Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: B0g2bE5BoTfd8/IXlse4NUGU39iiqheNyIAE4ZWl7Go=
Subject key identifier: 20:05:4E:08:D9:33:68:A7:B8:14:9F:71:A8:3B:69:47:89:C6:8B:90
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019A1D9A87BB53EFA3A794039AB23C96CC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 23:00:57 +0000
Manifest this update: Sat 25 Oct 2025 23:00:57 +0000
Manifest next update: Sun 26 Oct 2025 23:00:57 +0000
Files and hashes: 1: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
2: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: XLS2sRFx15RpSS8r5VAmSh1OELJP+x1JUD1ou11h9+A=)
3: sUWqfK8lQ00leYnkVH10Ne2J_pg.roa (hash: /8L8fVSDnCy6dVHFrdbjnwTMBA89vKnVyPdJKfPn3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:87:bb:53:ef:a3:a7:94:03:9a:b2:3c:96:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Oct 25 23:00:57 2025 GMT
Not After : Oct 26 23:00:57 2025 GMT
Subject: CN=20054e08d93368a7b8149f71a83b694789c68b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:1a:58:cf:1f:4e:1a:ce:a5:c7:a0:d5:5d:
e5:8b:fe:d0:56:c8:c1:b4:7f:fa:6e:4f:55:45:c9:
81:19:b9:21:20:95:ba:73:59:32:ff:c7:81:b2:6f:
39:f5:50:38:7a:95:19:49:8a:c9:d7:08:5f:39:f4:
6a:72:82:69:d4:13:eb:36:ec:01:07:b6:bb:f4:3b:
64:f9:0d:17:77:25:f0:3b:5f:a1:0a:b8:ac:c0:9b:
4d:d5:4f:25:f2:92:ba:b2:97:a0:82:3c:1a:ba:6a:
1b:8a:3c:8d:27:80:2e:0a:69:a7:28:16:d9:e8:79:
6c:ca:83:71:ff:6c:e9:51:9f:16:4c:01:3d:47:5e:
c4:ef:b4:b7:72:94:c1:e8:10:48:3f:9f:af:05:41:
cd:90:08:58:8f:1f:5c:9b:13:3a:d7:e6:b1:f6:fd:
1f:c8:7b:78:91:d3:f4:fe:c0:57:e2:af:2f:9a:31:
52:b6:70:2e:6b:39:01:ba:c4:03:b0:60:ed:80:d8:
1d:38:e1:16:a1:f4:b4:39:3b:02:48:be:b5:a1:f4:
31:56:f6:a0:bd:0a:70:ac:ab:49:6f:50:b1:3d:e2:
99:96:21:bd:70:67:0c:9d:f3:a7:f6:5f:27:1e:24:
23:c6:d1:dc:66:40:aa:5a:d6:e2:a9:c0:66:ff:3e:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:05:4E:08:D9:33:68:A7:B8:14:9F:71:A8:3B:69:47:89:C6:8B:90
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c5:a2:bf:c4:15:13:ed:ec:55:d8:e2:df:60:f1:0d:3d:16:
81:63:6e:9d:3a:35:08:c2:1d:9a:64:21:03:c1:a5:56:e6:4a:
65:ed:4f:73:27:f9:16:93:37:30:f4:6d:cc:b3:53:34:f6:e7:
cd:3c:5a:07:08:18:f1:3c:8a:b8:01:09:e8:50:e0:a9:d2:75:
a7:76:98:86:9a:f0:33:bc:1c:eb:b5:47:85:10:82:c0:5f:0d:
95:6b:31:a3:eb:2b:ae:0c:08:47:dc:8f:d8:c7:b3:1c:fa:38:
38:91:74:47:be:f7:ca:45:b3:3b:ff:86:a9:ab:e1:8e:d7:a3:
9d:4a:7a:e4:aa:11:08:97:66:1e:40:16:96:6f:98:dc:bb:50:
27:94:bc:9f:be:f3:89:1e:f8:83:2f:d2:a5:74:e9:68:c1:07:
fb:27:fb:f9:a9:4c:b1:d0:00:04:0d:a4:68:3e:5e:b0:ee:b7:
f9:00:b3:4a:6e:c2:ac:cd:9a:2e:83:0c:69:97:14:25:b3:c6:
fa:3b:fc:17:ac:59:23:e5:ea:c0:a4:e7:88:7d:7d:70:2c:5f:
cf:9b:56:02:bb:6f:0b:25:6a:f2:33:e5:ef:7a:e4:3d:1f:e2:
aa:51:b2:2c:b4:19:11:fe:f7:b7:9b:2e:19:b2:51:0b:69:6f:
59:f7:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:32:41 2025 by rpki-client