Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: qfe886ncSeRpo1lXhzY13avhkXT99VWz+rHHVrba0wg=
Subject key identifier: 63:20:F0:DE:6E:6F:8E:66:AD:E3:66:88:7B:3C:33:3E:0B:0F:C0:1F
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 01977F7AA29898F76E1D62FA8DE21BFE49A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 0347
Signing time: Tue 17 Jun 2025 20:00:32 +0000
Manifest this update: Tue 17 Jun 2025 20:00:32 +0000
Manifest next update: Wed 18 Jun 2025 20:00:32 +0000
Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: +DP2OiJAEkX4WgwiEgp6gDmVYn6EGb4lvybb+SPRg/k=)
2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7a:a2:98:98:f7:6e:1d:62:fa:8d:e2:1b:fe:49:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Jun 17 20:00:32 2025 GMT
Not After : Jun 18 20:00:32 2025 GMT
Subject: CN=6320f0de6e6f8e66ade366887b3c333e0b0fc01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:1f:60:0b:af:1c:e6:ea:61:0a:ef:65:05:
10:5a:45:3d:ba:d7:9e:1d:44:da:b2:cf:39:d6:45:
47:46:5a:da:75:54:e0:a3:2a:95:75:d9:6a:8f:e4:
28:4f:79:97:a7:c8:8e:2d:8f:a1:33:36:a3:ca:07:
fe:99:25:ee:9d:a0:db:5c:02:9b:98:c3:9d:d7:26:
8f:1e:94:5c:f1:c1:4d:0f:af:70:cf:fb:da:6a:62:
05:e9:93:b5:1a:2a:cf:52:f5:d6:6a:0e:d5:b1:a0:
ab:4b:bd:56:da:03:f4:fc:c2:5a:ea:00:22:06:5b:
ed:06:2c:6d:23:e7:45:af:28:c4:0f:8b:8e:fc:c7:
75:5d:cd:f3:91:04:d1:6a:c3:fd:06:7e:bc:eb:ff:
15:5c:0d:cf:6e:7c:34:85:46:1f:85:fd:90:bd:60:
e7:f6:00:1b:46:54:c1:18:d9:d2:63:3f:92:a3:26:
6b:94:ee:ba:e3:3f:a3:d7:e2:30:45:64:05:7f:a0:
e4:62:52:a4:eb:6e:26:6a:40:1c:3f:87:a7:e8:c1:
ad:52:13:71:ee:9c:38:35:d5:b1:d5:d1:e1:17:65:
a0:91:e4:fc:89:40:6f:09:f1:b0:bc:af:14:1b:38:
15:18:02:e3:6e:60:84:44:e5:02:e1:e9:bc:6b:bf:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:20:F0:DE:6E:6F:8E:66:AD:E3:66:88:7B:3C:33:3E:0B:0F:C0:1F
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:02:35:55:53:e8:08:e1:9f:97:c7:c5:53:27:c3:da:2e:b8:
61:56:cb:1e:4d:34:70:eb:15:2f:cf:bc:a3:0e:3a:01:6d:2a:
79:93:79:31:dd:d9:79:97:01:68:be:b7:f4:07:11:4f:cd:b4:
74:52:90:4b:27:5a:22:cb:77:b5:9e:14:bc:42:8c:19:11:e1:
65:7e:4d:1e:ed:c6:3b:f5:96:3a:a9:a7:6e:de:a4:97:ce:33:
bd:03:1c:04:2c:60:53:f4:18:c6:90:c0:5f:57:7f:36:c4:6a:
23:bd:58:f7:e1:94:5e:cb:0f:96:d4:d2:99:88:ca:c7:a1:f7:
9f:d0:f7:60:dd:f2:07:99:3a:26:45:ea:f8:06:2d:80:f9:73:
48:84:b4:e6:13:dc:e1:48:48:bb:bf:cf:0e:9b:0f:6a:bf:6a:
f6:4e:0b:28:44:d8:dc:b9:92:c9:28:87:2a:f1:95:01:34:84:
a2:68:a8:a7:6f:dc:35:3c:81:51:a8:ce:b7:0e:05:e7:52:fa:
8f:06:e4:54:cc:de:79:2b:cf:83:da:ad:22:e9:cb:8a:c1:4d:
9a:1f:3f:3a:48:4c:39:80:1a:51:51:e7:a3:a5:96:34:c0:cb:
04:a8:cf:9b:4e:28:83:51:0c:ba:ba:2e:53:1e:9a:d6:4d:de:
8e:57:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:42:57 2025 by rpki-client