Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: rHEyiqigBamcoKTI8VXUv5WA1hMJRE/Tt0MiHamFOpg=
Subject key identifier: 1C:45:11:9A:9D:CC:6C:40:54:11:E9:16:16:01:0C:14:A7:C5:CD:A3
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 019836159F2AAF3EA0DF55772EEF773267B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 0C5F
Signing time: Wed 23 Jul 2025 07:00:43 +0000
Manifest this update: Wed 23 Jul 2025 07:00:43 +0000
Manifest next update: Thu 24 Jul 2025 07:00:43 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: +0Dz/Ky/Nw++RWPxDlKLSvit+MQ9F4JcnwcxsTihJN4=)
2: GWHlXKm0sM09h00CHS4OA90ZDEo.roa (hash: nINowmfDfKGL1Tvt7j8uTMeqVpzK8gUstL889w0cG50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:15:9f:2a:af:3e:a0:df:55:77:2e:ef:77:32:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Jul 23 07:00:43 2025 GMT
Not After : Jul 24 07:00:43 2025 GMT
Subject: CN=1c45119a9dcc6c405411e91616010c14a7c5cda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:04:df:53:0f:12:28:b2:37:20:51:b7:63:
de:13:15:f8:17:8f:cb:2c:e0:42:9b:e4:3c:70:5f:
c5:c9:36:fc:e0:30:80:dd:de:1b:8d:1f:23:b0:49:
24:1b:28:e9:ce:43:14:3b:37:3b:59:11:0a:56:cb:
9e:42:dc:ac:84:fb:6e:3f:18:95:38:fd:18:73:dd:
9e:2f:4e:b2:1b:61:a4:55:d5:fa:f6:90:f6:d0:e8:
a4:9b:7d:e9:fd:b2:4a:0f:2b:18:0a:1e:92:00:57:
a6:da:7c:db:b6:c6:0b:a0:f8:a5:8f:eb:7c:ad:45:
7d:32:3e:99:13:af:33:2a:ef:40:ad:57:c9:94:0d:
1e:a7:b1:ff:5e:43:1e:5f:ce:83:2b:97:fc:6b:34:
00:63:71:7e:9b:be:78:4b:0f:1d:40:81:ad:b9:1f:
eb:7e:b9:e9:a7:b3:71:ed:e6:f9:f0:6a:bf:96:b2:
56:03:44:15:db:ea:3f:e5:d9:bd:e0:99:ad:32:01:
63:00:b9:cb:51:f0:d8:99:05:27:ad:97:1e:75:1f:
f1:3d:16:f8:f2:f7:2d:82:7f:28:f8:9a:7e:6d:25:
71:9a:fc:56:33:c7:aa:ae:43:ee:05:02:dd:3b:55:
7f:8f:74:61:fc:69:51:03:b7:3b:ce:55:43:c5:02:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:11:9A:9D:CC:6C:40:54:11:E9:16:16:01:0C:14:A7:C5:CD:A3
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:36:02:3d:40:bf:0f:c2:fd:43:6e:0f:61:a0:42:46:65:68:
d8:86:33:e6:8f:77:56:a1:8f:d5:a1:ec:5e:65:1f:a2:56:a6:
96:f5:25:93:d5:33:bd:e2:6b:77:45:97:8e:c1:0a:a4:d8:c6:
fd:42:0b:0c:ce:0f:d1:4c:1f:79:0e:bf:d3:b6:4d:a1:93:01:
e5:b8:58:94:97:51:a9:51:94:5e:e2:fc:c5:f8:a8:79:36:fc:
05:85:d5:a4:06:7f:0c:08:cb:0f:05:07:2b:12:58:ac:8f:d5:
92:6d:5d:04:e7:6d:7f:24:e4:7f:f4:c2:8a:1f:d2:b7:1a:8c:
b0:d5:f5:62:c0:58:a2:79:6b:45:3f:df:33:9c:5e:1d:93:fa:
9e:c9:ff:4d:df:a2:f3:66:4d:95:bf:87:5c:87:eb:83:06:09:
32:6f:6c:6c:c7:3b:76:61:27:d2:05:de:f6:24:0e:6e:ac:3b:
bc:dc:a6:f1:0d:4a:db:56:ed:43:87:49:8b:d1:ff:9c:b3:8c:
f7:55:69:82:f4:fa:30:50:d3:df:e9:74:b9:8d:3a:7f:3b:3d:
4f:74:b0:b3:90:07:eb:fd:1a:ff:91:4a:c7:c5:3a:3c:a4:32:
85:28:8b:1a:e8:45:47:72:3c:94:58:4f:59:9a:06:50:0c:7c:
4f:34:79:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg2FZ8qrz6g31V3Lu93MmeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmJiM2VkMmYwMjljNGJhY2M2ZWEyYzRjN2Y0YzFjZDZl
ODBlNzkwHhcNMjUwNzIzMDcwMDQzWhcNMjUwNzI0MDcwMDQzWjAzMTEwLwYDVQQD
EygxYzQ1MTE5YTlkY2M2YzQwNTQxMWU5MTYxNjAxMGMxNGE3YzVjZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+kE31MPEiiyNyBRt2PeExX4F4/L
LOBCm+Q8cF/FyTb84DCA3d4bjR8jsEkkGyjpzkMUOzc7WREKVsueQtyshPtuPxiV
OP0Yc92eL06yG2GkVdX69pD20Oikm33p/bJKDysYCh6SAFem2nzbtsYLoPilj+t8
rUV9Mj6ZE68zKu9ArVfJlA0ep7H/XkMeX86DK5f8azQAY3F+m754Sw8dQIGtuR/r
frnpp7Nx7eb58Gq/lrJWA0QV2+o/5dm94JmtMgFjALnLUfDYmQUnrZcedR/xPRb4
8vctgn8o+Jp+bSVxmvxWM8eqrkPuBQLdO1V/j3Rh/GlRA7c7zlVDxQID+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxFEZqdzGxAVBHpFhYBDBSnxc2jMB8GA1UdIwQY
MBaAFAn7s+0vApxLrMbqLEx/TBzW6A55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85ZDViY2YtMmRiOS00YWZhLWIwMDAt
ODIyOTUzZjhjZjc3LzEvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85ZDViY2YtMmRiOS00YWZhLWIwMDAtODIyOTUzZjhjZjc3
LzEvQ2Z1ejdTOENuRXVzeHVvc1RIOU1ITmJvRG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTYCPUC/
D8L9Q24PYaBCRmVo2IYz5o93VqGP1aHsXmUfolamlvUlk9UzveJrd0WXjsEKpNjG
/UILDM4P0UwfeQ6/07ZNoZMB5bhYlJdRqVGUXuL8xfioeTb8BYXVpAZ/DAjLDwUH
KxJYrI/Vkm1dBOdtfyTkf/TCih/StxqMsNX1YsBYonlrRT/fM5xeHZP6nsn/Td+i
82ZNlb+HXIfrgwYJMm9sbMc7dmEn0gXe9iQObqw7vNym8Q1K21btQ4dJi9H/nLOM
91VpgvT6MFDT3+l0uY06fzs9T3Sws5AH6/0a/5FKx8U6PKQyhSiLGuhFR3I8lFhP
WZoGUAx8TzR58A==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:45:50 2025 by rpki-client