Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: QdsYpRqBVC9r7YrDoFPMSDK9s5diH+7OD0KvTbZ5qWA=
Subject key identifier: 8B:EA:84:E3:10:B3:8C:09:C2:97:B3:86:FB:2B:8F:DF:B1:7E:B8:92
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 0197B5FC2481A78EE2C6CE6140D4AD68F1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 0578
Signing time: Sat 28 Jun 2025 10:01:29 +0000
Manifest this update: Sat 28 Jun 2025 10:01:29 +0000
Manifest next update: Sun 29 Jun 2025 10:01:29 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: 3tX31Rz1140W4clG/iVe0Ehgz1sZSGQcQcm7dw+8r/Y=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:24:81:a7:8e:e2:c6:ce:61:40:d4:ad:68:f1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Jun 28 10:01:29 2025 GMT
Not After : Jun 29 10:01:29 2025 GMT
Subject: CN=8bea84e310b38c09c297b386fb2b8fdfb17eb892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:e6:5b:b4:7c:9f:22:8f:6c:f8:fd:4c:b5:
4f:36:0a:41:0a:8f:01:6d:f1:c7:59:f4:ad:22:0b:
b5:37:15:4e:e6:69:03:37:a6:f5:75:ab:5a:e2:12:
42:c9:4b:81:df:e5:bc:2f:bf:17:98:12:57:15:94:
ed:08:03:31:0a:7d:19:58:6c:0c:57:fa:82:56:50:
dc:9f:9e:15:f8:6a:76:af:35:6c:5d:79:fd:fe:18:
f4:c8:8a:ff:5b:4a:8c:06:4f:16:60:a8:eb:b8:ba:
f1:be:66:b7:bc:5c:c0:04:cf:f9:a4:ec:29:e7:ae:
8a:7e:e1:30:0b:f9:d3:6c:53:00:04:df:8b:c7:02:
91:76:00:6a:6d:8a:a3:55:8c:66:7f:5c:2b:4e:75:
f3:7d:c6:44:a9:ec:62:63:71:5e:7d:b4:85:29:9c:
5e:45:99:83:82:9b:23:b6:4c:a7:3f:df:f1:13:b0:
7c:93:5e:ed:d5:bb:04:54:29:0f:5c:8b:fc:73:ba:
20:ca:12:cc:c4:5b:91:44:26:ec:6e:1b:2e:68:f2:
75:df:30:ce:12:26:f1:55:25:97:94:b6:2d:1e:d2:
96:f4:31:7c:db:ee:54:67:67:c2:d7:cd:12:58:e7:
e1:90:f7:96:cf:de:f7:9e:00:4f:c1:42:6d:d6:74:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EA:84:E3:10:B3:8C:09:C2:97:B3:86:FB:2B:8F:DF:B1:7E:B8:92
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ea:87:32:a9:da:56:fd:97:6c:e5:ba:f7:4b:3f:70:24:2d:
fa:d2:ff:50:04:e7:55:11:35:7a:8c:a5:e6:a2:fe:9a:89:92:
dd:e6:42:3e:b4:b4:08:27:47:d4:1f:91:3e:9f:66:b7:f2:3e:
62:e7:6b:a4:87:e6:a1:6f:07:37:f2:05:05:a2:bb:bd:57:3e:
4a:39:24:8f:2b:1f:e0:48:5f:19:6c:b8:12:ea:08:f3:d7:70:
0c:a6:b5:cc:e0:83:2e:fa:3b:35:9a:47:e8:65:1a:6b:c2:e0:
85:44:24:c7:c2:af:6f:1d:1c:10:9a:f7:91:25:1a:ce:a8:e5:
02:e9:e6:05:75:03:6a:4f:3a:97:1d:33:59:5d:43:94:5b:ad:
e6:ff:20:fb:c5:b8:76:04:42:4e:14:5e:8d:b8:64:0e:a9:e6:
e0:1d:db:7c:95:b1:14:26:85:23:e8:06:77:e4:77:77:32:26:
bd:cc:41:5b:b0:66:7a:3f:07:5e:1b:6b:71:99:3f:10:19:77:
4f:df:fc:da:4d:74:ef:50:a0:6e:50:4f:d0:33:c1:a3:38:39:
19:e6:81:03:84:b9:01:df:a6:8e:68:87:12:11:0b:6d:79:85:
75:2f:97:24:6e:ed:5b:ca:1d:33:23:85:b4:6b:0b:bc:31:78:
3f:34:b7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:02 2025 by rpki-client