Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: OV74lpOi6K+yNoAzXpLoeAWKIGWmSeyVYU9NGgzJ6JU=
Subject key identifier: 04:E6:60:1E:20:96:A6:EC:81:2A:CA:47:88:A8:0C:88:77:BD:08:62
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 019A28C2FBE94D334ED681F7D0615BD408F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 03:00:58 +0000
Manifest this update: Tue 28 Oct 2025 03:00:58 +0000
Manifest next update: Wed 29 Oct 2025 03:00:58 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: FLk3RGhbuj56CC6bL782vuG/zwt6Scf6ZzLXNuXUDMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:fb:e9:4d:33:4e:d6:81:f7:d0:61:5b:d4:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Oct 28 03:00:58 2025 GMT
Not After : Oct 29 03:00:58 2025 GMT
Subject: CN=04e6601e2096a6ec812aca4788a80c8877bd0862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:e1:e8:56:21:52:6d:e5:1c:1e:7b:b2:74:
88:b8:af:3b:b1:5b:26:59:ca:bc:a2:69:45:0c:85:
bd:d4:c1:0c:51:14:f6:60:23:3b:95:2f:15:6e:17:
89:ff:9f:55:69:5b:fd:31:ff:ef:f5:2d:67:86:72:
8e:05:ac:2a:cc:52:c1:ab:7d:e7:72:ba:30:17:c5:
73:6d:ad:e4:18:1b:f2:5d:c0:e0:cf:14:13:e9:22:
f0:fd:bb:7c:17:db:0f:78:84:70:1b:44:d5:12:ea:
5b:63:db:1d:71:70:79:34:0e:c5:1a:d0:7f:ae:c3:
7b:a4:2d:b1:2f:7b:2d:88:6c:a4:c5:10:ae:79:45:
b2:8c:0c:dc:e6:93:1e:37:0d:43:29:a2:fe:52:9e:
80:0e:cf:7c:fe:8c:cb:03:dd:89:0f:3e:14:bb:ef:
53:4a:6f:11:0e:1e:0f:86:2e:83:ee:a5:d3:6a:5d:
f7:37:f8:38:b2:69:35:56:a4:eb:19:c1:e5:16:fb:
e6:79:1e:79:79:49:73:8d:92:70:6e:ed:2d:72:d4:
32:f8:3c:14:32:3c:9f:44:5c:a5:1c:f5:56:56:89:
3b:66:9e:67:95:a5:e7:2e:88:fd:d4:8a:fa:19:2e:
1b:0b:71:00:05:4b:8a:0b:60:26:b1:fb:cc:11:37:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:60:1E:20:96:A6:EC:81:2A:CA:47:88:A8:0C:88:77:BD:08:62
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:24:3f:74:47:59:66:13:3d:0c:3a:2b:34:db:96:80:c2:e4:
6f:c2:f8:3e:43:c3:a1:69:e0:dc:c7:2e:6c:b1:7f:e1:0c:35:
7e:fb:50:98:24:15:ed:52:ee:11:69:e4:b9:53:a1:09:69:a2:
58:13:ab:50:22:63:b2:7e:f2:60:56:67:be:de:45:75:33:19:
ab:22:4e:8d:39:87:f7:fd:2b:94:8a:b9:ae:5d:b7:89:32:ef:
c9:91:31:e6:32:fb:f1:0f:3d:0a:72:e8:93:d6:8e:23:2c:9e:
29:26:ad:eb:a2:db:6f:b3:31:92:35:e6:ec:7c:37:18:36:49:
93:06:e9:4b:4e:32:0a:03:99:1e:bd:40:c6:f6:16:a7:b1:db:
13:c8:cb:44:12:36:1c:6d:fc:f0:ef:9c:87:af:9b:2c:28:07:
33:f1:d9:bb:46:3e:af:65:12:a6:4a:8c:d3:e6:3c:99:c5:cf:
4d:bb:b3:02:ab:fb:af:1d:62:b6:fb:ea:35:45:a6:57:1a:f4:
13:21:ca:d1:48:fe:09:c0:e0:f1:be:02:c7:28:de:5b:95:72:
6d:bc:3f:49:15:32:7f:12:8d:b5:68:5f:e0:cb:b5:9d:64:cc:
3c:36:c2:a5:ae:88:34:36:4a:48:8e:d1:93:fa:1f:80:a8:75:
0c:d2:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 08:54:11 2025 by rpki-client