Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: aBWK+UM9dWSq27ws+bORvxO+kBh/lAsxq4ASRQapSnY=
Subject key identifier: A1:A3:1E:C2:19:DE:08:12:A4:19:56:A0:25:5F:27:B7:36:5C:F3:91
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 01987B9B9A2B42228123087981F5B52FA391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1622
Signing time: Tue 05 Aug 2025 19:00:51 +0000
Manifest this update: Tue 05 Aug 2025 19:00:51 +0000
Manifest next update: Wed 06 Aug 2025 19:00:51 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: VDkXHfOsSqaV7wplUPd4Plxyf1YCtwxjJwkUiRB7No8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:9a:2b:42:22:81:23:08:79:81:f5:b5:2f:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Aug 5 19:00:51 2025 GMT
Not After : Aug 6 19:00:51 2025 GMT
Subject: CN=a1a31ec219de0812a41956a0255f27b7365cf391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:fb:f3:70:00:97:cb:c6:43:87:88:5b:3f:
31:ea:9e:87:4a:01:61:d3:b0:2c:73:c3:fa:10:d7:
a2:e5:14:67:02:17:35:51:64:5f:e8:d8:5c:d7:dc:
3f:67:45:a5:8b:53:33:b8:9b:49:c7:8f:90:cc:24:
03:45:74:16:73:b2:9f:bc:ff:e6:d9:21:58:2d:78:
62:db:50:d7:cb:fa:0b:3d:5b:e3:ae:7c:6b:b9:e5:
d4:88:d0:b6:37:7f:62:3a:31:ac:00:d7:3e:25:33:
f7:9e:47:e0:04:30:ea:3d:91:47:6e:f2:d6:0e:5e:
39:2c:99:02:2f:6f:89:29:75:24:63:90:f3:65:44:
e5:6a:c6:d1:ca:de:c0:80:71:78:fb:2c:68:30:5f:
26:7b:4f:27:a7:42:b0:b3:e9:3f:65:85:1e:f3:ef:
91:0a:73:ad:79:27:ac:18:0e:a3:73:a9:43:b8:51:
07:bc:fc:ea:e4:07:43:4b:1f:55:a0:96:61:8e:c7:
9c:b3:03:98:41:ef:82:c0:d9:bd:c3:8d:e3:fb:11:
24:30:0c:f1:61:c5:a0:b5:42:91:b4:70:70:63:8a:
33:90:30:d1:86:0a:b5:70:ca:46:91:18:c0:73:6e:
ac:a2:d7:36:3c:55:54:f6:ba:5d:b2:1f:14:22:7f:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:1E:C2:19:DE:08:12:A4:19:56:A0:25:5F:27:B7:36:5C:F3:91
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:30:af:74:24:16:27:fe:56:74:82:1b:7f:51:04:7f:b3:1a:
07:63:56:a4:3a:e9:85:f4:b3:d3:43:bd:65:73:6f:8d:0e:4e:
57:08:82:34:8c:45:66:1e:b5:a4:f4:ac:e7:98:2b:81:a7:de:
7a:81:d3:34:88:02:64:2a:80:3e:89:ce:c4:97:68:f0:97:7e:
f2:22:90:ab:40:26:f6:91:68:2d:55:23:91:0e:10:77:a6:59:
3d:4b:0a:70:64:47:c8:15:19:61:1a:f9:c6:bb:3b:e1:60:66:
f1:3c:35:c6:a8:ca:6b:1c:7d:ad:95:a0:0a:09:da:15:ae:58:
2d:29:91:91:9a:85:e6:81:41:45:b2:2b:a8:9a:d5:79:63:43:
56:bd:7b:ef:a0:74:b0:c6:7a:a5:42:73:4d:da:65:7c:59:b9:
43:f0:ef:94:2b:61:19:6f:87:85:16:7b:5b:4a:30:e7:f4:11:
e2:16:51:75:e2:c5:f3:ae:aa:59:67:1a:07:a6:df:34:87:f2:
cb:2e:8c:e2:44:cd:f6:9d:06:b7:61:15:1c:a6:77:e7:21:b2:
6a:a8:89:0d:e0:a6:d6:d0:eb:3a:22:70:23:d6:f3:c4:02:06:
9d:87:69:c9:ef:f3:4e:69:3e:0c:d2:e8:2e:1f:8d:71:cc:e6:
41:1c:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:43 2025 by rpki-client