
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: AhrW679UyFmXafNauo9Bw+ejvuncR90iIKhCH0iIyrY=
Subject key identifier: 7A:44:48:46:B5:A5:FF:C3:DA:D7:07:84:5D:B4:F3:F5:8C:09:84:2E
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 0197462FC9B5E5BC33BE4F73EC69DE31D2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 13C3
Signing time: Fri 06 Jun 2025 17:00:26 +0000
Manifest this update: Fri 06 Jun 2025 17:00:26 +0000
Manifest next update: Sat 07 Jun 2025 17:00:26 +0000
Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: qzbgecJqjxIg6xQFwkPm3txSnFA6M+RyIXFu8zCQPX8=)
4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:c9:b5:e5:bc:33:be:4f:73:ec:69:de:31:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Jun 6 17:00:26 2025 GMT
Not After : Jun 7 17:00:26 2025 GMT
Subject: CN=7a444846b5a5ffc3dad707845db4f3f58c09842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:23:c8:97:fe:76:c4:15:95:b4:ec:9b:6a:
2d:64:dd:b8:1f:30:7b:d7:26:6f:fc:36:76:cb:db:
ef:0d:55:73:22:08:4f:8d:6b:f3:17:ee:d0:ac:23:
c4:bb:db:ba:f1:39:9b:2e:63:a9:c9:45:e1:f7:9f:
f0:46:96:b3:51:31:13:56:df:57:20:27:6c:45:d0:
c8:56:f7:2b:7b:0e:cb:82:c6:7a:8f:28:7d:d9:3c:
73:a9:33:b9:2f:bf:20:0f:8b:75:82:99:74:62:fd:
53:a6:33:4f:b0:e5:88:76:77:60:93:92:e9:85:dd:
6d:41:0f:5f:17:73:3b:f9:56:f0:62:ba:32:36:06:
fc:a9:ab:5e:02:25:56:ff:80:e3:37:2d:90:b3:2e:
e9:81:8b:c3:63:59:e8:00:a4:0b:8d:38:34:76:9d:
cd:88:59:ab:28:60:1e:a1:1f:f9:e3:a9:4e:aa:52:
6a:b3:a5:32:b4:94:e0:b7:71:1d:b0:e3:25:c4:55:
6d:fc:74:6a:07:6f:d9:a1:74:23:d7:4a:45:df:2e:
1f:41:4c:6b:be:23:d9:29:52:06:ae:cc:92:17:25:
d4:08:23:f0:1c:74:aa:a4:01:cb:31:da:53:02:b9:
99:e4:b1:6c:ad:90:2f:b9:96:c4:18:59:f2:68:6e:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:44:48:46:B5:A5:FF:C3:DA:D7:07:84:5D:B4:F3:F5:8C:09:84:2E
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:30:2e:39:8d:d8:84:dd:86:d0:b8:73:3d:42:ce:92:0e:f9:
e2:49:79:2e:3f:78:1a:d0:f0:11:c4:5e:70:b2:57:67:ee:99:
d2:2e:c8:94:26:7a:0f:91:ea:8c:39:cb:d8:d3:05:48:fd:5b:
43:46:4c:de:98:8f:21:61:2f:10:cb:90:c7:3f:ba:7f:63:2b:
95:48:c8:94:ac:16:16:f0:2a:92:d9:9c:88:01:43:16:fe:34:
73:72:20:27:ac:4a:b1:1b:55:f0:6f:01:2e:16:fa:8e:0c:3f:
5d:96:9c:b1:79:59:da:63:3d:6c:7a:b9:43:0e:64:89:39:fd:
53:61:d1:a2:ba:4b:8b:22:e5:a9:d6:9b:b3:a7:2f:d6:42:c3:
46:ab:0e:13:c0:f5:61:e1:be:ca:4e:69:07:fb:ea:ac:52:ad:
59:d4:24:ac:a1:54:d8:05:9a:b6:23:b7:b1:f3:ee:80:04:65:
c8:6a:71:cb:39:ba:46:98:7d:31:e6:10:4c:54:2e:00:a1:de:
53:6f:48:db:2f:48:6e:6d:03:bb:b5:01:89:76:e7:e4:ee:46:
13:e6:7e:e8:6e:30:ff:b6:38:39:35:d3:1f:5c:0d:19:29:50:
91:67:19:6e:2c:2f:f2:75:b7:94:17:dc:a5:2c:71:af:9f:75:
61:76:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:06 2025 by rpki-client