Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: Wl27wECOkakXxSqvmAVcU99OXBQlqwQYFjSFLZ/8L3E=
Subject key identifier: 1C:2D:7C:32:DA:24:61:E4:BD:69:2C:6E:82:44:7B:E9:9F:9A:F7:AF
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 019A285607E9DB3406B946B01F9AA3901BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 01:01:57 +0000
Manifest this update: Tue 28 Oct 2025 01:01:57 +0000
Manifest next update: Wed 29 Oct 2025 01:01:57 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: nRPWPpO5psjLlLMAhQF8Jk0gqnFrfie8WUgFWRsdbh4=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:56:07:e9:db:34:06:b9:46:b0:1f:9a:a3:90:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Oct 28 01:01:57 2025 GMT
Not After : Oct 29 01:01:57 2025 GMT
Subject: CN=1c2d7c32da2461e4bd692c6e82447be99f9af7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:ed:d3:b5:b2:b9:6f:39:38:36:57:8b:85:
21:4b:d5:e1:0b:03:ec:e5:09:f7:b5:bf:1d:9c:42:
98:87:a8:e4:dd:a0:45:2c:1f:c0:e8:09:60:2f:a5:
fd:d0:6f:5d:d0:fc:9d:62:06:f1:c6:a0:7f:5d:89:
48:34:52:9f:4d:02:3c:15:de:44:0e:e9:0e:6d:02:
a0:86:16:e1:6c:02:2b:bd:3a:16:63:71:88:f4:54:
22:bd:f6:70:cb:80:dc:b8:16:1c:7f:4c:f1:4c:d4:
ec:1b:d5:e8:7a:26:96:3d:01:a2:49:72:88:bf:13:
a0:68:52:2a:ef:20:9b:9c:71:61:26:81:c4:2e:74:
a2:6e:c1:f8:e2:4b:2c:7e:9c:4b:c9:91:0d:a6:6b:
f9:92:63:ce:e7:03:35:6b:12:66:7f:94:90:31:9c:
3c:e9:d7:75:ed:82:c8:d3:c4:58:29:79:eb:54:d0:
56:a4:50:a2:f9:82:21:3c:e0:41:fb:08:e0:61:0a:
73:6e:c9:ee:7c:84:08:19:cd:cc:61:b9:80:dd:4d:
7f:2a:4f:3b:b1:5b:ee:49:4b:06:c8:be:d7:82:1a:
47:dd:30:f5:b8:df:90:9f:8e:96:13:4e:eb:fb:89:
aa:e9:12:02:ed:97:32:b0:97:6c:9b:b8:a9:d2:01:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:7C:32:DA:24:61:E4:BD:69:2C:6E:82:44:7B:E9:9F:9A:F7:AF
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:99:6e:33:d2:f8:3e:82:ae:72:ac:1b:d3:44:f4:72:28:5e:
32:fe:fe:e8:0a:26:a8:7a:95:30:fe:26:d8:0e:fa:36:3a:ec:
80:21:f2:09:50:e2:69:bf:9e:06:2e:52:6e:34:52:91:18:f6:
9b:96:6e:c3:e1:ec:68:03:de:cc:5a:9a:90:10:3c:bd:44:44:
31:90:e8:fd:07:d8:e9:14:68:2e:7d:bc:2b:a6:03:a5:8d:2d:
38:1e:73:68:12:b4:98:74:9f:49:84:df:06:d0:32:46:63:f8:
f0:7c:06:46:2a:d8:54:44:e2:52:d2:35:a1:72:80:71:e9:ea:
3b:45:dd:f4:99:2c:cb:6d:5e:7b:70:41:97:ac:2a:40:bb:49:
7b:93:b3:67:b4:83:0e:50:91:19:48:c4:c8:16:43:fd:31:de:
39:e9:23:c4:47:2d:2d:61:3d:a2:17:2e:2d:e1:f8:78:50:8f:
96:4e:bd:78:10:5f:78:9e:26:65:19:7f:6c:f8:fc:0f:85:b5:
73:a3:26:0b:84:7c:fa:5e:48:54:0e:7c:7a:bd:b5:be:dd:9f:
28:fa:9d:5f:74:8c:af:ec:2f:ea:a6:c3:48:4c:ca:42:33:af:
3d:48:6f:5f:4c:93:70:08:68:07:ab:46:c5:16:c6:76:7b:e0:
6d:3c:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:16:05 2025 by rpki-client