Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: 6erR5PoJX7w4S8qBuI8GX56LpnXldOlCkEUKMbFWow4=
Subject key identifier: 5C:07:72:EF:65:13:3A:DF:6F:2D:FE:27:50:96:91:18:A4:42:A4:80
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 0198D5F1D402FF9D4B8EF366D727D7684970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 1492
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: KAvgnoyGQr+4FjjhzrVtHePKvt6d4Dctruxij5IycKA=)
4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d4:02:ff:9d:4b:8e:f3:66:d7:27:d7:68:49:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=5c0772ef65133adf6f2dfe2750969118a442a480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:a7:ba:81:b0:be:2d:80:04:f6:81:02:4a:
6d:bb:9d:f1:9e:3e:92:81:28:98:bf:4b:8b:90:2d:
02:fa:db:89:86:33:d2:82:5f:1f:15:05:2f:49:8c:
1a:ee:3f:2d:b9:92:63:26:33:d1:f9:6f:f9:fb:8c:
05:d5:e0:27:b2:8d:36:d5:f1:8f:3a:fb:03:59:33:
0a:42:ce:02:3e:9d:ec:b7:13:75:68:8d:45:88:b2:
3f:9a:2f:ab:c1:ab:5f:d2:56:51:6d:39:f7:9f:fd:
d5:5f:c6:e1:45:75:8e:fb:72:b9:44:69:27:0b:c5:
db:37:06:7c:10:c7:f6:05:18:5b:2d:e5:7b:b9:6f:
9d:15:0a:e9:ab:b9:a7:33:b0:57:35:33:9c:73:3e:
47:49:4f:eb:2f:cf:5a:2c:67:7f:4b:30:ff:75:fe:
47:a7:72:b2:f0:b6:33:1d:3a:91:3e:58:15:8f:b9:
5b:ab:3b:d3:d4:10:20:c5:7e:17:ee:f6:f2:69:fe:
a7:f4:5c:89:f0:52:24:b1:eb:b7:ed:c8:f1:5e:0c:
1a:a2:a8:16:45:c1:2a:b2:3e:f4:0f:ea:b5:fa:53:
78:29:98:70:35:e5:6f:78:2d:3d:aa:71:c6:22:f2:
c6:8e:8d:47:26:e0:34:3a:98:b4:7e:51:75:d0:6e:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:72:EF:65:13:3A:DF:6F:2D:FE:27:50:96:91:18:A4:42:A4:80
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9e:53:fb:db:35:4e:74:c0:db:58:9d:a9:46:96:07:ba:90:
0e:9d:09:d5:b7:9a:b5:74:0b:58:f2:f4:8e:08:b5:bb:d6:8d:
03:1e:6e:fa:36:57:ab:38:cd:21:c5:a9:da:57:51:10:10:b9:
2a:b2:da:a2:6b:f9:ec:cf:5b:a2:cf:f1:73:44:9f:93:0d:23:
09:de:d2:ee:6e:64:15:db:b5:00:e1:fc:0e:80:31:19:27:d1:
93:3b:52:6a:7e:00:a3:f4:00:e8:40:71:f5:d7:23:e0:c8:d0:
da:43:61:38:7d:96:80:3a:59:ea:c1:73:5c:cc:0b:b5:40:cd:
96:ff:6d:e7:6c:dd:d8:1b:d0:5d:5b:e6:c4:b9:c6:aa:27:1d:
a0:d0:ab:e7:32:c8:8d:90:a8:ed:cb:4f:f9:05:6d:d9:d6:f0:
0b:c8:08:91:b7:06:41:b0:07:5e:9b:06:aa:31:6f:15:8f:ea:
9f:67:e8:1d:e6:78:96:ca:2c:1a:fd:22:3c:62:12:1b:50:e5:
f6:5f:7f:d2:89:0a:d9:ed:1d:39:f1:2c:93:1c:29:f6:b8:71:
16:5d:e4:71:dc:c5:8b:12:de:48:4f:e4:1d:04:1b:fc:e9:f4:
7e:59:f1:57:57:80:77:98:5e:58:cf:7d:03:56:f2:b4:7b:4a:
52:d0:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:29 2025 by rpki-client