Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: 6V7lDOJlixhoQQWreuNuFGICk3/rqcHDmma9fIT5lL4=
Subject key identifier: 43:A9:F9:35:BD:C0:FC:1B:56:F7:21:97:F0:66:41:12:5F:D1:D7:0B
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 0197B74531EE149763221CB55BEE3D3EB691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 12FD
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: JnR1/4XO/H/nGxwV2t+/50LyquisGUbRlsSSy+JPGHo=)
2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:31:ee:14:97:63:22:1c:b5:5b:ee:3d:3e:b6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=43a9f935bdc0fc1b56f72197f06641125fd1d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:dc:d2:71:95:ae:20:42:86:42:36:78:39:
22:97:31:e4:1b:35:7a:c3:15:13:75:0e:50:84:9d:
44:7a:a1:ad:89:9f:e1:62:94:e5:7f:5d:4f:26:66:
59:b4:5d:f5:f8:41:b0:c5:54:34:1c:4b:95:74:01:
66:98:11:36:cc:ee:3b:ae:83:26:c1:01:4a:b0:c7:
7d:a0:ce:f8:af:69:39:ea:c5:83:d9:c9:b7:0d:88:
6f:05:49:17:3d:d5:57:db:67:3e:dc:69:15:aa:92:
9b:07:89:40:06:14:23:1b:50:f2:d9:72:11:67:51:
27:d6:c4:41:d4:47:8f:29:69:69:14:99:5a:b7:5b:
07:97:a3:e4:6d:d9:91:04:5e:8e:3b:49:6a:fa:92:
9a:70:da:e0:d6:d3:95:ba:1d:ce:7c:bd:8f:2f:94:
f2:93:ed:c3:e7:9d:5e:bf:12:f2:c3:24:55:17:fa:
55:16:67:12:ee:d5:de:cb:15:e2:7f:03:25:a4:59:
9a:48:3e:82:da:27:18:53:c5:f8:4c:54:09:3d:ec:
eb:11:3f:5f:f5:d6:37:cd:2d:ac:c7:0d:36:a7:15:
73:86:89:3a:86:41:f4:48:c2:0b:04:40:27:43:5e:
82:19:39:bb:06:7c:70:9f:0a:13:94:68:5e:9c:fb:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:F9:35:BD:C0:FC:1B:56:F7:21:97:F0:66:41:12:5F:D1:D7:0B
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:40:d1:ea:f2:ec:7f:c2:01:7a:7a:3d:68:6c:d8:2a:61:ae:
03:24:b8:02:f4:c2:2b:5f:36:2d:bf:e5:f0:a4:24:e5:9a:93:
1d:fc:f2:51:89:a3:d5:6e:36:82:ea:b4:9e:d3:93:bf:8e:f0:
6e:4b:83:c9:54:7a:dc:f2:d7:dc:3b:c8:c7:5f:b3:ed:1a:02:
2d:9a:37:55:c8:54:1c:17:52:03:97:55:b5:a4:96:8f:af:0e:
1c:a0:86:d1:7b:21:2d:1b:26:fc:d4:c1:a7:1c:7b:92:c8:22:
d4:a8:1c:97:1a:11:44:ef:07:dd:6a:7f:df:0b:63:e1:10:80:
2b:63:21:69:a8:d7:65:14:2a:fb:7d:64:02:29:a2:15:82:1f:
94:10:ba:ff:1d:06:6b:80:26:9d:86:86:ce:9b:fb:62:90:5e:
c6:63:6d:c2:17:b1:e2:d5:1b:9c:7f:0c:1b:b3:ee:94:ea:aa:
26:e7:c6:e4:50:3d:70:a0:7d:47:2b:6d:9c:e0:79:2b:de:a2:
57:be:cd:93:fd:7f:d0:d2:7d:a0:03:21:a7:e5:ee:26:6e:8f:
4d:90:b7:be:06:54:e7:84:42:83:3d:da:5a:b0:69:a6:dd:fa:
f8:b1:06:80:71:1d:de:fd:ec:7a:6e:cb:29:9e:a4:18:59:c3:
01:07:f1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:08 2025 by rpki-client