Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: b/tLu2UsIRhQez9Moe5I/ObBGpAISRx53TzzUZ0/7Cc=
Subject key identifier: 91:73:7B:13:AB:29:4A:4E:12:C5:3D:49:82:E2:90:D8:EF:24:F9:4A
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 019A7225A892A369A1B4943301DB7F87C259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 0567
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: Yu3nVp_WWr5rQyGcfYxK17BtrSs.roa (hash: M4mKyUa72k/PIr9xnS+2MIsnuRBDrxvVblz52TMfwf4=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: M4uW15o5Y98UYrDO9o6IMGYuOIUV8r1BdAdwnGlsUfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a8:92:a3:69:a1:b4:94:33:01:db:7f:87:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=91737b13ab294a4e12c53d4982e290d8ef24f94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:7d:85:63:8e:e4:dc:78:ca:91:78:2e:fd:
9b:1c:cf:9d:af:13:5c:1b:bb:61:ba:66:ad:18:2b:
5f:eb:49:60:ff:00:93:fb:9e:61:5d:3b:a7:d4:46:
1f:2b:15:9b:fc:d8:17:1f:ab:f6:8c:35:e1:91:28:
bd:3f:18:dc:11:82:25:9a:68:24:46:5f:92:d2:2f:
bf:9f:ca:c9:f9:d5:77:b3:c4:8c:f3:66:be:03:ea:
2f:bb:0a:76:75:d4:23:53:e4:cc:ac:af:bc:2b:e7:
d4:92:23:50:83:48:3e:9b:2e:f9:8a:a4:73:3d:7d:
ef:e9:39:d4:e7:70:da:45:a7:9a:4f:73:4c:9f:d1:
d4:92:47:4b:e6:e0:e4:d0:ea:91:47:67:f9:7c:9d:
e1:87:50:8d:53:5d:00:b6:42:a8:bd:6e:f6:d7:ba:
63:97:1b:f2:e7:23:3f:80:27:cd:85:b6:1c:e2:6c:
7f:65:ae:4a:cb:a9:53:81:bb:43:b3:4f:8c:45:93:
57:04:91:bf:10:5b:23:d8:e5:71:a7:d5:01:74:d5:
a0:fb:a0:03:b8:0c:a9:4d:6f:66:92:83:20:17:52:
24:dc:8a:c3:96:3b:99:d4:0d:7a:6c:c4:d6:d2:ac:
87:7e:82:91:72:86:c8:33:a8:87:84:7c:b4:9f:47:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:73:7B:13:AB:29:4A:4E:12:C5:3D:49:82:E2:90:D8:EF:24:F9:4A
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:80:3c:b3:13:89:bc:c3:2f:6e:3c:7d:9f:7b:23:36:a0:9b:
13:da:d3:8a:d8:80:7a:33:d9:4e:b0:63:54:7f:3b:8f:34:78:
5c:13:94:c0:87:38:a1:15:1f:d4:c8:ef:99:a0:ad:8e:34:3e:
93:ea:2a:97:74:1f:1e:57:3c:5a:0d:c9:29:75:ad:b3:6a:40:
d0:99:ae:1e:a3:66:fe:bd:5b:95:a8:8d:e1:64:fc:c7:e6:91:
88:98:ee:96:82:26:a8:36:02:a1:90:69:a9:12:95:6d:23:e6:
37:e6:69:2c:ec:b5:a5:66:56:3a:25:ed:1c:56:4e:9e:f6:f1:
60:fc:5c:f9:50:99:4a:40:2a:c2:2f:d1:76:e5:19:07:e7:1f:
96:b6:91:46:9a:05:fb:73:39:ea:5e:6e:9c:12:5d:55:94:d4:
53:07:c5:96:ae:24:17:b8:fb:88:9b:2c:36:18:3f:33:0c:8e:
9e:97:65:64:5f:79:34:ff:af:e5:57:f1:e7:ed:3a:59:f3:c5:
e2:b3:4b:3b:de:dd:4e:f9:85:00:25:0b:5e:bb:e3:38:a6:f0:
5e:8e:21:79:69:c2:a4:1f:b9:a9:e8:0f:14:d2:7a:fd:c9:f7:
9a:b1:65:8e:ea:b9:17:18:30:9c:d2:6d:f5:31:a4:a1:64:56:
f6:97:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:44 2025 by rpki-client