Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: ryWLYJFXH6FDhMjHxBImOhRUIwLac3XGK9zzcbtYlMk=
Subject key identifier: F7:C0:33:91:DD:F4:EC:25:6B:95:9B:5E:87:C8:64:1F:8A:6E:B3:36
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019A5007476089E86742B00CBC1A2538659C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 06D1
Signing time: Tue 04 Nov 2025 18:00:45 +0000
Manifest this update: Tue 04 Nov 2025 18:00:45 +0000
Manifest next update: Wed 05 Nov 2025 18:00:45 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: GrU0vSPXqwJi8eeR+ok3JRW+Mz0l5ZRrsa81ylayBqw=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:47:60:89:e8:67:42:b0:0c:bc:1a:25:38:65:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Nov 4 18:00:45 2025 GMT
Not After : Nov 5 18:00:45 2025 GMT
Subject: CN=f7c03391ddf4ec256b959b5e87c8641f8a6eb336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:4b:cb:9f:6a:d1:69:48:71:b9:3a:5d:16:
b1:d6:50:5e:05:ac:6d:cf:04:5b:46:7f:aa:c2:08:
98:80:5a:76:e3:8b:e2:a9:9e:d3:7e:60:c8:1e:94:
dc:42:4b:df:5a:41:68:50:ee:70:00:75:84:1c:ba:
49:b3:d0:68:19:75:e7:dc:65:b4:0b:cd:4a:12:43:
5c:fa:1d:63:b1:1f:cd:02:c9:7d:92:4b:d3:43:1a:
81:41:92:b8:ce:36:c3:fc:eb:5b:86:31:fb:e4:c3:
4f:43:bb:de:54:d7:11:63:66:32:27:29:a3:3d:31:
9d:8a:7c:08:e4:79:b6:fb:49:e4:0a:6e:6c:31:70:
9d:d5:d7:54:a3:52:4f:c6:b4:6d:47:ba:c1:b1:fc:
04:00:db:87:c8:df:8f:6a:9c:76:b5:60:29:da:39:
8a:e0:5c:30:76:fe:05:64:d1:47:d1:64:aa:46:5f:
67:21:98:13:df:47:84:3b:1a:13:1a:e7:5f:7a:29:
77:b5:92:80:8c:28:af:8e:be:6a:e9:a0:e8:5a:e6:
00:f6:86:1d:e2:3b:b9:7b:6d:3f:2e:ff:c0:7a:ca:
7c:f9:27:d9:36:6b:e2:20:97:7e:3d:99:14:2d:96:
32:ae:03:5b:76:e6:27:32:75:3a:86:23:07:11:fb:
b8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C0:33:91:DD:F4:EC:25:6B:95:9B:5E:87:C8:64:1F:8A:6E:B3:36
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:60:68:03:ac:12:14:a6:29:3b:1a:7e:5e:e7:0c:67:45:2c:
d6:91:f1:fd:d9:24:bc:26:a5:bc:f1:36:38:15:6d:2f:a5:9c:
ab:8a:cb:72:c1:74:85:b2:1d:97:b2:88:a6:66:7b:79:c8:d0:
e5:24:0f:65:29:f7:1d:c0:a2:90:16:55:73:d6:cb:2d:c0:b7:
18:7d:64:63:6d:9e:c2:23:90:93:0e:37:d5:8c:cb:4a:fc:4d:
7b:ae:8c:68:0c:44:74:d4:08:86:81:13:c0:4e:33:7c:cf:ee:
7f:e7:6b:b9:87:95:75:bc:ee:58:ed:e3:56:76:4f:ea:13:fe:
1b:a0:80:dd:e0:db:60:e7:0b:36:79:aa:be:e4:93:b6:27:78:
8a:d8:e7:14:b2:bd:65:7a:0d:00:c2:d9:30:af:3d:e7:3b:6c:
0a:67:4f:40:60:d0:04:b5:43:65:ab:3a:83:9a:ac:74:b1:bf:
17:4f:9a:b3:04:c4:e2:4b:e6:43:87:b1:b0:72:7f:64:1a:1f:
0e:5a:ad:f7:06:1e:15:16:71:53:91:58:ed:4c:64:fa:08:50:
21:f1:3e:a7:ff:e0:3d:16:34:e3:e0:cb:48:43:a7:4b:e8:30:
3d:6f:89:79:ac:a3:48:24:0e:b8:7a:8a:a9:b2:d8:0e:0a:e6:
15:f2:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:26 2025 by rpki-client