Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: A15kmJOxhnunS90jS2f971jFo2jvvHmrcHggdRbwTgs=
Subject key identifier: 44:39:38:DB:78:19:2C:F7:89:83:61:01:1A:FC:0E:09:24:E5:07:A2
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 01984A40EE38B335EC86D29BF2CAAA044DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:25 +0000
Manifest this update: Sun 27 Jul 2025 05:00:25 +0000
Manifest next update: Mon 28 Jul 2025 05:00:25 +0000
Files and hashes: 1: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
2: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: 1ApYr+hZcgRWkZaPoCcvQICAB4lz50MPjTmCMHswqV4=)
3: sUWqfK8lQ00leYnkVH10Ne2J_pg.roa (hash: /8L8fVSDnCy6dVHFrdbjnwTMBA89vKnVyPdJKfPn3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ee:38:b3:35:ec:86:d2:9b:f2:ca:aa:04:4d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jul 27 05:00:25 2025 GMT
Not After : Jul 28 05:00:25 2025 GMT
Subject: CN=443938db78192cf7898361011afc0e0924e507a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:86:8e:24:48:be:4c:f1:f6:54:07:46:50:
74:99:09:a0:d6:5e:3f:fb:5a:52:52:8b:90:6d:c9:
e2:e8:fe:06:d1:4c:b7:68:11:d1:72:f3:ee:12:6d:
f0:21:34:67:08:3e:1c:7c:f8:18:5f:81:37:02:a1:
0f:13:a9:1e:de:f5:60:5c:76:bc:2a:89:0b:b1:c8:
5d:3b:e0:9e:61:79:a1:14:77:45:f2:c9:61:ba:9f:
1c:69:af:3e:89:9a:8f:e0:04:a5:4a:da:06:a1:05:
91:b4:fe:d2:53:6f:de:f7:0d:7e:5a:63:22:45:e1:
f2:32:75:ba:c3:5c:27:a8:2d:86:9c:88:e3:3c:21:
ac:7b:92:63:3e:57:4d:a5:af:ef:43:f0:80:dd:a2:
6a:17:8e:58:80:88:e7:b0:77:94:06:43:d0:b4:37:
26:0d:d0:ce:83:aa:86:3b:9e:ef:57:b5:92:6f:fc:
72:ce:fb:9d:4f:24:f4:0b:46:da:bc:9e:7d:f6:54:
b6:37:0e:0a:bc:48:32:5d:23:0a:83:c2:d1:e1:d4:
36:d2:63:49:77:0e:92:b6:25:76:d6:68:36:a3:b8:
7e:ed:25:82:4e:62:b2:71:c1:e6:5b:95:da:7b:9a:
2c:ee:fa:d9:b7:e0:c2:bc:33:19:cf:b4:1f:ee:69:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:39:38:DB:78:19:2C:F7:89:83:61:01:1A:FC:0E:09:24:E5:07:A2
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c6:40:d5:32:ea:84:ab:66:7a:dd:0c:fb:d5:e6:87:9d:37:
3e:2a:d9:e9:77:59:4d:30:4f:b0:5d:fb:4b:8e:fe:ab:ac:be:
1d:7f:64:6d:b8:e1:ce:a9:47:e7:b0:74:bb:4f:41:4b:a8:cf:
3c:0d:5e:ba:f8:0e:c7:67:c4:7d:b2:7a:76:50:1b:b0:53:7d:
8a:e7:af:31:54:ed:ba:db:38:28:55:17:e2:3c:03:86:1e:4c:
12:96:19:54:79:8b:b0:06:0b:10:14:eb:90:e9:91:9e:34:6f:
15:61:a9:ef:b3:68:a5:03:30:c0:49:b3:64:39:bd:72:5a:b8:
55:0d:7b:b7:56:ca:21:51:52:d4:10:da:1a:98:92:05:d5:9b:
ed:6a:3f:7e:66:fc:ca:e1:21:70:bc:48:14:85:56:55:3a:c7:
5a:10:33:cf:2e:cf:4e:b0:cb:73:72:0b:76:be:7a:2e:87:a6:
68:33:13:98:4a:b0:4b:95:33:8b:6f:16:30:03:3c:a7:22:47:
e7:c8:d7:4d:77:1f:f2:39:0e:61:81:e4:b8:84:5b:d4:e6:13:
98:23:7b:a3:e8:ca:84:80:a6:2a:e8:c8:d5:9b:c2:77:bd:f8:
a1:f4:e1:a8:d0:ef:34:d7:c2:9c:03:ed:8b:41:57:67:61:e6:
63:cd:c8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:57 2025 by rpki-client