Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: qbBtx1PLCYrqAYYO+1EKqKMiLkMSiGOGpSehFWtYso8=
Subject key identifier: D2:EB:7F:01:C2:4F:E4:90:28:F7:10:EA:40:60:55:27:74:98:FA:58
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 019A25F894CE0E58AFA49C8107FEE5F375CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 1540
Signing time: Mon 27 Oct 2025 14:00:39 +0000
Manifest this update: Mon 27 Oct 2025 14:00:39 +0000
Manifest next update: Tue 28 Oct 2025 14:00:39 +0000
Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: fheIvUsV6XDA8Sx9R+sW6rClxPB8mXkUGIAGlM9lOLQ=)
4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:94:ce:0e:58:af:a4:9c:81:07:fe:e5:f3:75:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Oct 27 14:00:39 2025 GMT
Not After : Oct 28 14:00:39 2025 GMT
Subject: CN=d2eb7f01c24fe49028f710ea406055277498fa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:c7:73:29:b8:9b:68:3e:12:23:a1:dc:4c:
95:a2:d7:65:d2:c5:e3:27:49:2d:ea:d0:0e:e3:7d:
ee:e5:48:ec:1e:45:89:48:16:11:e2:7f:49:32:7e:
d5:b8:e5:46:d3:ce:4a:7b:92:9a:91:74:72:ad:ed:
93:9c:27:f2:07:7b:4f:a9:e7:45:fe:dd:16:97:94:
c9:16:7f:39:a5:84:0e:36:8f:d9:ff:92:6f:22:00:
78:f4:8d:a7:15:e1:77:d2:58:68:f5:4d:13:c9:38:
c9:8c:7b:a3:26:82:04:63:c0:53:df:f5:45:c1:56:
62:4d:64:2e:d4:9e:c1:6a:5c:15:67:38:68:01:6d:
44:82:1b:cd:84:4f:e5:7d:09:77:58:17:6f:9c:d5:
81:6c:04:2e:0b:c6:a6:ab:05:8c:73:fa:c5:21:59:
b2:8a:41:19:01:b4:02:da:9e:ad:e4:f5:34:38:22:
ce:cd:93:7d:ea:c8:87:fc:74:be:cc:f6:1e:1b:c9:
d3:d1:70:66:98:02:bb:19:69:66:6e:ac:30:a9:3f:
ae:27:31:cd:a9:06:30:fb:e4:bc:b5:1d:49:3e:1b:
23:00:89:ef:cd:de:c1:ef:90:99:fc:15:a2:d6:6d:
c7:d5:f6:61:e7:ee:27:0b:93:83:bd:68:be:6f:a7:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:7F:01:C2:4F:E4:90:28:F7:10:EA:40:60:55:27:74:98:FA:58
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9c:67:81:5a:08:50:dc:4d:c5:bb:f5:5d:3d:b0:f1:1b:a5:
43:a4:84:a2:4a:c3:c3:d1:c3:ea:59:4c:81:50:fb:f0:05:2f:
f8:aa:41:ab:57:3f:e4:7b:4f:d0:44:b5:a8:30:ca:0c:fa:57:
9d:76:09:f8:73:f2:97:1e:f5:f3:8f:7b:12:18:13:40:52:82:
69:f3:c3:1b:d4:72:26:53:8c:87:b1:20:00:91:54:cd:c8:93:
f4:0e:cc:66:12:29:41:40:3f:ad:fe:c4:20:80:f7:2c:cc:84:
c1:2f:d0:9a:1b:9a:07:52:10:fa:28:71:bc:29:ab:84:a5:c1:
01:76:d2:8d:cc:70:0c:3f:5d:63:81:8b:8a:e4:67:f6:19:ba:
ae:35:df:4c:b7:d3:3a:bd:c3:00:21:d7:0e:0b:9f:e1:5d:a1:
21:35:9c:11:bc:36:84:82:dc:33:0f:20:d6:e2:ff:dd:00:d9:
22:d5:36:f0:c0:64:99:6e:0d:cd:e2:ab:87:63:a4:98:aa:84:
c2:ab:ae:4b:e4:e2:3c:43:00:78:ff:7a:f1:98:4d:93:a8:24:
e3:7d:2a:eb:02:cf:80:d8:12:a7:a7:c8:d0:69:83:76:23:20:
4d:5b:ba:20:b0:c4:95:a4:3f:64:cd:96:1f:ef:00:ac:ef:65:
a9:da:06:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+JTODlivpJyBB/7l83XOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2
Zjg1NzMwHhcNMjUxMDI3MTQwMDM5WhcNMjUxMDI4MTQwMDM5WjAzMTEwLwYDVQQD
EyhkMmViN2YwMWMyNGZlNDkwMjhmNzEwZWE0MDYwNTUyNzc0OThmYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/jHcym4m2g+EiOh3EyVotdl0sXj
J0kt6tAO433u5UjsHkWJSBYR4n9JMn7VuOVG085Ke5KakXRyre2TnCfyB3tPqedF
/t0Wl5TJFn85pYQONo/Z/5JvIgB49I2nFeF30lho9U0TyTjJjHujJoIEY8BT3/VF
wVZiTWQu1J7BalwVZzhoAW1EghvNhE/lfQl3WBdvnNWBbAQuC8amqwWMc/rFIVmy
ikEZAbQC2p6t5PU0OCLOzZN96siH/HS+zPYeG8nT0XBmmAK7GWlmbqwwqT+uJzHN
qQYw++S8tR1JPhsjAInvzd7B75CZ/BWi1m3H1fZh5+4nC5ODvWi+b6dW1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLrfwHCT+SQKPcQ6kBgVSd0mPpYMB8GA1UdIwQY
MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt
YmYzNGQwMWY4YjBhLzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh
LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZxngVoI
UNxNxbv1XT2w8RulQ6SEokrDw9HD6llMgVD78AUv+KpBq1c/5HtP0ES1qDDKDPpX
nXYJ+HPylx718497EhgTQFKCafPDG9RyJlOMh7EgAJFUzciT9A7MZhIpQUA/rf7E
IID3LMyEwS/QmhuaB1IQ+ihxvCmrhKXBAXbSjcxwDD9dY4GLiuRn9hm6rjXfTLfT
Or3DACHXDguf4V2hITWcEbw2hILcMw8g1uL/3QDZItU28MBkmW4NzeKrh2OkmKqE
wquuS+TiPEMAeP968ZhNk6gk430q6wLPgNgSp6fI0GmDdiMgTVu6ILDElaQ/ZM2W
H+8ArO9lqdoG7w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:43:58 2025 by rpki-client