Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: ejpQTcggIJ60OHJvqJkywuzhYnNSQmw8095HbPgdV1Y=
Subject key identifier: B7:2F:80:94:57:0C:F4:4B:15:4D:1F:8D:E1:E1:A8:A9:D9:7A:DE:F2
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 019848F7426BC7B0541E4DFC58A938824EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 0448
Signing time: Sat 26 Jul 2025 23:00:20 +0000
Manifest this update: Sat 26 Jul 2025 23:00:20 +0000
Manifest next update: Sun 27 Jul 2025 23:00:20 +0000
Files and hashes: 1: YGqpN3K7qoku4d1ucurJlG9A28g.roa (hash: vV+QkChEXM7aBJKALX0tUZfW7qPTcVJsY+rKECbz5Kk=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: LGKyL46obyn0m8urPIsKVvoh8KjMjCtBQZMYa/EI88Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:42:6b:c7:b0:54:1e:4d:fc:58:a9:38:82:4e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Jul 26 23:00:20 2025 GMT
Not After : Jul 27 23:00:20 2025 GMT
Subject: CN=b72f8094570cf44b154d1f8de1e1a8a9d97adef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:2c:9c:2e:b8:a4:77:07:ae:16:06:cd:36:
da:ad:7d:a4:0e:51:19:4c:29:a4:60:90:fb:eb:02:
bf:0d:64:5b:69:65:31:82:f4:16:2f:ea:4b:4a:4f:
c1:f1:1d:73:7d:da:92:eb:7f:8d:f6:30:ba:be:61:
2f:55:bc:3c:31:ad:6a:bc:11:02:8e:9e:40:3b:fb:
d4:47:d8:59:05:b1:62:46:58:dd:d1:00:20:19:26:
04:5d:eb:e1:14:8e:65:c8:20:a1:0d:4c:89:66:c6:
3b:50:ce:15:60:3a:4f:71:9a:1f:eb:fb:83:fc:cd:
68:e4:62:8f:d6:bc:5c:13:59:d4:33:94:fe:18:73:
9d:93:e4:b7:bb:5d:5f:8c:1d:73:28:75:ee:7a:f8:
0d:47:64:fb:cc:d3:cb:dd:0f:84:26:2f:92:20:9d:
82:28:43:e8:d4:f3:2b:18:92:cf:83:eb:de:3a:69:
e4:fa:48:0c:95:ed:08:3c:78:0c:4d:7c:51:db:15:
4f:fc:4b:8c:ea:7b:85:dd:5d:2a:41:06:0b:89:33:
bd:17:56:86:13:aa:fb:c5:67:fe:51:3b:31:fb:69:
32:8f:34:04:fc:90:2f:53:79:ab:dc:8c:dc:1f:05:
54:ac:b7:09:a3:bb:d4:c4:2a:02:74:48:6f:4a:3b:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2F:80:94:57:0C:F4:4B:15:4D:1F:8D:E1:E1:A8:A9:D9:7A:DE:F2
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:08:92:2d:42:63:da:5b:41:2a:c7:24:fe:a2:f0:85:32:da:
64:e9:8b:76:d8:86:9d:a3:a4:58:e8:39:d2:a7:c8:3f:f6:fc:
32:b4:bc:87:78:11:a4:5a:98:d9:a0:a8:1c:9c:c1:56:0b:86:
7d:6f:f3:15:29:a3:a9:17:fe:77:41:78:2c:29:4e:67:b3:2c:
59:92:70:08:c5:2b:b2:50:d9:04:8d:4d:f1:81:34:a0:43:26:
97:84:88:eb:e9:84:4f:4c:a9:13:b2:9c:a0:cd:de:58:52:b3:
76:f3:b9:9e:c1:53:e9:4e:9b:cd:43:5b:4d:59:3f:3f:c6:cb:
88:8e:fa:7c:bf:b4:f7:b5:55:82:23:75:ee:0d:1e:e2:46:36:
4f:36:58:d9:65:12:14:a2:b5:f0:17:fa:20:fa:89:2f:6f:7f:
2c:aa:b2:6d:1d:1b:cc:fc:5a:fc:60:9e:9d:09:ea:36:a1:4e:
ea:c2:2c:dd:2c:8f:38:22:95:1b:ad:99:27:2e:4d:d4:1f:02:
3e:a2:ef:5f:22:15:c7:00:77:54:e6:10:be:47:6b:bd:90:67:
98:24:17:d6:aa:d2:5f:b5:50:25:f4:59:92:64:ad:89:e1:ab:
aa:16:8c:25:e3:78:55:71:40:1f:5f:44:26:ef:da:45:2a:16:
25:98:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:03:03 2025 by rpki-client