Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: hHGqrsSqwFKK/xcoUcKZsHmDl10tQEYVG0R9jvpUfKs=
Subject key identifier: 74:6B:AD:7D:49:68:C6:19:DF:B4:AA:78:4D:ED:1D:3D:66:67:54:5E
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 01993313ACEEC461DB95201707CDFD0600D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 10:02:31 +0000
Manifest this update: Wed 10 Sep 2025 10:02:31 +0000
Manifest next update: Thu 11 Sep 2025 10:02:31 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: VI1qN2+5Y2m8U4E9I2nXLWdsvulBJ2tCDmZEzzqe2KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:ac:ee:c4:61:db:95:20:17:07:cd:fd:06:00:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Sep 10 10:02:31 2025 GMT
Not After : Sep 11 10:02:31 2025 GMT
Subject: CN=746bad7d4968c619dfb4aa784ded1d3d6667545e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:3b:c9:da:ea:00:76:d8:c2:af:ed:a4:85:
37:40:91:46:89:6a:e8:6e:e9:5c:36:16:36:4a:13:
a6:96:06:47:34:16:f6:e8:f6:bc:65:52:d8:fc:ee:
73:aa:11:39:09:21:e4:6c:91:06:96:3a:a2:9a:1a:
02:18:e4:35:b8:d4:46:97:b2:da:21:ce:d9:3c:b1:
9b:9f:9d:de:f1:a8:83:bf:fa:99:a3:6d:49:73:b6:
c2:4b:4d:a9:65:b5:69:47:cb:73:3a:27:d1:e5:11:
ae:30:2d:13:5c:b7:2d:f1:26:b2:47:7c:30:48:11:
d5:a6:10:29:6b:27:a0:37:a4:a2:67:0f:2b:33:c9:
3c:ae:ba:a0:69:10:ed:fc:3e:98:b5:e1:00:ed:b7:
eb:00:c4:ed:10:6f:c6:40:5e:26:5f:75:59:e2:0f:
a3:16:cd:2c:5c:90:0a:55:36:ca:c6:01:7f:56:2d:
90:4c:2b:8b:a9:be:d2:42:c1:d4:a0:18:70:d5:23:
76:dc:bd:f0:ca:68:cd:fa:4e:89:a1:93:0b:cc:2a:
fb:16:7d:41:5f:44:3d:b1:c3:15:35:d6:f9:9e:e6:
d6:cb:61:a1:05:75:c9:2d:70:9b:6b:b3:fd:e2:f0:
0a:30:a0:6a:27:6d:69:fb:dd:59:02:57:df:fd:06:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6B:AD:7D:49:68:C6:19:DF:B4:AA:78:4D:ED:1D:3D:66:67:54:5E
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:10:37:cc:c6:44:e0:0f:4e:c6:95:ca:25:53:92:c8:89:26:
a6:7b:22:d2:06:58:99:bd:45:4f:72:21:51:80:27:37:d2:3a:
3c:7b:e2:f6:9a:28:58:cc:f4:f7:82:96:86:81:39:27:4c:c1:
62:3e:36:5d:8c:ff:8a:17:3a:91:29:8e:d2:6f:06:3e:2c:1b:
63:d4:c6:b6:85:e6:20:59:c6:da:6b:1b:68:73:a9:1c:b5:f6:
19:37:06:da:81:3a:62:c6:cf:4d:f1:17:f5:7f:23:91:52:1a:
90:5e:5c:23:56:82:20:71:63:32:53:a6:d8:3f:26:93:9d:00:
c0:ce:6f:12:91:48:ba:08:f5:5d:39:c0:c1:b0:83:66:99:ba:
28:df:a0:f2:c8:f8:d1:df:66:6b:a3:ce:7c:81:ba:c3:c8:60:
fe:e5:08:87:b1:f5:dd:f2:b6:7e:d2:43:ad:88:70:0c:2a:9a:
56:51:8a:60:7c:6f:8b:67:bc:9d:79:80:6d:ba:75:26:73:dd:
22:67:e7:10:a5:12:e1:91:a5:46:4c:00:df:ff:16:31:f4:89:
85:37:69:18:b2:8b:f8:38:7a:5b:56:2c:74:7e:00:64:ba:32:
92:08:c2:c8:ba:ed:8f:4c:c3:96:0c:25:96:a2:12:0e:54:ed:
33:6b:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:02:42 2025 by rpki-client