Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: /13Qfa3gUygb7MVjXvMsVKj49rB0i28GWOwhxrcIzIo=
Subject key identifier: C6:86:E2:82:C0:A2:27:6E:68:60:12:42:7E:F8:66:4F:5B:65:AF:B1
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019880C1F52CFFE140DAD93DCF90517F52A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 05E1
Signing time: Wed 06 Aug 2025 19:00:51 +0000
Manifest this update: Wed 06 Aug 2025 19:00:51 +0000
Manifest next update: Thu 07 Aug 2025 19:00:51 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: Ovc8DCC8MWp5IhDnMIAzdTyzlrslh74tvnBM8Ji0pDI=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:f5:2c:ff:e1:40:da:d9:3d:cf:90:51:7f:52:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Aug 6 19:00:51 2025 GMT
Not After : Aug 7 19:00:51 2025 GMT
Subject: CN=c686e282c0a2276e686012427ef8664f5b65afb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:3c:0b:3e:3b:f9:5c:cc:66:b1:4b:46:ec:
56:8d:3b:ce:6f:e9:f9:a7:6e:e9:e6:ea:1d:a1:67:
e5:7c:3b:f3:1b:fe:06:7e:6b:27:bf:39:af:4c:42:
b0:a8:27:b3:d0:22:61:28:ea:c0:fc:24:77:ba:da:
a0:42:54:ea:cb:cf:f2:8d:26:27:8f:1c:41:25:52:
56:9e:0f:b7:85:03:79:d5:ed:41:1a:81:58:9a:16:
b7:d5:19:41:0b:44:95:f2:1d:0b:81:d7:47:1e:09:
7c:70:95:c5:0b:d7:63:09:e4:7a:13:06:04:66:58:
ac:cb:2a:a6:92:4e:04:db:cb:ec:de:c4:04:10:dd:
12:c9:29:f3:c4:d6:c2:16:92:4e:3c:c8:64:49:f1:
6e:93:5a:20:27:f7:94:42:ec:c4:6c:f1:ef:84:80:
8a:4b:36:a9:24:a1:8f:9c:68:c5:d6:84:04:69:51:
54:ec:81:7c:22:20:78:57:72:42:f0:48:69:26:1a:
1a:22:a2:57:80:bc:58:9b:ac:53:f6:2a:ed:ca:73:
a3:34:ee:e2:4f:e5:f1:8a:0f:c6:44:ad:ad:fc:38:
32:0e:d7:f2:13:07:7a:c8:b6:34:98:ea:b7:8d:c9:
21:f4:d9:1f:33:a4:7d:a4:44:8e:51:9f:7a:e6:1a:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:86:E2:82:C0:A2:27:6E:68:60:12:42:7E:F8:66:4F:5B:65:AF:B1
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4a:f8:f6:f5:81:a4:df:c3:79:6f:1a:d7:aa:48:d8:70:cd:
4c:cc:eb:0a:15:71:1f:26:06:0b:12:a8:92:e9:64:87:06:26:
fb:33:08:39:80:4d:fe:f3:5e:3e:cc:df:fb:73:44:74:ea:46:
28:e8:a8:76:28:d9:77:89:70:16:5b:1c:8e:40:a3:91:55:3c:
3e:77:14:f2:c8:6e:cf:29:f0:d3:f7:cc:c1:dc:d5:64:2a:f0:
41:36:52:08:0c:0a:68:27:75:e0:e8:48:7a:3e:48:2f:9b:30:
9a:bf:2d:b7:11:a9:23:0a:b2:66:75:f0:2c:33:73:a7:81:f1:
a8:50:b7:ae:d2:18:8b:49:f7:c9:53:33:3f:9b:18:fc:60:30:
99:e8:e3:bf:5b:bc:04:f1:e9:85:d2:4b:c0:8b:96:b4:b3:d9:
99:f1:ff:88:e6:30:03:5c:3b:41:0b:88:7c:39:5a:23:65:35:
f8:18:e3:57:48:c4:9b:2c:81:08:b7:57:7d:df:e0:9f:c9:ad:
5f:df:2d:fa:af:fb:f2:8a:71:a9:b9:4d:ad:e7:98:17:1d:5e:
58:86:f6:d8:6a:10:06:a1:9b:fa:86:a5:f1:fd:76:6d:05:24:
b1:83:de:12:38:76:80:d3:71:c4:eb:68:ba:ce:bd:9f:08:f8:
64:e6:0b:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwfUs/+FA2tk9z5BRf1KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj
ZjJlODEwHhcNMjUwODA2MTkwMDUxWhcNMjUwODA3MTkwMDUxWjAzMTEwLwYDVQQD
EyhjNjg2ZTI4MmMwYTIyNzZlNjg2MDEyNDI3ZWY4NjY0ZjViNjVhZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSI8Cz47+VzMZrFLRuxWjTvOb+n5
p27p5uodoWflfDvzG/4GfmsnvzmvTEKwqCez0CJhKOrA/CR3utqgQlTqy8/yjSYn
jxxBJVJWng+3hQN51e1BGoFYmha31RlBC0SV8h0LgddHHgl8cJXFC9djCeR6EwYE
Zlisyyqmkk4E28vs3sQEEN0SySnzxNbCFpJOPMhkSfFuk1ogJ/eUQuzEbPHvhICK
SzapJKGPnGjF1oQEaVFU7IF8IiB4V3JC8EhpJhoaIqJXgLxYm6xT9irtynOjNO7i
T+Xxig/GRK2t/DgyDtfyEwd6yLY0mOq3jckh9NkfM6R9pESOUZ965hqalQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaG4oLAoiduaGASQn74Zk9bZa+xMB8GA1UdIwQY
MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt
M2FjYjgxNDkwNGEwLzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw
LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUr49vWB
pN/DeW8a16pI2HDNTMzrChVxHyYGCxKokulkhwYm+zMIOYBN/vNePszf+3NEdOpG
KOiodijZd4lwFlscjkCjkVU8PncU8shuzynw0/fMwdzVZCrwQTZSCAwKaCd14OhI
ej5IL5swmr8ttxGpIwqyZnXwLDNzp4HxqFC3rtIYi0n3yVMzP5sY/GAwmejjv1u8
BPHphdJLwIuWtLPZmfH/iOYwA1w7QQuIfDlaI2U1+BjjV0jEmyyBCLdXfd/gn8mt
X98t+q/78opxqblNreeYFx1eWIb22GoQBqGb+oal8f12bQUksYPeEjh2gNNxxOto
us69nwj4ZOYLMw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:31 2025 by rpki-client