Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: DWTQ9+z/TO6QYMPav+rEk0+QMcZyqnzPiP1AnYCPN1w=
Subject key identifier: E3:94:79:14:DD:B9:5D:52:8D:5B:3A:C1:68:AA:87:56:4F:1B:94:4E
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 0199FC8F4FA2E3DF29D6477A8C733CCC2D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: 5W4vD5UwyndqSUSdtVk+amuVLZi/DSHjlwX2bQ1nr7M=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4f:a2:e3:df:29:d6:47:7a:8c:73:3c:cc:2d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=e3947914ddb95d528d5b3ac168aa87564f1b944e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:33:1d:3f:2b:c7:d3:8d:57:6d:7b:80:84:
fe:32:9c:1d:d4:73:b2:e1:ac:48:95:2a:61:fd:05:
79:fa:92:f3:0e:81:f0:fb:4a:dc:2b:ea:13:02:3c:
ea:ba:a2:24:cc:7e:30:25:fd:f9:2e:0c:ec:15:68:
9f:d6:32:c9:97:dc:52:c9:05:d9:4b:16:b2:78:06:
62:93:dd:4b:f9:8d:1a:07:48:2a:42:e9:81:6b:81:
68:c3:db:3f:19:7f:25:b3:51:6b:60:1c:2b:d9:81:
fc:8b:01:a4:fe:98:a6:65:b3:55:db:42:a8:95:e7:
68:4b:8b:70:77:8a:27:bf:90:dd:e6:d3:1c:85:41:
7c:29:6b:a6:76:4c:9b:dd:54:1c:54:4f:dc:d2:63:
30:95:73:09:cc:c0:db:e3:c0:5e:62:51:05:15:9c:
99:88:b7:19:1a:b5:43:84:fe:ef:9e:8c:3f:ce:ea:
d5:95:7c:35:3d:9d:8b:0a:ad:22:58:11:92:22:b2:
8a:88:e1:da:53:cb:92:69:84:de:17:b3:1d:0b:b8:
fd:e6:fd:b6:2a:28:aa:28:63:19:8b:8f:11:96:e8:
61:95:dd:2d:3e:4a:22:c1:84:d4:0a:33:2a:65:40:
3e:63:bd:98:59:cb:a3:19:de:44:1b:e1:b4:bd:70:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:94:79:14:DD:B9:5D:52:8D:5B:3A:C1:68:AA:87:56:4F:1B:94:4E
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:bd:1c:fa:45:07:d1:3b:bf:da:c9:64:95:46:32:f5:25:97:
dc:75:17:7e:a7:af:5b:2e:37:56:92:c4:28:ee:3e:45:fa:21:
fc:f9:50:0b:c3:b4:e1:94:04:63:fd:53:65:52:0f:97:aa:62:
78:e7:86:51:20:7c:13:6c:94:4b:a1:fb:90:f7:a6:b2:f9:7f:
51:ab:29:d7:72:a6:4d:31:c4:ab:9d:e2:98:ee:30:2d:75:f8:
a8:8e:c0:2f:d9:eb:c5:95:10:22:3f:21:51:27:af:55:d5:1c:
9e:db:ad:ff:2b:51:51:26:ae:b0:69:cd:d3:16:1c:47:c6:b0:
ca:ea:d0:23:4d:2e:40:c4:6d:3b:11:cd:9c:97:24:55:d2:6b:
f6:90:56:c5:10:ad:cf:c1:8a:fe:f3:e7:9d:48:b4:c9:8d:17:
bb:ee:27:15:59:12:23:76:e6:46:9e:11:9e:20:5b:02:7d:46:
20:8d:fa:9c:47:e3:f8:c6:81:c1:77:b5:30:c1:38:a0:fe:6e:
8e:ee:96:9b:7f:57:1b:11:82:73:3c:9b:21:01:61:32:15:56:
b1:b1:3f:04:19:dc:14:0a:af:0f:e9:76:82:f8:af:3e:b3:cf:
7b:88:a1:f6:38:3b:c0:7e:d6:aa:ff:dd:8f:3a:5e:b7:48:f2:
b5:f3:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:53 2025 by rpki-client