Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: vbmdQHHgvmZGlIBOJUimnrStdqX5X9HpdfVaVDk1ncQ=
Subject key identifier: C5:73:4C:12:C7:08:44:15:BC:CB:F6:31:84:0B:0C:4C:29:F7:34:41
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 01984B54169266C43E4E6603EFEC05F2F79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 10:00:58 +0000
Manifest this update: Sun 27 Jul 2025 10:00:58 +0000
Manifest next update: Mon 28 Jul 2025 10:00:58 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: sB9aSRCi4k680FxiB8WBbIzrSNUuClo4DOo+QZqw5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:16:92:66:c4:3e:4e:66:03:ef:ec:05:f2:f7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Jul 27 10:00:58 2025 GMT
Not After : Jul 28 10:00:58 2025 GMT
Subject: CN=c5734c12c7084415bccbf631840b0c4c29f73441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:43:40:9c:08:b0:69:c1:7f:43:43:5a:3d:
71:90:0c:4f:84:d0:7c:f5:a9:6f:ee:89:e7:1d:02:
dd:65:71:e1:1d:9d:e7:e9:52:a3:41:ac:6a:48:5e:
69:31:bb:dc:41:b3:c4:bb:00:3d:9a:77:9e:15:fc:
a3:78:00:62:28:58:a5:59:c7:2e:b2:e0:f1:b8:e9:
32:18:76:44:ec:c4:06:2d:e1:e9:c0:26:10:46:33:
30:19:65:f2:8c:89:d5:48:c8:0c:bd:94:30:99:16:
68:5b:64:87:2d:e0:fa:36:7a:e1:07:7c:26:96:95:
41:a8:67:1a:ba:0f:50:38:aa:82:e7:d8:6c:f7:92:
04:33:ef:08:00:c7:e3:12:d6:c5:b4:29:8a:6d:6a:
40:c6:dc:c5:1d:e3:ef:e0:89:f4:8b:d2:6e:60:79:
b7:7f:76:8d:37:a4:7e:13:43:73:cd:e7:0b:ce:c7:
3a:4b:64:b2:5f:dd:68:50:a9:22:dc:d8:6e:81:79:
01:af:d5:2e:f7:61:c3:bf:67:7e:69:77:0b:cf:aa:
2a:11:c8:62:41:bd:c4:e0:e2:1c:80:2d:f5:38:6a:
c5:20:ad:a0:f3:99:68:b7:26:2e:fd:7a:cf:f9:78:
80:86:bb:91:b0:8e:ce:1d:19:c5:03:a6:b7:fc:18:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:73:4C:12:C7:08:44:15:BC:CB:F6:31:84:0B:0C:4C:29:F7:34:41
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d3:f8:35:f7:4c:bc:d9:33:43:2f:6d:e6:f9:15:ca:6c:cb:
e1:01:6f:76:88:0a:78:38:45:4e:f3:02:02:21:f6:f9:f7:71:
8c:00:ad:fd:cf:4f:9d:7d:6f:31:5b:de:8a:77:b8:e5:ae:4b:
e8:96:d3:21:0c:ef:9b:9d:56:bb:b7:b0:f5:50:d0:72:4f:44:
93:1e:37:9b:27:b6:82:7c:f9:67:e1:2e:b5:74:a2:39:b3:f7:
0c:88:1d:ad:a2:78:bc:60:72:eb:d3:8b:3b:82:24:40:37:ec:
8f:90:9d:a5:7e:50:92:3b:9a:3a:ad:09:30:f9:07:11:62:92:
c8:22:f2:06:26:bf:ef:97:ed:73:06:3e:4a:43:8c:95:57:d3:
8c:5f:04:11:05:0f:4e:45:b8:e4:3a:71:36:d9:92:e2:c4:28:
5a:e8:13:f2:6e:ba:6f:8a:d9:b5:5d:c0:2f:20:88:97:5e:f5:
2f:8c:93:62:6a:d5:cf:76:b2:00:33:1e:ea:73:49:f8:60:a3:
20:56:4c:2f:9d:48:01:ac:97:b2:7a:74:4f:3f:b8:ff:72:3e:
ff:b9:2c:fb:3d:55:3c:97:ca:20:3d:5f:8f:7a:fc:21:91:ff:
66:25:f4:a0:d4:fb:28:ee:4e:bc:75:6f:ee:9c:91:85:91:b0:
81:cd:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:52 2025 by rpki-client