Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: E4tAf+o1vTs6/9mmtRdmRsKpLGH6CGpFP8ZXuDWNmRA=
Subject key identifier: B3:1E:3F:18:3F:E1:52:9A:19:2A:49:DE:8A:6B:F7:3A:C1:21:89:43
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 0199FC58DA9DF00D66108573CE0885242B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 052A
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: Yu3nVp_WWr5rQyGcfYxK17BtrSs.roa (hash: M4mKyUa72k/PIr9xnS+2MIsnuRBDrxvVblz52TMfwf4=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: evHGcH3QE5YezRKUMMbQk74uE7zwsjk7rowRmePKmZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:da:9d:f0:0d:66:10:85:73:ce:08:85:24:2b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=b31e3f183fe1529a192a49de8a6bf73ac1218943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:0d:28:d9:35:71:7e:ef:67:5b:4c:ba:3f:
7f:05:02:3a:23:f1:7d:ab:f1:e2:fa:cd:94:83:90:
43:c0:37:a2:b1:1a:a5:ac:82:05:3f:4c:63:82:71:
f5:5f:df:95:de:bc:a3:65:52:07:2c:0f:09:53:48:
09:b7:2b:b8:b4:bd:2a:06:de:c0:d3:95:70:9f:ef:
69:5d:c3:48:fe:dd:19:7f:d5:a8:e0:be:75:de:1a:
5f:8d:ae:98:eb:93:d3:76:01:85:c9:d7:1c:89:72:
e7:41:f5:17:8a:5e:84:7b:d9:df:28:36:37:7b:11:
f2:3b:e2:6b:fd:3f:b0:c6:2f:a4:28:ae:b1:e2:fc:
d8:3a:d0:7f:9e:56:6a:16:46:df:b7:2d:0c:ef:27:
b6:6d:90:d5:f4:6b:b7:e7:2c:03:00:db:ce:41:66:
77:15:95:b5:17:56:64:45:0f:e1:48:f8:04:5d:7f:
10:ff:9a:d5:00:e6:80:2c:3d:f8:c9:bb:7c:f3:57:
d9:4b:e1:1a:ac:ad:1a:5f:38:5a:d9:f2:76:fe:bc:
90:30:05:25:b2:47:1e:5a:27:86:44:b1:85:a5:1a:
c6:12:f3:9f:7f:20:61:4d:ff:24:e1:5b:bc:39:6c:
19:5d:b9:00:42:cf:5c:fb:e3:6e:bc:2d:e5:ff:f1:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1E:3F:18:3F:E1:52:9A:19:2A:49:DE:8A:6B:F7:3A:C1:21:89:43
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:bd:1e:18:cb:99:29:01:82:80:1d:9d:99:07:6e:92:49:
a1:a0:41:2f:fb:71:0a:9d:60:f1:9f:e7:6b:ef:f6:75:69:04:
56:ee:38:1f:6a:c3:a9:c4:b0:20:32:0c:5e:b4:9d:84:30:0a:
75:3d:62:c4:03:e1:c1:53:33:8c:5a:ca:ef:f7:fa:26:64:f6:
28:cd:73:cd:3b:0c:50:12:e3:c3:a8:f5:08:ac:5d:69:cb:66:
00:fc:c4:e1:51:f2:ba:0d:1e:5b:68:8b:ef:aa:82:1e:3b:d3:
36:4a:92:12:a1:0d:50:d7:04:1b:b2:91:97:14:06:8b:27:3d:
8c:1d:16:98:12:a9:99:52:61:8e:ec:0b:8a:88:ad:d0:ef:3d:
61:c0:a6:9b:89:5d:28:59:86:5b:2e:74:f0:87:48:31:fc:2f:
82:5c:49:67:fc:ed:c6:6f:e0:e0:ff:00:c0:50:c1:6f:2b:5a:
f0:06:ad:86:7f:c5:32:8c:4d:46:dc:c9:cd:15:cb:f4:ba:df:
f5:d6:90:fb:97:ad:20:87:c6:75:74:48:54:b4:99:31:31:c7:
3d:50:1e:10:2e:28:51:3a:95:39:4b:a2:17:2f:20:3b:78:72:
5e:be:33:e5:23:82:6a:5d:fc:96:68:f1:8c:2e:89:3e:4a:6d:
85:63:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:37 2025 by rpki-client