Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: bDWOh/e8TosoYzNlx/eTox0hbrJU2SZdyKMQXMVJCdk=
Subject key identifier: A4:C7:D9:B6:A5:A5:2E:39:54:5C:2D:89:EE:4A:D7:8D:55:C3:CB:0A
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 019A006BE02CDA8353CCC77374FF6CD703E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 142C
Signing time: Mon 20 Oct 2025 07:01:00 +0000
Manifest this update: Mon 20 Oct 2025 07:01:00 +0000
Manifest next update: Tue 21 Oct 2025 07:01:00 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: YEfWP5oOewFgDCrLLDUgiC6NwbvMaeq3o+eTbRrKeSk=)
2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e0:2c:da:83:53:cc:c7:73:74:ff:6c:d7:03:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Oct 20 07:01:00 2025 GMT
Not After : Oct 21 07:01:00 2025 GMT
Subject: CN=a4c7d9b6a5a52e39545c2d89ee4ad78d55c3cb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:ca:04:28:2f:aa:2c:68:cd:38:39:c4:68:
78:89:f7:a2:d1:9b:80:fb:a4:81:ee:e0:1d:dd:f4:
59:d6:ea:cf:23:57:87:26:09:e2:61:5a:be:fc:92:
dc:7c:eb:56:62:d5:7c:af:fb:eb:1e:b9:1c:b7:2f:
02:a4:22:36:cc:bd:e5:51:a1:b3:0c:92:7f:45:25:
29:5c:02:fd:49:89:9a:c3:b6:25:83:50:b4:c5:98:
ae:f2:bb:14:08:11:00:42:d3:22:98:6f:a1:fa:e3:
ef:f5:71:79:78:4e:bc:9b:ad:bb:04:71:48:f3:78:
bc:d4:d1:f2:b6:c8:00:68:04:01:5f:1a:c4:8f:c0:
88:05:a9:5d:4f:26:50:a2:59:11:d8:5b:6f:ab:40:
30:6a:1d:06:d6:0c:c6:9a:bb:63:02:c4:cc:4c:8e:
f3:08:61:3a:34:bd:ff:95:5a:f1:1f:dd:b2:0a:9f:
b5:8c:56:86:fe:f8:f5:05:d4:ba:8c:4c:40:e6:72:
72:d3:30:05:56:bb:ab:57:2a:9e:26:10:d4:02:02:
99:61:8d:cc:17:77:10:19:33:e7:49:eb:8d:55:d1:
0c:f9:74:88:54:d0:ef:2c:48:79:94:44:39:07:da:
95:c8:09:c7:91:6a:7f:10:fd:92:51:62:be:7d:cf:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:D9:B6:A5:A5:2E:39:54:5C:2D:89:EE:4A:D7:8D:55:C3:CB:0A
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:50:81:82:b6:77:55:0a:d8:e9:77:fe:e5:aa:bd:b9:1d:5f:
64:12:a8:3f:aa:60:11:6f:a8:eb:09:7c:cd:31:59:3e:82:27:
78:b1:d3:d6:a8:9b:56:d4:ce:c4:e6:f7:78:5f:94:0a:2d:0e:
40:70:6b:f6:df:81:46:21:0b:c3:a5:e0:4f:1c:fe:95:cc:72:
7b:ca:5e:4c:86:87:71:e6:68:32:d4:36:61:76:3e:4e:44:d5:
ab:9a:72:41:95:97:32:b6:a7:35:da:3c:bb:b9:34:b3:f5:96:
71:fb:e9:45:26:68:5e:62:81:ae:6a:12:07:17:36:36:0a:ac:
94:55:ca:3b:9d:ed:d4:eb:dc:a5:cb:75:d9:8c:a5:61:bc:b9:
96:a4:a9:82:0b:19:07:f7:41:65:1f:01:dd:82:95:21:af:d9:
07:5a:12:5a:58:92:d4:36:97:65:cc:3f:36:b6:77:a9:34:62:
f7:73:50:58:e2:2a:88:23:0f:b6:a5:df:27:d0:7d:8d:7f:ee:
11:47:6f:50:7d:89:e3:84:40:78:ae:c3:e5:b9:54:3c:f3:cd:
a4:0e:7b:f5:bf:d6:fa:85:6b:84:04:47:24:19:00:6d:5d:d3:
2a:cb:a4:53:d5:44:0a:36:e9:6d:15:04:07:19:bb:c7:60:c6:
c5:10:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:18 2025 by rpki-client