Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: dHb9CbxisTvEflXQGONSPN6Z2AaYNDn2T/vvoKqWpUw=
Subject key identifier: 25:9B:86:64:84:88:3F:96:B6:3F:38:09:4D:5F:98:CE:78:60:EC:10
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019845F6BE4EEA06903FABA457F977620C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 11C0
Signing time: Sat 26 Jul 2025 09:00:55 +0000
Manifest this update: Sat 26 Jul 2025 09:00:55 +0000
Manifest next update: Sun 27 Jul 2025 09:00:55 +0000
Files and hashes: 1: 5TdpsvGEzHHc2DVMKGITS46zP8M.roa (hash: NtR3z7rxkvkkgqfCc2bT1z0ch/WfYD2HGcwqrNfMm/k=)
2: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=)
3: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=)
4: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: SBzdjwsdG0QnEsrGkR7qo/SyWM5tSW/ukBL7xVHzxw8=)
5: J_GNQPWHaTopYauZz-X71VDCD30.roa (hash: mYWNHSJ/8l+aWGMPXqK6gzDUsBDut0UQO9etVhI8z0E=)
6: ivrBGL0q_NF31wGnb6OsQlrkSGo.roa (hash: OcT5ce9nz2OZqGwJctdjZ8/bty60h4IQcxLhct5JKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:be:4e:ea:06:90:3f:ab:a4:57:f9:77:62:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jul 26 09:00:55 2025 GMT
Not After : Jul 27 09:00:55 2025 GMT
Subject: CN=259b866484883f96b63f38094d5f98ce7860ec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:72:a3:8c:ac:36:eb:96:e0:cf:7b:2f:02:52:
74:94:d1:77:fb:29:25:b6:5f:b8:01:54:67:27:2f:
ab:42:2c:1b:70:a4:ef:22:44:8c:a5:61:01:53:00:
c4:85:e7:a8:43:60:24:5b:3d:e8:57:e3:96:db:a0:
98:51:77:1c:f8:54:6c:f5:aa:06:e7:50:39:88:6c:
e1:c3:8e:b0:90:6f:a4:9d:5d:d3:65:40:52:9f:63:
f1:4e:86:23:64:3b:b7:cc:5f:b2:06:e9:37:82:0b:
39:5a:60:8c:9d:37:13:ba:23:49:36:9b:54:e5:72:
ef:24:ad:5d:6e:0a:a6:cc:eb:71:0c:d8:bd:9f:31:
88:5e:83:be:d3:85:ba:15:19:5e:00:1e:e7:d8:6e:
26:2d:b0:b7:f3:7e:a3:c8:53:b7:69:a5:3d:b3:45:
1f:84:e2:c2:d7:68:da:34:23:90:1d:67:be:2a:46:
98:05:82:67:e8:99:43:f1:ba:55:f5:64:d5:96:78:
62:c8:70:64:0b:c9:fc:ec:f8:d2:92:15:c7:97:41:
a6:cb:20:e2:58:2a:13:b4:af:fe:eb:ab:68:ee:d5:
e0:a7:92:7e:de:96:7f:c1:46:06:85:9a:21:0c:8b:
da:6b:8c:6a:21:68:f2:c0:f1:5a:81:81:35:b6:38:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:86:64:84:88:3F:96:B6:3F:38:09:4D:5F:98:CE:78:60:EC:10
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d9:69:29:83:8a:86:ae:75:97:0e:75:61:34:8a:63:81:aa:
ac:29:bd:20:bf:36:de:0f:2f:43:af:38:86:cd:41:1d:9a:78:
c1:3e:3f:e8:89:08:d0:bd:d1:04:3d:b2:4e:d6:f7:16:d9:ab:
e2:67:22:09:48:4f:1f:d5:04:6f:20:8f:d5:2f:bb:fe:42:fb:
fb:1c:fe:b0:f5:05:6d:bf:5b:8e:f9:52:be:13:c5:bd:66:cc:
76:0e:47:2b:bd:74:5a:09:3d:6e:4f:a0:16:eb:64:e1:e3:a9:
f6:18:71:c5:f6:96:e9:f5:84:bd:bb:55:a3:b5:d8:b6:60:6a:
93:15:4e:6f:75:20:ab:d4:c3:12:d0:5a:f0:06:58:d7:98:65:
34:03:9d:a2:ce:4c:5d:ac:f0:e3:88:64:c4:18:52:aa:d1:7d:
9a:a1:e2:e6:22:42:c0:79:f2:2a:09:2b:52:4d:da:7d:f9:0b:
83:80:39:6a:c4:08:03:37:80:a3:20:d2:0d:2a:eb:d5:ab:30:
a6:8f:48:56:29:a5:3e:9b:f5:d2:1a:35:40:65:cf:3c:93:e0:
29:35:dc:f9:18:da:a3:da:6d:fd:da:9f:97:9b:ae:77:07:83:
88:7f:6a:bc:42:94:ba:91:7a:c1:a2:d3:a1:10:d5:54:f1:f1:
2e:28:3e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:35:43 2025 by rpki-client