Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: J+jAhBsdTK3Jw9peDvkEEmzLIYK9eKpDB8if4AfnjKY=
Subject key identifier: EE:E1:F4:08:ED:1B:BE:DB:58:D5:7C:AE:D9:7E:43:E5:22:E4:2F:AD
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 0198D6CDCE06B8C3699600D0658E1B826F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 0492
Signing time: Sat 23 Aug 2025 12:01:08 +0000
Manifest this update: Sat 23 Aug 2025 12:01:08 +0000
Manifest next update: Sun 24 Aug 2025 12:01:08 +0000
Files and hashes: 1: Yu3nVp_WWr5rQyGcfYxK17BtrSs.roa (hash: M4mKyUa72k/PIr9xnS+2MIsnuRBDrxvVblz52TMfwf4=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: Xh3Q5mfuqlzcGlESwgb5MmMsChOp6NscuBgoRAO0EYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ce:06:b8:c3:69:96:00:d0:65:8e:1b:82:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Aug 23 12:01:08 2025 GMT
Not After : Aug 24 12:01:08 2025 GMT
Subject: CN=eee1f408ed1bbedb58d57caed97e43e522e42fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:de:75:fc:02:27:7c:af:35:e9:9d:11:de:
82:f0:ee:a7:51:e1:81:b3:00:47:ca:5a:79:97:ae:
27:b8:e4:bd:6c:cc:b7:c5:43:08:40:c3:79:4f:d1:
a9:b7:03:3d:ba:9f:57:6b:94:62:cb:f9:eb:9c:8f:
7d:78:e9:3b:50:01:9e:7a:25:3a:62:cd:77:41:a0:
0b:de:3e:c5:65:b7:0f:37:e5:bd:61:e6:bd:97:64:
ae:63:ab:58:e0:9d:66:ae:54:d9:8f:23:ce:20:15:
2d:93:1c:8e:98:ca:ac:4e:7e:2b:7c:e6:b4:a2:98:
88:02:d6:77:aa:4f:a0:23:9e:6b:fa:2c:1a:9f:d6:
8d:70:78:e6:da:fb:45:c2:6f:bd:f5:d4:1e:73:5f:
52:8e:5f:60:3c:4a:a6:11:6f:47:d2:5c:d0:33:61:
68:c3:04:30:86:2a:42:1d:56:eb:1e:7d:77:7a:98:
81:fe:e4:e3:85:20:23:8e:08:82:9f:e2:04:3c:bd:
fd:4e:8e:b4:0d:5f:b4:c1:d8:7c:82:48:a5:0d:85:
ff:31:56:f0:5a:08:7e:90:30:64:d8:ad:f5:ba:d9:
b9:4e:fd:af:2b:ba:12:a2:01:8e:08:38:71:b1:8b:
27:79:57:9c:cd:23:43:4d:f9:15:ac:b1:fe:fd:5d:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:F4:08:ED:1B:BE:DB:58:D5:7C:AE:D9:7E:43:E5:22:E4:2F:AD
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:a7:b2:db:42:22:f4:f4:1e:bd:93:a3:44:47:11:10:1d:
42:b6:e5:19:a0:ac:11:dd:b0:35:19:d3:5a:da:9c:e8:49:ee:
70:83:df:26:f5:51:10:85:7e:b0:d0:35:cb:d1:88:32:69:21:
81:86:a7:06:85:70:f6:bd:a9:eb:94:45:0d:77:28:95:9b:2f:
85:9e:7e:a2:a1:32:f4:a5:cf:46:07:9e:a1:b6:22:bc:60:78:
0b:27:d8:2e:0b:9a:3f:f7:40:ff:8d:cb:60:7f:fb:ef:3d:44:
28:04:c9:46:9c:d8:72:c1:25:4e:ad:3c:31:bb:db:1b:b4:ff:
b0:1a:58:7d:9b:cd:0a:4f:44:b9:f1:e6:aa:f1:15:b6:5d:46:
47:e2:6d:eb:56:bc:20:13:a8:52:49:d6:34:20:fe:63:08:3d:
50:6a:90:fb:15:ab:f6:8d:2b:08:6a:91:fe:4b:2b:2d:1d:73:
cb:45:27:56:e8:f2:96:98:31:3a:c2:49:56:87:c9:0c:9b:19:
4e:73:46:47:a0:48:76:99:59:65:8b:c7:cb:a8:67:c5:68:03:
9b:dd:e2:10:d2:db:dd:6b:3d:6e:07:a9:0a:0b:7c:dc:f5:53:
53:f6:de:36:da:ac:89:9d:73:2a:c0:25:52:d4:83:d1:de:af:
16:43:e7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:03 2025 by rpki-client