Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: VHdHqRGGCVNFXHxNL/JWAa+i2mPQ/nenfSUQSA6kpwc=
Subject key identifier: 5B:54:DC:A2:0D:48:68:9C:24:11:77:88:B4:F2:99:3A:CE:93:34:8F
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 01984AE6067736CE36536230DC67C1D36589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 144A
Signing time: Sun 27 Jul 2025 08:00:45 +0000
Manifest this update: Sun 27 Jul 2025 08:00:45 +0000
Manifest next update: Mon 28 Jul 2025 08:00:45 +0000
Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: s2VSJKMOKhlrNGAr7BeE8GL+LlXhijfnVT4U53fVZrM=)
4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:06:77:36:ce:36:53:62:30:dc:67:c1:d3:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Jul 27 08:00:45 2025 GMT
Not After : Jul 28 08:00:45 2025 GMT
Subject: CN=5b54dca20d48689c24117788b4f2993ace93348f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:59:09:2c:82:3f:25:f6:ff:bb:b9:c5:4c:
fc:36:75:6b:71:a2:49:c8:01:e0:6e:15:19:72:ba:
d0:80:a2:75:42:f4:f0:34:98:d4:c4:2f:b3:90:b5:
48:6c:a4:92:67:1e:55:10:08:34:98:b0:83:59:f8:
2a:06:71:b3:45:d8:f1:3a:1c:67:0e:a7:34:3c:76:
67:19:b3:66:b9:ba:db:cd:bc:91:7f:9e:bf:d5:05:
6c:4e:ad:73:64:5d:06:4d:03:65:e2:c8:d2:37:f2:
82:4f:bf:f3:dd:80:6f:dd:cc:51:83:c1:24:e0:64:
68:d8:db:01:3b:83:08:d1:0d:e8:f3:7b:a1:80:6f:
b5:99:ed:b6:95:fa:71:f1:f3:a4:98:88:95:6c:76:
02:1d:37:76:91:c4:06:5d:d0:d5:21:23:0b:b6:1f:
7f:ab:8f:73:10:8e:dd:ff:9e:84:59:59:16:e5:4b:
9b:92:2a:18:e0:31:a7:d1:55:14:12:cd:e8:0d:16:
ca:c3:c8:bc:2f:ed:1c:da:aa:63:9c:28:1a:b2:e3:
79:b6:65:b7:c1:51:60:a3:a3:76:7d:ce:8d:97:e5:
a6:a6:e0:40:51:12:12:81:18:d7:df:92:1e:25:ac:
e5:4f:aa:23:ff:82:a6:1b:2d:f4:16:15:ba:70:eb:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:DC:A2:0D:48:68:9C:24:11:77:88:B4:F2:99:3A:CE:93:34:8F
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:12:f3:a3:5b:3a:f9:30:08:65:e2:3b:95:44:76:f0:37:97:
e8:24:c2:70:7e:bb:44:e5:65:10:c5:42:dd:da:bb:fb:0b:ff:
24:94:65:9a:cf:0b:6f:73:cb:fb:74:76:95:31:69:38:43:d0:
99:54:07:49:2b:64:78:ee:e6:52:83:dd:87:c2:83:33:b4:0e:
30:09:92:75:27:dc:3f:e7:07:ac:21:16:b5:a0:62:75:f6:07:
99:4f:b4:08:95:46:85:11:69:59:a1:dc:76:2c:a7:4b:58:c1:
46:c0:17:18:04:03:e7:5a:ec:67:c9:e8:be:38:f8:c0:a1:58:
e8:6b:7f:00:59:5d:be:52:cc:22:79:a1:cc:25:8d:85:2c:57:
06:13:5b:db:00:5d:28:2d:bf:0b:2f:1f:1a:af:58:9d:c1:6f:
1f:f8:f3:99:fb:e7:4d:c3:dd:5f:b9:24:d5:49:70:83:44:2c:
ff:ae:b0:29:21:73:a4:9b:64:f0:d1:2b:69:e4:eb:b6:02:e1:
6b:55:12:28:54:88:d3:ab:03:a0:a8:18:0b:36:e6:16:07:09:
ff:8f:e5:7a:89:c3:b4:5e:b7:b4:5d:6f:49:36:32:3e:80:19:
47:b9:0a:e3:18:2c:d3:54:32:58:5c:06:6d:39:6c:9b:cf:29:
6e:5b:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:19:27 2025 by rpki-client