Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: iTKnEii9fOF0AeqoPl2Lsx42PYJbP0jzp4X0wHE6V4Y=
Subject key identifier: 95:B7:BE:B8:06:A8:1D:E7:E0:7A:E9:F5:D3:BD:D5:9E:0A:78:45:67
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019A00352B6A47489ECDFD36632EA4024F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:15 +0000
Manifest this update: Mon 20 Oct 2025 06:01:15 +0000
Manifest next update: Tue 21 Oct 2025 06:01:15 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: GjVoqud8UoTbSeHEk1WL8RDyprum+I74YsgXjbjvYVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:2b:6a:47:48:9e:cd:fd:36:63:2e:a4:02:4f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Oct 20 06:01:15 2025 GMT
Not After : Oct 21 06:01:15 2025 GMT
Subject: CN=95b7beb806a81de7e07ae9f5d3bdd59e0a784567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:e3:d4:c1:43:33:45:f1:29:04:7e:a6:e1:
d3:f2:e1:52:64:05:83:00:b1:1d:d3:ec:9f:81:9d:
1b:a7:98:92:ac:2d:75:88:f7:05:1b:8e:0a:7a:2d:
59:01:96:f9:ad:26:48:d2:a9:51:dc:b8:f5:8c:c4:
cb:49:37:ac:c8:ed:97:ef:70:f6:93:78:c8:fc:fe:
10:1a:c7:ab:6a:6a:43:af:c9:7e:89:3b:33:7b:56:
7e:af:6b:d0:8a:cd:fd:f1:4b:0d:81:e5:90:f1:6b:
c2:e6:48:b9:01:bb:87:fc:e0:4f:a6:9e:4c:3f:4b:
76:7e:40:d6:ba:9c:c7:66:cf:01:f6:f3:62:09:15:
80:23:3f:95:8d:15:45:4e:06:84:9b:1f:54:9f:f0:
9f:7f:79:cd:48:fb:8e:10:6b:ff:e8:ed:3f:32:4a:
27:da:8b:98:3d:f6:9b:e6:bf:0c:02:17:92:f3:3a:
6a:16:f0:3a:8d:8e:5d:d6:30:8f:3f:2c:ff:cf:30:
4a:0b:4b:f7:4d:56:7a:e7:41:5e:d2:a1:3b:13:11:
ea:0d:cf:7e:d0:c1:f4:ff:8f:df:c7:90:67:1f:c6:
c1:a9:6e:4f:14:32:34:52:e4:5d:85:c1:45:43:68:
6e:10:eb:74:8b:37:25:84:90:de:fb:71:be:c0:28:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B7:BE:B8:06:A8:1D:E7:E0:7A:E9:F5:D3:BD:D5:9E:0A:78:45:67
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f5:9b:12:e8:f7:c8:48:9b:87:fd:7d:62:a1:f3:46:48:21:
9b:58:77:fd:88:69:e8:6c:dc:7e:16:3f:b5:3a:99:78:bb:53:
b6:7e:3e:51:6b:3b:de:8a:df:b2:87:5c:f1:ea:5e:6a:52:ab:
11:8a:12:2a:5a:d6:5f:67:d0:87:dc:fe:8f:40:de:27:09:19:
45:45:3c:22:d0:07:2b:f7:de:33:61:08:99:7c:18:bd:68:57:
6b:74:14:6f:d8:a9:45:48:e7:6b:4f:5c:1e:df:6d:b5:dc:05:
ce:3f:69:67:6a:2f:f2:4b:0a:93:96:39:b2:bf:8c:90:db:09:
be:74:3e:ad:6f:3f:66:78:d8:7f:cf:5c:b5:44:d2:64:22:52:
0e:a5:39:11:bd:65:3d:62:62:b0:42:ad:73:34:8d:e0:f8:cc:
ca:44:b4:09:f8:36:aa:7a:91:c7:ef:a4:8d:55:e0:20:8e:5b:
e3:44:0b:a9:ec:7c:ec:56:66:2c:a7:59:79:9b:a3:c5:d4:48:
dc:61:b8:db:7c:5f:4e:30:58:da:25:cd:77:ec:83:08:cf:b4:
57:96:69:dd:92:4e:b6:1a:39:2a:10:e3:37:5f:b2:ad:60:0d:
8e:e0:1f:cf:b9:ef:5b:22:6e:9d:3b:6a:57:0b:5c:41:84:8b:
70:9e:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:16 2025 by rpki-client