Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: N9w6NOQFGfw/qRyEnCFO/MzTP9RFZ3iuwoYn23IKLUA=
Subject key identifier: 0C:B9:4B:EA:94:39:34:57:04:06:44:FA:91:37:18:03:21:91:55:97
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 01993870B2BB49AAAA0426D69E6430B8C6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 14C5
Signing time: Thu 11 Sep 2025 11:02:13 +0000
Manifest this update: Thu 11 Sep 2025 11:02:13 +0000
Manifest next update: Fri 12 Sep 2025 11:02:13 +0000
Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: 20roOKQ/VTM5m5o8hZtFFNElTaz3t/kc2uxLMEeH7Bg=)
4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 11:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:b2:bb:49:aa:aa:04:26:d6:9e:64:30:b8:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Sep 11 11:02:13 2025 GMT
Not After : Sep 12 11:02:13 2025 GMT
Subject: CN=0cb94bea94393457040644fa9137180321915597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:d8:fb:55:53:74:e6:1a:65:33:cf:7c:d7:
f8:a3:79:48:2c:eb:37:86:b9:66:b8:4b:a1:60:1c:
e7:ad:6d:5a:de:02:8b:15:a7:d6:e4:6d:ff:97:a0:
2c:99:c3:87:b8:72:b2:24:91:7e:bb:cc:97:94:d7:
ba:e1:3f:9a:f1:4c:c3:66:87:60:8b:93:b4:ed:55:
42:48:d1:94:ba:07:10:da:29:dc:26:40:c7:c6:93:
b1:1b:20:ce:9e:ed:b6:78:e6:a8:e1:3a:13:fd:59:
43:a1:9a:1f:d3:4c:f6:3c:d8:e1:d4:b6:27:77:9c:
ab:d9:29:d5:3d:53:b0:30:69:db:ad:b9:0c:ab:19:
73:1e:5c:6a:ef:37:0b:fe:95:8a:99:86:18:c9:c2:
e1:2b:54:c0:28:c5:34:d1:43:2d:2b:e8:8f:f9:ee:
c2:eb:ee:a8:59:c6:0f:92:13:9d:9e:85:a9:13:82:
06:a9:c0:9e:26:3c:93:53:1d:87:65:19:b8:e4:85:
2e:d3:68:a4:43:95:d8:34:50:1f:12:60:73:26:9d:
03:72:4d:5a:63:41:e5:47:69:f9:1f:cb:34:37:78:
24:06:da:a2:4d:6c:79:a1:71:b6:ae:e0:e0:8a:0b:
19:a7:ea:2e:02:13:bd:56:a5:e8:26:2b:27:f5:e2:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:4B:EA:94:39:34:57:04:06:44:FA:91:37:18:03:21:91:55:97
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b6:d6:7b:57:ef:9b:fa:a2:35:d1:7e:ce:97:a0:62:1c:bb:
44:8c:dd:e4:02:05:8a:ac:b3:9a:0d:e6:d9:86:a8:2c:3f:c1:
d8:d6:dc:a7:af:8d:2b:cd:41:0c:87:5a:9b:cb:01:a9:f2:4f:
97:07:62:0f:af:e1:74:98:d2:de:d4:b4:42:73:75:60:96:1b:
96:33:de:a9:fe:12:a6:84:f7:d5:d4:73:5a:01:4f:69:51:d6:
2a:b0:0f:74:f9:0c:89:87:8f:4b:16:7a:d6:c5:05:bd:5a:99:
c8:29:cb:b8:98:c9:e7:8b:68:83:b3:55:56:84:c0:11:7e:6d:
7a:21:64:da:85:51:3b:0d:28:97:69:2b:0d:95:a2:91:b6:62:
bd:71:5b:48:2a:ac:15:ef:28:1f:45:b9:55:c6:1e:39:7e:78:
a5:bc:70:c6:de:3a:0d:14:8b:48:97:96:1c:c5:ff:3b:25:0d:
8b:d4:2d:4f:79:90:28:c5:e1:73:b3:2e:9c:95:5d:ac:33:9a:
03:11:2c:5d:18:88:b1:09:36:c7:a5:49:64:a9:0c:24:96:f5:
a0:e0:67:0d:89:49:e1:c4:d4:04:1f:d2:49:fc:dc:14:e2:d5:
7b:31:05:c1:da:5f:43:58:bc:7d:c0:ce:6e:f1:96:2c:61:00:
88:9a:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 18:56:40 2025 by rpki-client