Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: yfY6lVL2jjX0aUXCuMd8kzjh77qa7BMPZOPn6e2/zzA=
Subject key identifier: DF:34:C3:4F:6B:A3:0A:38:DD:00:24:C2:E8:D9:63:93:58:55:AC:FF
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 01974BC3F8273B449021165B7CBAA8AF807D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 0541
Signing time: Sat 07 Jun 2025 19:00:23 +0000
Manifest this update: Sat 07 Jun 2025 19:00:23 +0000
Manifest next update: Sun 08 Jun 2025 19:00:23 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: V4AOcaE4zDMVOoe+SVRmRWNFyCXEEJNMG+TNI47Mvd4=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:f8:27:3b:44:90:21:16:5b:7c:ba:a8:af:80:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Jun 7 19:00:23 2025 GMT
Not After : Jun 8 19:00:23 2025 GMT
Subject: CN=df34c34f6ba30a38dd0024c2e8d963935855acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:ae:c6:95:f9:2c:20:af:5c:4e:b9:4e:74:
ca:7b:59:2c:57:e2:54:1f:d7:d0:47:44:3f:d4:da:
cb:06:92:76:03:86:44:d9:eb:b6:cf:2f:0d:35:d6:
52:df:87:41:f5:1a:13:a4:6a:0a:44:2e:d8:2e:80:
41:0f:44:8a:ea:d3:26:a6:e1:ab:7d:ca:0f:96:05:
b5:e5:eb:d2:57:09:0f:88:96:04:99:ce:f1:b2:f5:
75:0b:1b:b1:98:66:df:c5:cf:08:9f:9a:cd:b9:2b:
2f:8b:4a:cc:7c:da:aa:82:dc:50:a4:5f:06:24:0f:
63:5c:06:a4:fa:67:80:c1:39:77:c3:f8:6a:e3:07:
2c:86:99:6c:d4:31:dc:73:3c:b0:c6:a7:bf:81:f8:
67:e1:82:5a:98:87:98:a3:9e:e0:27:4f:9a:d9:cd:
48:04:fe:a4:40:e5:be:f0:9e:41:2c:e1:84:fc:29:
0c:b5:d2:fe:ee:df:bf:4a:1c:f9:1e:7a:bc:71:de:
c8:e9:f0:1f:e3:9c:0f:c7:98:e4:4d:0e:ba:aa:f0:
44:0f:2b:84:87:c1:5a:70:03:9f:be:f2:de:3d:fe:
f5:a3:b8:68:ed:55:e9:ee:e9:75:a9:e1:6d:31:68:
84:61:bc:a3:10:90:a5:2d:44:65:51:9e:53:dc:aa:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:34:C3:4F:6B:A3:0A:38:DD:00:24:C2:E8:D9:63:93:58:55:AC:FF
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7b:da:f8:4c:2b:83:a6:68:16:09:68:07:1c:b2:cd:e9:b3:
bf:e9:4d:eb:b0:8c:9b:a8:94:1e:73:55:9d:56:b2:7e:df:bc:
8c:d8:d2:d2:bf:1e:27:e6:a6:21:ff:55:bf:d7:d6:60:3e:1f:
e7:50:74:c2:14:f9:1b:ef:bc:39:ae:d5:25:46:b3:12:33:2f:
7f:db:0a:b6:7f:ad:d0:8f:4a:ac:ed:5c:e2:8f:c1:8d:32:65:
65:80:39:50:70:74:44:30:9f:bd:fa:22:3a:e3:26:ff:60:19:
2a:01:e2:01:cd:ee:73:68:30:81:2c:b5:b8:bd:16:51:18:bc:
cb:ea:4b:c3:9d:00:c8:a6:0f:04:bf:a7:bf:c4:34:be:32:f2:
48:31:09:f4:53:8c:96:77:5f:a5:85:6e:1e:76:4c:9c:f0:07:
9a:3a:74:2e:2e:fa:e7:c2:53:00:c4:e3:39:58:1e:98:34:48:
54:e0:fd:95:8d:27:44:40:1d:e9:69:2b:49:c5:ef:21:10:b8:
0f:93:e8:e5:f9:b4:3e:e0:d2:4a:9e:38:c8:36:df:12:8b:d8:
04:14:06:c3:fa:fb:53:1b:ce:e3:6b:6b:2a:0a:82:bb:76:7f:
af:22:dc:fc:55:04:64:7d:5f:25:e0:5e:6d:0c:97:ac:f9:6a:
5c:07:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:13:41 2025 by rpki-client