Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier: cbnoTVRSURaUiK35o5QYdoqRNTA0hXKwbkh2UKihdP4=
Subject key identifier: 97:F6:FF:14:D2:4F:3E:3E:93:65:54:C5:D0:00:88:C7:F4:5E:4B:F6
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial: 0199FCFD5E2E5615DAEC71E31A082FF252F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:27 +0000
Manifest this update: Sun 19 Oct 2025 15:01:27 +0000
Manifest next update: Mon 20 Oct 2025 15:01:27 +0000
Files and hashes: 1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=)
2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: 6I/WXIFtjbxBwkAG2LXYBko4MT+zAvdcYg0ZVALMVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5e:2e:56:15:da:ec:71:e3:1a:08:2f:f2:52:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Validity
Not Before: Oct 19 15:01:27 2025 GMT
Not After : Oct 20 15:01:27 2025 GMT
Subject: CN=97f6ff14d24f3e3e936554c5d00088c7f45e4bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:74:2b:c5:30:08:2a:01:76:a2:18:9f:5a:
25:f7:fd:4a:c7:2a:bb:1a:8a:e4:46:77:2a:b5:b6:
a9:70:df:51:93:a7:8f:95:63:67:96:a6:86:61:c0:
31:39:e6:66:ff:01:27:7a:fe:56:59:97:87:55:80:
9e:59:54:c3:76:1e:0e:41:bc:21:69:76:80:ee:d8:
b6:2a:a0:1b:73:6e:72:8b:71:4c:9d:fa:70:0b:fc:
74:f3:58:02:74:a7:7a:c6:86:34:1a:17:58:b4:37:
6b:fc:16:e1:48:1e:45:d1:4c:64:5e:57:a5:4c:9e:
cb:f5:05:13:63:49:79:7a:e3:68:71:93:11:c2:9f:
9e:90:94:9f:a3:66:ff:fc:93:5d:10:47:89:1d:68:
75:e0:4f:d5:33:8c:d0:b4:af:5f:73:71:30:b6:e9:
24:f2:ee:92:9b:9e:86:64:09:64:52:5f:e8:d3:64:
59:90:e0:f6:54:d5:04:ee:c8:f1:37:c1:e7:84:bd:
47:43:97:73:7b:01:10:30:f9:07:aa:13:ca:d5:79:
93:0a:de:be:f8:89:13:ee:a7:13:35:87:a8:cd:c7:
f8:55:8c:6e:89:44:bc:38:85:c4:ac:36:2a:a5:67:
09:88:af:5c:23:69:0f:f4:8b:77:aa:9c:5e:7c:5c:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:FF:14:D2:4F:3E:3E:93:65:54:C5:D0:00:88:C7:F4:5E:4B:F6
X509v3 Authority Key Identifier:
keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:ac:4f:ac:60:76:9a:b3:a5:2e:08:03:30:fa:d9:b8:61:
43:5a:80:e9:45:63:70:f2:37:1d:03:cc:e6:11:cd:80:ba:a6:
08:f8:c3:de:9f:33:58:fc:aa:10:e6:06:39:b2:58:d0:c4:72:
b2:26:53:ad:14:de:23:30:a5:f2:4b:25:d9:fa:bd:25:20:f0:
92:e6:5a:27:96:2e:23:a7:04:17:ee:a0:40:1d:41:3e:e4:7b:
55:c5:6b:14:4d:8d:4d:cd:b1:7a:d5:47:b8:fc:0d:ab:db:e3:
aa:7b:c9:b2:6d:04:1f:ef:33:34:1b:b1:58:9c:2e:b4:e6:a4:
39:cb:42:a6:4d:39:13:c7:ce:87:ed:8e:ae:b0:f0:7a:60:68:
f7:3f:53:21:d6:89:0b:55:4f:5b:5a:cb:7f:fd:57:8f:1c:51:
ab:3b:35:9d:f7:5d:78:7d:fa:59:3e:6d:3b:1d:c6:72:ca:71:
ab:09:f6:e9:1f:6c:6c:6f:eb:58:93:f2:20:0b:ca:3a:87:15:
a0:92:7c:a6:79:d8:a0:70:2f:92:a1:57:51:c0:6f:02:65:b4:
62:56:07:b6:76:0a:e6:16:98:86:8e:32:5c:b7:f4:e4:5d:c7:
9b:56:4d:05:de:2d:b2:45:d7:95:66:f6:9d:cb:66:83:fd:96:
10:0c:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:19 2025 by rpki-client