Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: b+y5pWaY/ELbNkUUKs5tXGySf9KPP3tpD0cy550TIhw=
Subject key identifier: 86:96:51:E1:D7:1C:59:AE:91:5B:99:95:95:A5:DE:5C:ED:9D:BA:C7
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 019751C6063DC274CA679F0912FADD4B83DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 03C8
Signing time: Sun 08 Jun 2025 23:00:21 +0000
Manifest this update: Sun 08 Jun 2025 23:00:21 +0000
Manifest next update: Mon 09 Jun 2025 23:00:21 +0000
Files and hashes: 1: YGqpN3K7qoku4d1ucurJlG9A28g.roa (hash: vV+QkChEXM7aBJKALX0tUZfW7qPTcVJsY+rKECbz5Kk=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: QPSTyuoib0T0iZvoaJGo33PEXcnLL3D7tx4jy1fbs3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:06:3d:c2:74:ca:67:9f:09:12:fa:dd:4b:83:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Jun 8 23:00:21 2025 GMT
Not After : Jun 9 23:00:21 2025 GMT
Subject: CN=869651e1d71c59ae915b999595a5de5ced9dbac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:0c:9e:96:49:c5:3d:63:c1:31:8b:1e:bf:
bf:60:87:97:eb:d3:dc:23:46:dc:43:c8:ed:26:cd:
f9:a9:f8:c1:0d:87:10:24:c6:08:e0:64:5d:26:93:
e8:c3:1e:d3:db:5c:e4:ef:09:18:83:e0:44:d6:ff:
da:be:a9:4e:43:0d:0a:13:d5:95:ae:20:c3:be:01:
9a:ed:22:04:f4:b0:5d:38:7d:af:12:f5:86:d3:a6:
36:2d:09:f8:28:78:db:e7:c8:bc:76:06:eb:ac:37:
92:be:3e:8a:14:25:9c:0a:4d:fa:b5:8c:a1:fc:dc:
43:36:46:62:9c:c0:a8:70:9b:a4:e3:03:62:66:57:
1a:e8:05:da:fd:53:a6:15:6c:2d:31:06:1c:bd:2b:
cc:a8:72:bd:26:b6:53:4e:70:e1:71:6f:ce:2e:b4:
b6:50:7e:eb:4a:7e:ba:e6:8e:a9:d4:f7:ed:59:84:
10:de:b2:c4:f2:2d:a0:79:9c:58:db:32:fa:11:d4:
14:d6:49:e5:59:9f:6e:7c:f2:1b:3f:10:54:21:4f:
eb:04:f1:de:f6:01:eb:c0:0a:91:b0:a7:40:8f:98:
8b:7e:b1:7a:44:cb:b4:95:b4:be:75:8b:d9:b6:a4:
ea:29:9b:98:a5:1c:88:0f:4a:9e:b6:14:97:3b:68:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:51:E1:D7:1C:59:AE:91:5B:99:95:95:A5:DE:5C:ED:9D:BA:C7
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bb:40:e1:e9:fd:0e:57:6e:1c:af:0a:0f:da:38:de:d7:a5:
75:f7:f8:70:7f:ec:47:5d:87:a2:02:79:4e:78:86:f1:ef:9e:
9c:fd:c9:ec:2b:b1:23:49:f0:ba:95:9f:0d:71:70:4a:f7:2a:
05:a7:0e:90:64:f7:9e:8f:a2:33:19:95:44:f2:96:ed:f0:4b:
40:5e:cc:25:88:9c:ad:9d:02:59:55:81:14:6c:38:08:34:fa:
fe:3d:6c:a6:da:68:7f:c4:be:68:0e:1c:39:63:99:bd:ac:34:
c7:3e:d5:d5:cf:3d:ad:2f:e0:58:d6:08:7d:26:f9:53:73:dc:
b6:ab:f9:bc:85:23:16:49:fe:3b:61:f7:56:6c:16:35:24:d2:
dd:11:bc:4e:b9:92:45:b1:31:ec:80:ee:3a:1d:b9:31:25:b8:
70:f9:f2:b8:28:9f:96:2d:a5:4a:23:40:1a:7b:eb:e6:87:24:
3a:71:25:f3:6e:64:aa:2c:22:4f:ae:a8:c7:53:a9:7f:68:89:
48:84:c1:a8:8f:fa:a5:2a:19:1a:ed:10:ae:53:4a:70:10:1b:
43:73:4f:eb:83:a8:1c:c3:c1:f1:83:f8:76:83:ff:3f:3e:b7:
c8:f3:9d:cb:29:2d:a7:7a:b1:b4:8a:a5:d7:45:28:d7:a3:26:
62:b5:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:37:18 2025 by rpki-client