Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: Lxf6E2ow3q61timU8V4jfZJJ7FvpGYaUFIASwjkEbqY=
Subject key identifier: 4E:E3:16:F5:41:C7:6B:D4:0F:30:ED:16:64:2D:A1:B0:08:14:42:97
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 0199FCFD9F8D230BBE5BEF294144A2A8D68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 06A6
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: 4jjIw656Ce4jvch7n4ydqiP4vP3vDWUGlcFhCf1zDmA=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9f:8d:23:0b:be:5b:ef:29:41:44:a2:a8:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=4ee316f541c76bd40f30ed16642da1b008144297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:70:a9:81:cc:2b:d1:9e:90:b8:46:3c:30:
69:4a:1b:6d:a5:cc:34:ae:74:c2:c5:6d:f9:d7:30:
52:6b:d0:2b:f1:b2:83:3e:4c:e8:82:de:51:f9:07:
06:b0:5f:bc:cf:f2:26:58:b4:da:d0:35:10:1f:ab:
de:e0:a4:ef:48:dd:41:f8:3a:2d:f0:91:ee:d6:d0:
58:fa:f6:3e:13:81:7a:e6:79:9c:0b:fd:a9:1a:c3:
a4:d3:a0:a3:0d:d7:fb:31:1a:60:cc:a5:ff:2c:e9:
ce:f7:4e:76:4b:a6:44:d8:0c:49:97:7a:15:9c:d1:
37:35:f1:19:b1:13:5b:47:bf:52:56:02:a0:06:de:
2e:6a:e2:7e:c5:09:94:00:6f:65:c6:2e:21:41:9c:
d1:79:d0:ad:59:2d:f7:6b:3d:4c:cf:fd:8d:00:96:
a1:7e:f4:14:a6:28:c6:3c:b9:8e:da:75:21:84:e1:
f5:ed:7e:89:cb:4a:4a:3a:bc:9f:51:80:09:6c:67:
2c:e9:ab:a9:e5:08:55:90:a8:c1:59:b0:7d:e1:de:
21:bc:65:75:2d:a3:d3:5f:e2:95:1c:d7:6f:0e:dd:
31:72:00:bb:86:8b:a4:0a:f3:33:38:67:c4:3e:1b:
30:64:57:2f:a0:ac:65:9e:3b:df:9a:69:9f:5c:7d:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E3:16:F5:41:C7:6B:D4:0F:30:ED:16:64:2D:A1:B0:08:14:42:97
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:f0:eb:f3:da:c7:97:de:4d:9f:a1:d3:d8:3d:c9:85:b1:
42:0a:6f:f8:9b:32:66:dc:81:4c:8b:4c:ec:b1:90:76:14:5e:
fd:57:9b:4e:99:54:c9:7b:11:5c:2c:72:1a:96:6a:14:ad:a9:
21:3d:f4:46:2e:47:28:a2:d4:fc:8e:02:dc:c7:ea:81:a3:3e:
a5:16:b5:27:94:fd:12:8d:e3:cd:0e:65:62:2f:4a:2c:86:9e:
44:f1:86:fd:31:c3:76:d2:3e:60:68:bd:e9:e2:d7:c0:6f:20:
50:b3:c4:70:3e:9f:e2:6d:cf:c6:a0:64:db:22:d9:8c:ba:2b:
7c:5b:e9:ec:ff:bf:9e:81:57:5f:90:f3:10:a0:9d:cd:d0:60:
27:3f:a5:a2:a2:1e:ea:08:ed:c3:a4:10:6e:30:90:2d:e3:ae:
ee:52:42:e8:8a:89:5f:23:14:b7:3a:91:7a:92:c4:3b:8e:7e:
5f:2e:ef:66:bc:9d:82:49:a5:05:39:48:11:5c:1f:b7:38:b9:
8c:75:3d:20:47:6b:9e:0d:34:c3:75:c8:bf:2a:47:a3:a4:0a:
c2:b7:13:1a:05:62:49:9f:95:0e:0b:c6:30:d2:07:f0:83:fb:
65:f5:6a:24:58:2d:39:7e:ae:15:3b:05:85:d2:e0:f8:9b:fe:
c3:f6:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:05 2025 by rpki-client