Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: vWZqRG1B8tlTSAeLHn/47iVnczSWJR8Ws/NtpysspA8=
Subject key identifier: BA:F9:65:C8:56:C7:14:AD:D2:CD:87:4C:8F:EF:C8:41:AF:F0:42:CA
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 01984AAF0DECCA772FD6623BE3C15E426D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 05C5
Signing time: Sun 27 Jul 2025 07:00:43 +0000
Manifest this update: Sun 27 Jul 2025 07:00:43 +0000
Manifest next update: Mon 28 Jul 2025 07:00:43 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: rVixFK6chFzcdyr9j/r7MDLpXtBBQjZ5z3C/IIkaqIY=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:0d:ec:ca:77:2f:d6:62:3b:e3:c1:5e:42:6d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Jul 27 07:00:43 2025 GMT
Not After : Jul 28 07:00:43 2025 GMT
Subject: CN=baf965c856c714add2cd874c8fefc841aff042ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:6b:f1:62:35:1f:29:de:0d:1a:3f:9b:fc:
7a:0f:7e:27:f6:7e:d9:eb:72:6c:94:98:a5:f4:75:
33:42:bf:c3:30:7d:90:b9:d1:cc:25:e0:74:93:d2:
05:58:11:f8:c7:79:53:fc:ab:4f:15:87:5f:56:3f:
02:3c:87:98:94:1b:53:1c:ca:10:96:0f:1f:2d:02:
a3:2a:8d:36:34:a7:d9:60:03:e8:0f:61:87:ca:ba:
8c:b3:4b:e1:14:59:1a:85:ca:08:d6:77:31:63:cc:
73:62:b3:0c:d9:e6:5f:fc:c9:27:b7:87:7d:1e:00:
89:3d:31:1d:13:43:ca:58:6b:17:60:cb:a1:1b:33:
c5:92:44:19:de:51:1b:9b:b7:20:81:ed:7c:4c:4f:
98:1e:63:97:d3:3b:f7:e5:6c:66:a9:17:70:3f:57:
2e:4a:0c:23:96:97:84:0d:4e:19:9f:60:8c:ea:d8:
95:19:18:e1:67:01:df:c6:74:aa:80:48:f8:10:69:
ca:09:00:31:db:05:29:eb:33:08:87:82:c7:6b:ab:
09:aa:c0:73:e1:0f:2d:6e:0f:d0:da:49:1d:09:f2:
9f:7e:e2:14:d3:12:0c:cf:7e:ed:06:de:77:77:31:
24:3b:3c:7b:cb:5c:d3:1e:5d:e4:08:44:cb:9b:38:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:65:C8:56:C7:14:AD:D2:CD:87:4C:8F:EF:C8:41:AF:F0:42:CA
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:f7:cf:c9:eb:fc:e2:55:ed:7a:af:37:6a:d1:d3:05:48:
4a:e9:2f:5b:85:d9:64:43:e1:a1:92:0b:25:39:a6:9c:24:d2:
db:a4:88:1f:b6:fd:29:06:7e:3b:dd:61:ee:9d:cf:99:82:a7:
d9:b0:c5:6d:a5:88:48:3e:ac:fb:cf:06:42:13:ef:b3:a2:39:
db:ce:23:46:7b:f8:7c:a5:5c:d7:8e:72:41:40:6a:a8:88:1e:
d7:de:bb:74:0e:0c:fe:96:f5:4a:07:85:20:c7:cb:ea:19:13:
9a:a7:e5:37:2b:4c:fb:51:90:40:70:0e:df:86:b7:a9:20:2f:
7d:bd:87:ec:c9:b2:d7:4e:7a:24:5d:f2:dc:30:ec:4d:a9:db:
dc:15:b1:a4:67:fc:82:ee:70:2e:a2:20:55:35:97:fe:66:6b:
f5:00:a2:60:c4:ed:36:b2:cd:e1:a5:84:a6:16:78:79:fa:7c:
db:f1:78:36:c1:d6:7c:23:b8:6a:83:32:ea:5f:41:6f:0f:1c:
6b:7f:47:a1:3b:30:cf:a2:d2:2c:df:0d:0c:08:e5:a1:99:ab:
0d:c5:fb:81:ca:53:45:23:96:86:fa:40:47:ee:54:80:d3:40:
5d:e8:22:a0:cd:7f:82:9b:c2:91:43:8f:fc:3b:58:38:0b:bd:
51:2e:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:54 2025 by rpki-client