Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: isnEz46eYry81p3Kq2UMp6gxs5Vi5p7q6QXls54RYc0=
Subject key identifier: 09:A9:FC:31:E0:1A:73:5B:B9:CB:BC:69:75:D0:E1:75:AD:0F:31:6C
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 0199228CF74A25E9557C0321C0CAD3260751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: X65sBoxcSYQfL8UOmSELrssMXZxDCeX1H6erJRxEfVY=)
2: O47iRpmVJrN5kyLHejtw1EVG-MI.roa (hash: YFHAgBAtSXAS/PD/F6eJBYD3guMI7Imk/Lvqn022i00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f7:4a:25:e9:55:7c:03:21:c0:ca:d3:26:07:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=09a9fc31e01a735bb9cbbc6975d0e175ad0f316c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:05:6b:ea:30:14:44:c7:8a:33:95:c3:d9:
da:17:77:4e:c4:fd:48:e9:66:e5:f4:b7:66:9a:a7:
a9:3f:5b:55:88:6e:0a:fa:30:ff:0a:8d:b9:c6:5c:
d1:3e:cb:2e:b8:cc:d3:ed:59:99:00:d8:03:76:6e:
1a:30:51:d1:23:be:d9:13:51:71:39:44:4a:27:c3:
2c:b1:0d:2f:d9:eb:c6:54:43:51:da:7d:bc:a1:41:
10:73:b7:2e:d3:21:23:f5:21:8f:40:fe:7a:9d:af:
1f:97:bf:77:d1:e3:e2:67:18:dd:bb:0d:cf:be:8b:
3f:e0:1d:7f:93:2c:82:f5:d3:f0:f7:a7:fa:f5:64:
b6:d6:90:bf:a2:d2:86:3b:ca:f9:46:d2:b8:32:ae:
45:8a:49:d5:29:84:5a:18:19:31:4f:45:8f:d1:86:
67:55:10:31:23:18:c4:44:6e:9d:ce:df:ab:80:d7:
56:b1:3d:6f:91:85:c2:14:49:7b:30:b5:16:45:91:
91:9b:fd:80:16:dc:f3:29:cf:20:3a:e5:d0:2d:9d:
4a:54:00:da:c9:4c:af:32:92:32:9e:ba:b5:34:d2:
eb:84:74:c6:17:b3:ca:79:81:b3:80:dc:ca:ab:c5:
ed:8b:c6:5a:29:62:9f:5b:8a:de:ca:e0:a7:10:70:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:FC:31:E0:1A:73:5B:B9:CB:BC:69:75:D0:E1:75:AD:0F:31:6C
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a0:a8:94:36:2e:72:fc:e6:fa:21:09:e6:fa:7c:f3:37:46:
34:2e:44:04:d3:fd:ac:df:2f:08:83:fa:4d:f7:aa:d6:dd:81:
12:a5:51:21:e8:38:5a:b0:d2:c5:37:70:50:b1:00:b4:aa:d3:
08:7f:6f:03:31:c4:ed:dc:93:1f:74:bf:e8:51:c6:39:56:37:
bd:df:17:d1:09:f2:9e:17:04:83:81:9e:e5:13:f0:db:9e:fa:
5b:17:9b:9a:d6:3e:c7:69:30:5b:05:ea:ab:c4:56:cf:4b:a3:
15:8f:28:5d:37:10:f4:3d:78:05:50:1a:c5:49:6e:f0:53:76:
9e:bb:b2:dc:64:5e:0f:09:01:39:7c:ff:7d:d4:0a:8c:ef:7f:
42:87:32:1e:7f:82:ca:05:51:1d:5e:40:34:d5:2b:30:b6:dc:
b0:9a:30:f5:5e:32:0b:29:39:c1:95:f5:59:95:ca:74:42:78:
ca:4c:e5:04:41:b8:7e:1c:6b:c3:4c:32:2e:d5:a6:21:5b:f1:
fb:04:1c:63:35:27:14:39:0d:ea:81:9b:75:c0:87:ea:d2:3e:
64:9c:4e:e3:58:e1:fc:99:ec:62:e1:57:ed:08:cd:5c:bc:08:
58:2b:dd:41:6a:4b:62:f9:f4:bc:72:e6:c4:93:90:d7:d6:e2:
4d:81:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:01 2025 by rpki-client