Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File: cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier: 7ZB+G/X8juq26pg3bnMDPN9zPJeSGCNEApGIaTIUa7o=
Subject key identifier: A6:B6:61:4E:74:A4:33:A7:6C:6C:76:EC:06:18:DE:CE:10:A3:51:A3
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 019A01B5368CB8656DF64FBC776830F6035D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 13:00:44 +0000
Manifest this update: Mon 20 Oct 2025 13:00:44 +0000
Manifest next update: Tue 21 Oct 2025 13:00:44 +0000
Files and hashes: 1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: HSgPccfH7VfLQ8GfuGLrnezZ2YHzG16zw1Pi5jp6Cq0=)
2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:36:8c:b8:65:6d:f6:4f:bc:77:68:30:f6:03:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Oct 20 13:00:44 2025 GMT
Not After : Oct 21 13:00:44 2025 GMT
Subject: CN=a6b6614e74a433a76c6c76ec0618dece10a351a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:8d:55:61:1d:33:26:09:68:83:e6:39:de:
e9:f6:fd:a6:b8:ba:e7:0b:8c:27:a4:92:d5:87:5d:
5a:3d:51:64:72:33:5d:86:a1:f0:e4:23:66:09:06:
57:65:e3:03:ad:2f:0e:5a:a3:b1:c9:98:6d:ad:b0:
96:6c:bc:24:ea:8a:99:59:2c:c2:80:7a:5f:d2:02:
13:bb:da:0b:ea:a2:fa:0e:46:c5:c0:8b:1e:58:d9:
df:6d:06:9d:a5:2a:0b:19:70:c4:6c:40:dd:6f:fc:
be:80:c6:4a:4d:02:de:03:0b:6a:5e:7e:7d:d1:8e:
77:4c:d3:bd:c4:7a:be:3d:e3:fc:32:d7:4d:e4:61:
1f:df:5e:52:6a:01:e8:58:47:8d:20:bf:5f:36:bf:
c3:36:17:54:5f:05:4a:3d:5c:67:c2:b0:3f:9b:3b:
a5:8a:56:1b:c8:a4:04:28:4b:8a:e7:a4:31:5e:63:
96:37:65:2b:7c:ab:84:53:07:fc:db:36:ea:f0:d7:
29:ba:b6:17:f3:45:a9:4e:51:a8:6f:8a:0a:25:7f:
a3:05:76:08:f8:a4:a5:ee:2c:66:fb:97:b3:01:75:
c5:1d:2c:d3:3f:cb:da:03:87:85:d5:78:19:e8:29:
a9:ef:6b:ee:d9:d9:71:d8:de:99:15:1e:48:c0:65:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B6:61:4E:74:A4:33:A7:6C:6C:76:EC:06:18:DE:CE:10:A3:51:A3
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8f:e8:c7:bb:a8:a8:a7:6d:9a:a5:f0:40:cf:a2:bb:9a:f2:
27:aa:f6:1a:1b:fd:f4:7f:1d:69:d8:4e:82:2b:95:ce:32:0d:
2b:36:f8:c9:40:d5:0b:c7:6d:ef:bd:c0:6f:03:dc:32:1f:5a:
67:97:60:b1:3c:35:7d:11:d0:f1:4a:62:8f:f0:05:5c:ef:f5:
9f:3b:df:43:50:95:72:da:c0:ef:74:c2:ca:d1:09:67:73:d4:
96:6f:a2:6a:f6:81:5a:67:b1:da:4d:12:cd:fd:18:f0:83:d1:
93:b6:8b:0e:7e:ab:c5:75:29:eb:02:4f:e4:ac:f3:b4:a5:f2:
44:f3:53:ef:b0:78:ba:5f:37:c6:d8:bf:7c:e3:c5:95:9b:1c:
7c:56:e6:a8:47:2e:45:35:13:17:be:83:0c:1e:70:e4:87:2d:
4c:33:2a:4b:13:ea:86:df:bc:77:82:ab:6c:b6:ab:e6:79:86:
70:6e:fc:60:4b:e8:01:71:c2:1b:4d:b4:40:79:6a:c0:97:d9:
a1:e7:b5:73:e2:5a:b6:3f:23:67:78:41:59:6e:6b:6a:53:8b:
b8:0f:fb:95:9f:e6:cf:4b:fe:fb:05:37:35:06:cd:46:40:87:
8c:17:5c:2e:0e:f1:0f:f0:a8:2a:03:48:a8:c8:28:cb:b7:93:
ca:86:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:12 2025 by rpki-client