Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: QJFrvVQycLlyfaF0loqlKZRAIaY7RJJByu9EuMzDQPQ=
Subject key identifier: C6:97:71:C2:42:28:55:72:A6:0B:87:37:B2:C2:47:61:7B:1D:84:0D
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 0199319154D0D559F6CB543E74957A79AF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 04C1
Signing time: Wed 10 Sep 2025 03:00:31 +0000
Manifest this update: Wed 10 Sep 2025 03:00:31 +0000
Manifest next update: Thu 11 Sep 2025 03:00:31 +0000
Files and hashes: 1: Yu3nVp_WWr5rQyGcfYxK17BtrSs.roa (hash: M4mKyUa72k/PIr9xnS+2MIsnuRBDrxvVblz52TMfwf4=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: 4mFvjLqCwHCE4xUnjYpMWCl5VRZDYNe1atyhp8ulCfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:54:d0:d5:59:f6:cb:54:3e:74:95:7a:79:af:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Sep 10 03:00:31 2025 GMT
Not After : Sep 11 03:00:31 2025 GMT
Subject: CN=c69771c242285572a60b8737b2c247617b1d840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:9a:c4:3d:cb:18:60:8b:42:a5:60:0d:2c:
ff:25:05:ea:af:f2:12:2c:6b:9b:ce:28:fb:21:6d:
fb:ab:71:8f:57:2a:f8:55:a5:a2:53:ce:6b:f3:10:
35:1d:e5:7c:59:6e:25:13:2e:f7:4b:b9:49:23:22:
80:c3:d3:1d:f7:07:c1:25:6a:f8:42:64:d2:82:6c:
36:2c:33:a1:21:e2:4b:9d:a3:49:26:9a:30:93:4e:
f8:05:0d:f2:af:5d:01:1b:2e:5e:c0:c2:91:a0:16:
6e:59:fb:eb:af:a3:29:1e:5e:b4:8e:b0:f6:1d:4e:
38:fc:fe:27:74:47:68:05:36:7f:8f:a0:4e:1c:71:
c3:80:b0:45:85:df:c2:15:e9:e5:10:83:6e:a9:a6:
f5:fa:40:05:e0:99:d3:ca:d6:0f:00:8b:92:c1:58:
92:fd:ab:ac:12:e6:68:a5:fd:76:3c:73:83:cf:25:
b8:42:c7:59:6c:19:bf:a4:95:df:78:66:5a:48:c9:
a7:1e:bb:66:b5:4e:53:33:85:6d:2c:90:62:2a:41:
9e:be:e7:53:24:d4:79:65:20:c1:6c:57:d4:1d:6a:
aa:50:fc:f0:98:9e:f8:e8:e6:9a:96:cd:aa:09:de:
37:f0:fd:7a:51:d3:7a:c8:97:d1:de:b8:bf:ed:2e:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:71:C2:42:28:55:72:A6:0B:87:37:B2:C2:47:61:7B:1D:84:0D
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:da:8a:56:88:33:32:a6:fc:48:d2:56:84:6f:71:6d:4c:1c:
9c:e3:be:9a:63:07:85:a9:2e:3c:8b:29:f1:be:d9:f3:ac:59:
98:5b:cd:ac:f2:49:d3:e9:cf:ed:32:3e:65:a2:5e:25:62:d7:
05:47:ca:ef:81:26:d6:54:85:88:73:61:a8:39:b7:6b:4f:29:
42:2e:d2:9c:5d:ba:84:83:aa:a5:aa:f1:d9:89:d6:b4:ff:7d:
6f:eb:5f:e3:f4:f9:9b:90:f3:91:5c:e3:27:8e:14:a4:cd:6c:
b2:42:12:4f:03:49:2e:4e:a7:1a:da:88:b0:07:38:af:3a:a6:
83:f1:bd:f9:0b:44:08:75:96:ec:59:ae:2a:94:61:3f:f8:da:
b1:9f:11:4b:9c:a1:6c:b9:fa:aa:bc:63:81:13:e2:61:20:ed:
25:30:c6:b1:b9:44:62:9f:79:f4:d7:ae:d9:aa:22:b6:ca:2a:
bc:e5:22:ca:70:0e:7a:3d:22:b3:1c:3b:07:6f:25:73:b8:8e:
fb:e3:e2:af:9b:06:ff:21:73:82:0e:b1:f0:37:ca:c1:13:45:
5c:d2:6e:f6:63:a4:77:9a:5e:c3:4e:78:64:8e:15:e8:98:32:
81:cb:d8:85:a4:a3:37:dc:f4:99:ae:c0:c9:54:d6:fb:a4:e9:
93:2d:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:52:34 2025 by rpki-client