Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: on4zq5s9LhYNAvOZtqWuj5sCH26GA2/kjMG9PznQXs8=
Subject key identifier: FC:86:90:B6:AF:06:32:D4:FD:E8:98:A0:7B:35:FC:A8:73:E4:16:14
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 0198D5BBCD8431F7E2C7E863D5B7A58560FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 060D
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: w8PD+eXwmS8xwul9WCoMv9fVTVz7pe/JRn4zE5BMs8c=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cd:84:31:f7:e2:c7:e8:63:d5:b7:a5:85:60:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=fc8690b6af0632d4fde898a07b35fca873e41614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:4b:d0:91:6e:35:58:86:2c:66:cd:f3:79:
00:d1:10:99:8e:ab:ea:41:c2:d0:2d:50:c8:42:c6:
dd:72:14:52:5f:2f:23:7b:87:dd:d8:5a:61:ba:61:
0a:ca:0b:c6:dc:09:9e:45:66:eb:24:25:08:de:ba:
d7:94:39:15:cd:6e:a9:67:01:0f:f0:e2:c6:66:85:
8a:0a:5f:2d:0c:21:9a:9d:9d:ac:c9:44:6d:b9:b7:
2c:91:b0:59:91:37:42:4a:c2:91:c0:b5:9b:7f:5e:
0c:cd:dd:cd:cc:b9:37:dd:81:e5:20:1f:8b:51:95:
10:7b:10:4f:5c:ca:04:fa:28:6e:02:e0:17:18:41:
0f:f6:1a:ce:5f:35:9f:6c:34:ee:96:a3:13:70:58:
fb:2c:4c:8e:c4:49:ef:25:c2:9a:2d:34:20:a7:cb:
48:64:ed:90:8a:bf:0e:68:bb:d3:fb:8e:24:0b:85:
9d:70:47:16:f3:54:a7:3a:65:a9:46:99:50:d0:02:
7c:8c:a9:3e:66:8d:56:19:c5:ef:3e:f4:e5:7e:c7:
75:71:62:61:9e:a3:a6:f2:dd:52:a2:a7:5b:9e:82:
9f:11:39:60:78:59:20:39:d8:84:87:ad:fe:98:cb:
ce:6a:93:96:38:e8:a7:9d:80:38:ae:ec:65:4b:66:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:90:B6:AF:06:32:D4:FD:E8:98:A0:7B:35:FC:A8:73:E4:16:14
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:54:14:45:e4:40:f8:33:f8:a6:59:39:ac:7a:ea:33:9f:
7a:19:64:93:e0:a9:09:67:88:8b:fd:1d:17:b5:d3:6f:32:b8:
d0:a4:eb:c8:03:4e:2a:c4:a7:ef:83:2d:54:a2:5e:d8:60:38:
da:eb:a8:d0:aa:93:28:6c:26:48:62:76:e3:9b:b7:a8:57:22:
53:14:35:19:17:02:d4:2c:9c:ee:85:e8:ab:e1:62:c0:2b:10:
df:1d:0f:66:45:73:6b:38:04:5e:cd:70:5f:60:c0:50:e6:11:
45:a1:e6:e9:dc:d7:80:bc:00:bb:bd:03:46:20:8c:54:44:45:
9d:9b:14:21:d5:d4:a6:e9:83:00:8e:30:b9:be:53:55:cc:24:
45:29:e7:a1:9a:e7:62:c7:f0:b1:7c:da:a8:ec:9a:89:b1:11:
0d:cb:b2:8a:47:5f:22:7a:17:98:36:f2:b7:2d:72:5a:eb:5f:
db:6d:b6:13:ff:14:ba:a9:e5:93:c9:7c:7c:4c:dc:2a:ee:bd:
5e:29:ab:82:10:9e:10:c7:0b:bd:5b:6c:98:b4:a4:c3:35:3d:
64:bb:b8:8d:bc:9a:11:ea:8f:63:99:68:3f:79:8f:6e:4c:42:
96:c6:96:03:51:9f:49:6f:b4:70:fa:aa:29:b3:f2:51:82:aa:
b1:47:ed:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu82EMffix+hj1belhWD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj
ZjJlODEwHhcNMjUwODIzMDcwMTUxWhcNMjUwODI0MDcwMTUxWjAzMTEwLwYDVQQD
EyhmYzg2OTBiNmFmMDYzMmQ0ZmRlODk4YTA3YjM1ZmNhODczZTQxNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/xL0JFuNViGLGbN83kA0RCZjqvq
QcLQLVDIQsbdchRSXy8je4fd2FphumEKygvG3AmeRWbrJCUI3rrXlDkVzW6pZwEP
8OLGZoWKCl8tDCGanZ2syURtubcskbBZkTdCSsKRwLWbf14Mzd3NzLk33YHlIB+L
UZUQexBPXMoE+ihuAuAXGEEP9hrOXzWfbDTulqMTcFj7LEyOxEnvJcKaLTQgp8tI
ZO2Qir8OaLvT+44kC4WdcEcW81SnOmWpRplQ0AJ8jKk+Zo1WGcXvPvTlfsd1cWJh
nqOm8t1SoqdbnoKfETlgeFkgOdiEh63+mMvOapOWOOinnYA4ruxlS2boMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyGkLavBjLU/eiYoHs1/Khz5BYUMB8GA1UdIwQY
MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt
M2FjYjgxNDkwNGEwLzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw
LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCtUFEXk
QPgz+KZZOax66jOfehlkk+CpCWeIi/0dF7XTbzK40KTryANOKsSn74MtVKJe2GA4
2uuo0KqTKGwmSGJ245u3qFciUxQ1GRcC1Cyc7oXoq+FiwCsQ3x0PZkVzazgEXs1w
X2DAUOYRRaHm6dzXgLwAu70DRiCMVERFnZsUIdXUpumDAI4wub5TVcwkRSnnoZrn
YsfwsXzaqOyaibERDcuyikdfInoXmDbyty1yWutf2222E/8Uuqnlk8l8fEzcKu69
XimrghCeEMcLvVtsmLSkwzU9ZLu4jbyaEeqPY5loP3mPbkxClsaWA1GfSW+0cPqq
KbPyUYKqsUftlw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:08 2025 by rpki-client