Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier: z1SRkNu7ihjZwYqcL5KI9S1EUo5iW1xSl8IaURIv9h4=
Subject key identifier: 57:F6:16:FC:7E:CF:38:BE:06:1E:CB:3D:E4:79:34:AB:24:72:52:22
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 01992F6C47F5885432EA9E083153263333FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number: 123A
Signing time: Tue 09 Sep 2025 17:00:49 +0000
Manifest this update: Tue 09 Sep 2025 17:00:49 +0000
Manifest next update: Wed 10 Sep 2025 17:00:49 +0000
Files and hashes: 1: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=)
2: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=)
3: BvPQLDIcycqRhZ09TdNPihJH664.roa (hash: yJUDVk+ZOQSc+kVZmceFDKkwlvc3+38IywU/ry0jyBg=)
4: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: i+u9EFlprAjxHkxDD9INqduSc7TyCL+IFBIRPliIbpQ=)
5: J_GNQPWHaTopYauZz-X71VDCD30.roa (hash: mYWNHSJ/8l+aWGMPXqK6gzDUsBDut0UQO9etVhI8z0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:47:f5:88:54:32:ea:9e:08:31:53:26:33:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Sep 9 17:00:49 2025 GMT
Not After : Sep 10 17:00:49 2025 GMT
Subject: CN=57f616fc7ecf38be061ecb3de47934ab24725222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:e4:f8:d8:1b:ef:a7:53:a1:9d:f4:2f:da:
9b:de:db:3e:8d:95:ff:90:3b:01:d9:fd:1d:01:51:
09:f3:85:1e:d1:2e:bf:36:a6:c8:e0:02:dd:87:d7:
1b:89:52:bb:74:63:4a:09:81:07:27:34:b9:f2:30:
19:bb:e8:8e:c1:da:26:f3:8e:05:e9:71:ac:b9:eb:
bf:d5:f2:11:de:39:e4:b6:15:94:c8:d0:c0:3e:ea:
e9:08:0f:86:dd:1f:fc:04:4f:48:72:e6:63:aa:d9:
49:30:d7:57:c5:79:fe:72:df:be:38:62:2c:ce:e0:
6d:86:51:df:b2:84:b5:84:35:e7:e3:d2:13:bd:30:
f9:f4:3e:09:5d:ab:b0:df:08:d6:7a:ce:69:24:a7:
d1:bd:a3:d3:b3:8c:6b:ea:fd:0e:9f:32:a7:4d:07:
5b:cc:58:38:93:8d:79:17:4e:b5:ac:01:f8:81:9c:
d2:b0:7a:a9:e0:cd:5b:05:0b:7e:a2:8b:42:b8:16:
1a:cc:84:0c:9f:47:41:c2:26:c7:ec:c4:a6:6f:fa:
42:d7:51:1c:60:0f:80:85:9b:cf:45:f7:0e:95:ff:
c9:6e:e1:70:79:3a:20:bd:13:ff:22:a5:0b:e5:6f:
98:f8:a5:46:bb:b4:97:b2:9d:f1:4e:71:46:62:83:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F6:16:FC:7E:CF:38:BE:06:1E:CB:3D:E4:79:34:AB:24:72:52:22
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:de:d6:62:3b:1e:1f:fb:82:de:1a:0f:4d:ab:5f:27:99:7e:
a7:e9:e5:5e:cf:7f:82:28:46:d5:a2:3b:68:5c:45:b3:ba:52:
72:c7:9b:92:aa:a5:2c:02:48:8c:1e:4b:aa:06:5d:78:0f:a7:
51:44:15:74:7b:b1:e2:82:4b:27:78:e1:62:4c:ad:2a:cd:2d:
72:82:7f:7a:28:5b:8b:9e:7d:e2:e9:f7:f9:74:82:35:32:91:
62:57:31:53:7d:2b:cf:a0:4f:67:99:6c:96:0f:27:e9:b8:51:
8d:5e:05:5c:82:f4:a9:bb:08:af:de:d5:1e:a6:8b:65:e9:4b:
d1:32:18:66:de:52:ac:a4:2f:69:42:2d:e0:c6:af:85:53:d4:
29:ae:34:b7:f9:d6:84:0b:e3:16:72:80:59:e0:7f:89:3b:63:
bc:63:dc:88:13:7f:64:e8:4d:a2:59:6c:a2:a9:7a:e2:60:e4:
5c:4b:b6:b0:e8:01:e5:fc:d9:7c:b5:2f:21:28:4f:57:e9:37:
c4:34:30:32:94:49:5f:a8:81:89:cb:f8:74:54:c9:54:32:b7:
32:80:de:23:7f:41:60:97:d8:18:c7:72:cc:55:5e:f7:30:c1:
95:ca:9b:e9:c0:d5:1c:fa:ef:d3:1d:c6:f8:bc:52:47:3c:32:
bc:7e:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:54:05 2025 by rpki-client