Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: 0RKjYy+waFSUDux/BPwZiV7YhNqtQW09vBorR1JKvCM=
Subject key identifier: C8:9E:06:DE:46:C4:08:F5:D1:D4:E2:19:8E:51:DD:D4:CF:44:A3:D7
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 0199FAD7AEBA794C5F467734A8091130B8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 12AC
Signing time: Sun 19 Oct 2025 05:01:02 +0000
Manifest this update: Sun 19 Oct 2025 05:01:02 +0000
Manifest next update: Mon 20 Oct 2025 05:01:02 +0000
Files and hashes: 1: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=)
2: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=)
3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: WvowIBisOrvhNj5JEKOhwbch2psEehoxYlbu2fcBYD8=)
4: EiLZXNFLeYaMBuVG79qI9-lFpJ0.roa (hash: pWVGRhAAESPBnV3t2uHYBiBVbQwsb0r95XhCGXUNPKk=)
5: pjH39R69sTwNHovgBG7mjRi0zDA.roa (hash: ///nC0KLmONlIJKYPkTb/i0CXtnKWaQJex/id87l6FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ae:ba:79:4c:5f:46:77:34:a8:09:11:30:b8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Oct 19 05:01:02 2025 GMT
Not After : Oct 20 05:01:02 2025 GMT
Subject: CN=c89e06de46c408f5d1d4e2198e51ddd4cf44a3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:f4:2f:e8:ba:a2:5f:b5:87:92:e6:e8:f4:
2e:bf:05:0a:70:76:8a:b5:c0:4b:8d:0b:0e:14:3b:
a0:ea:ab:4f:4c:81:8c:4d:4e:eb:38:96:c3:b5:e3:
41:0c:4a:fb:61:66:bc:18:8a:70:56:eb:53:8b:0e:
6d:03:71:46:cf:ed:ba:dd:7b:34:3c:3a:21:e0:9f:
51:b8:3c:6a:bb:b3:7d:4d:8b:a4:77:ca:e6:a3:6f:
10:44:0a:70:73:fa:af:38:12:86:8f:e1:8b:63:cc:
93:7a:62:12:00:a9:8d:a9:c3:25:95:a5:61:b0:32:
23:73:a5:35:e6:5c:4f:51:e5:83:c0:6f:47:ef:56:
23:d0:60:36:75:3e:f2:a2:39:01:60:05:3d:0e:76:
ef:dc:37:21:bf:d0:57:77:b0:cc:2b:ec:09:d8:f9:
b9:bf:88:c9:92:b6:cc:d1:5d:86:11:cc:57:c6:0a:
77:24:8a:5c:1f:02:14:d5:13:41:79:7f:1a:d4:b2:
9a:6c:8b:27:07:05:11:22:3e:90:cf:38:c8:d1:4b:
4e:17:db:b4:d0:2e:c1:6e:9b:48:a1:ac:11:f0:c5:
90:1d:3a:d9:89:1e:e0:18:84:7a:36:ad:b1:54:1e:
c3:a9:22:f5:95:fe:05:d0:4e:77:d6:f5:a6:32:aa:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9E:06:DE:46:C4:08:F5:D1:D4:E2:19:8E:51:DD:D4:CF:44:A3:D7
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ce:4f:e5:e1:ef:d5:9d:01:b7:93:a1:97:57:c0:66:1d:52:
3b:2e:11:d8:10:7b:95:f2:f9:cd:84:ed:34:69:36:0f:6b:d5:
34:ea:96:0c:9f:2a:d1:28:d5:a5:3d:ae:0b:ac:a7:c1:9e:1e:
eb:9b:43:c1:8c:4f:5d:1d:6a:e9:9c:ff:44:ef:40:bf:71:5a:
78:54:3c:5a:46:cb:4f:92:33:e2:27:3a:ae:ae:d0:d2:b2:5e:
24:cd:de:d0:c3:9d:18:72:ef:93:2f:f9:2b:c9:ff:b8:45:f8:
ec:c9:d2:28:09:7d:53:3d:a4:87:a7:2a:a6:37:5e:34:0e:58:
f8:5a:3d:bd:8e:fb:57:77:5a:32:97:63:9f:4a:91:c6:24:ea:
e0:28:5f:a1:2d:f5:aa:c6:8e:36:23:90:81:70:82:52:ec:4d:
c7:92:47:f8:56:91:84:86:10:66:72:11:df:53:55:38:69:95:
fe:1e:e0:8c:f4:d4:34:33:ab:7e:89:eb:96:09:d1:3f:0b:b3:
98:8d:20:17:24:f8:df:bb:ed:46:8d:39:1b:19:6d:9a:ae:34:
93:54:1a:de:11:2f:89:4e:1d:03:2a:d6:9c:44:8b:96:3b:8c:
27:af:c6:03:0b:96:b6:75:f0:d7:20:be:ab:e2:af:7e:aa:df:
38:07:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:46 2025 by rpki-client