Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: MZ1hvRtUOPW5AxI3utI4YoT3BIHb9uazhyZOjZkdIfk=
Subject key identifier: DB:71:DA:2F:E9:E8:2F:5F:18:B7:23:DA:29:C2:C7:E2:21:D1:42:61
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 01993794F14E424325A4E3EBB872CE4804A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 13C4
Signing time: Thu 11 Sep 2025 07:02:11 +0000
Manifest this update: Thu 11 Sep 2025 07:02:11 +0000
Manifest next update: Fri 12 Sep 2025 07:02:11 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: O7AzsCP1V9jbE+0vwddMH5+slIZMApXTyvfNjSj6RzI=)
2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:f1:4e:42:43:25:a4:e3:eb:b8:72:ce:48:04:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Sep 11 07:02:11 2025 GMT
Not After : Sep 12 07:02:11 2025 GMT
Subject: CN=db71da2fe9e82f5f18b723da29c2c7e221d14261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:d2:e7:2f:4a:fc:2d:9b:29:1b:0b:7c:01:
e6:07:89:82:dc:fc:f3:b2:93:f2:3b:a5:0d:d1:2f:
bd:f7:e1:73:86:e0:aa:c3:44:44:97:90:56:52:01:
c1:d7:e7:6f:95:f8:c3:cc:1d:13:76:2b:82:85:73:
2d:84:76:d5:30:ce:98:fd:15:9b:68:4b:cc:37:29:
54:f6:b1:22:13:8c:d8:54:0b:3a:3f:38:3f:e7:f4:
22:a3:a9:54:cc:de:c0:6d:07:2d:bd:be:42:58:c3:
a2:2c:60:4f:f8:40:ce:3e:68:5e:cd:c6:7b:97:a3:
b2:bd:c4:cf:85:98:c6:a9:46:0b:a1:14:b9:ac:94:
e1:c3:22:fd:0e:8a:59:2d:40:cf:31:dd:c5:d9:3e:
c5:e6:11:df:4d:96:7c:94:20:25:31:12:8f:a4:c0:
49:4a:78:60:59:4f:85:9e:65:f6:d2:1b:5d:df:f1:
15:42:e7:5c:08:eb:6f:2b:64:d8:4a:5b:54:28:7a:
b1:93:1a:17:82:aa:a0:51:1a:8d:de:e4:16:67:0b:
ba:31:44:bb:a8:5e:f6:7b:df:89:78:df:ff:8e:25:
e0:06:3c:44:f4:70:94:9c:b0:22:16:2a:86:38:28:
f4:b4:5d:eb:51:cc:3d:d5:58:e4:79:78:df:1a:67:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:71:DA:2F:E9:E8:2F:5F:18:B7:23:DA:29:C2:C7:E2:21:D1:42:61
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:55:f9:1c:d0:d2:79:05:42:61:0a:b4:23:9c:22:dd:e0:cc:
17:99:0d:84:bf:77:06:28:5a:d5:36:e2:ec:07:57:d8:37:71:
56:69:a3:19:c1:e1:38:c4:04:1f:3d:c2:3d:20:f8:d8:21:5f:
41:a1:d3:79:0a:e5:84:e4:16:bb:e2:ef:67:64:17:8c:f2:ca:
26:21:4d:1c:54:cf:ad:04:1b:0a:38:cb:c2:0a:17:9d:dc:cd:
91:99:04:8f:7a:c6:2d:ad:c5:2d:d6:c2:08:ef:21:5a:e1:dd:
fd:f1:43:15:a6:96:d2:b3:85:33:41:6a:5e:62:0c:40:bc:6a:
60:46:73:45:40:b4:ee:8f:5a:bc:cc:94:51:8c:d7:52:d5:2f:
d1:ad:d9:df:e0:9e:65:19:5b:49:4f:11:51:0b:6b:5e:64:c5:
0f:4b:07:00:b6:ee:7d:9e:b1:ec:35:d1:a5:5e:22:d9:9b:7a:
b1:ca:d3:b6:24:12:a9:35:fb:f8:4d:36:2f:2f:a6:40:9e:b9:
0d:17:6a:cb:5c:ac:68:d2:f1:62:fe:71:32:82:42:7b:67:de:
b0:25:a2:82:1f:92:32:28:dc:10:37:a1:47:08:06:ab:09:8f:
4c:0b:80:58:6f:03:73:14:a9:b9:10:4b:e8:18:95:3f:fb:21:
26:4e:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:24:15 2025 by rpki-client