6e:8b:1d:8d:fa:11:fc:0e:cf:12:
15:ca:5a:00:2b:29:18:15:08:9f:99:c3:34:a7:50:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CE:F3:C9:FB:23:1B:1B:82:60:BC:A5:6E:A8:E0:99:55:71:88:C2
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b9:a0:f6:fc:47:b2:f2:91:20:2a:b6:07:4f:30:f9:7d:58:
6d:e0:58:9f:f6:a6:01:33:d5:83:af:e9:b2:86:7d:cf:86:c5:
a2:77:30:52:89:59:bb:34:5c:29:27:95:15:66:4d:96:60:cd:
fe:50:0e:67:98:c7:54:9d:dd:4f:1c:d0:9f:2f:49:ea:c1:a1:
e5:d0:98:56:a3:44:a8:a1:5a:21:82:29:1f:d4:9e:ac:d9:c9:
ae:92:01:f3:7c:f8:3b:f0:0b:6a:3f:dc:de:53:62:e3:b8:aa:
04:72:a4:bd:a2:4c:a5:8a:8c:85:57:9e:50:11:c5:22:4a:68:
47:5b:ab:57:b5:d8:5a:8d:89:4f:2c:d4:79:c0:aa:d6:5f:60:
78:fe:83:40:76:5e:82:b7:5a:2c:02:84:15:f8:84:6b:7f:47:
47:f4:2a:04:c1:1d:f8:e9:8b:f7:92:d8:06:3a:17:bd:8a:fd:
0c:a2:15:aa:e7:47:92:f9:61:b3:29:2a:ba:79:18:b6:bb:47:
31:f9:b4:77:fc:3c:92:9b:57:87:44:ac:16:b3:cb:33:77:ff:
5e:a1:86:de:8f:6c:cc:54:1a:bc:7a:6f:c8:31:a3:6d:c9:29:
ec:7f:ef:d9:79:b4:f5:cc:4d:0f:35:28:10:10:93:52:02:f6:
fd:5b:dc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:09 2025 by rpki-client