Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: Cb6sSIlA/NkU4wkCaXSbkG5Fame0weR9tFfpSShqchw=
Subject key identifier: 2B:7A:B8:BD:13:AC:BB:4E:84:76:F2:F3:07:E7:66:D0:60:FA:DD:D3
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 019A4DAAA18684760F1CFFBFB5D2F34A5623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 1454
Signing time: Tue 04 Nov 2025 07:00:19 +0000
Manifest this update: Tue 04 Nov 2025 07:00:19 +0000
Manifest next update: Wed 05 Nov 2025 07:00:19 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: IeziS4sChh1kn4NBFedjSHxs6+oYvSZJViW35v2+Trc=)
2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a1:86:84:76:0f:1c:ff:bf:b5:d2:f3:4a:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Nov 4 07:00:19 2025 GMT
Not After : Nov 5 07:00:19 2025 GMT
Subject: CN=2b7ab8bd13acbb4e8476f2f307e766d060faddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:69:2e:b8:9f:b1:df:20:38:32:39:2b:1b:
aa:d1:3a:cd:cf:65:a7:3b:23:ea:5b:f7:1a:6d:49:
c2:e5:77:e4:7e:5e:48:7e:56:72:fb:a8:ca:fe:a9:
52:eb:cd:c8:07:dd:32:2d:92:28:3d:f6:91:f4:66:
36:99:40:b2:4d:28:ac:93:b9:8b:09:7d:a3:4c:b0:
41:ee:ff:f1:5f:f9:5c:5f:e5:91:c4:55:a9:88:fc:
ee:b9:95:81:5a:34:17:5b:34:a4:e9:86:bf:5b:14:
74:e1:20:93:f4:24:e1:97:6f:50:d2:4c:43:05:99:
4a:14:96:92:4c:35:37:15:7c:ad:ec:12:fc:f0:94:
a2:3c:ed:99:8a:f0:1f:e8:cf:9e:62:4f:f3:ac:f2:
fa:9e:de:c2:6c:09:4e:e7:a3:ec:20:b8:b1:6d:90:
46:d2:92:0a:4b:73:dd:22:55:02:cc:30:57:69:a1:
34:d5:37:69:12:b6:8c:ae:f9:a8:3a:1e:59:bc:d6:
91:e6:6e:cf:8f:27:1c:10:c9:2f:c4:72:33:2a:79:
a2:55:24:65:31:a6:6e:a2:ff:cd:75:7a:a4:6c:22:
18:67:29:5a:53:68:e6:ed:51:1b:2a:8c:27:e1:9f:
a1:76:28:47:e6:32:57:66:5b:9f:1b:c4:b5:d8:a6:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7A:B8:BD:13:AC:BB:4E:84:76:F2:F3:07:E7:66:D0:60:FA:DD:D3
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:21:3f:4b:9a:50:f9:38:36:a9:e1:5d:2e:b9:53:fc:e9:25:
60:13:43:f2:29:71:62:f1:3f:7c:ff:35:db:43:9a:4b:67:30:
5c:af:4b:5b:d3:02:d1:13:4c:e1:ce:98:0a:5e:c8:b2:e7:13:
c4:e3:62:63:0b:c4:97:b2:38:10:ed:5f:0a:5c:a4:01:66:e0:
11:f9:cc:4c:16:10:42:9d:8c:43:b0:ad:d1:c2:36:ab:9b:09:
7d:05:a4:19:60:ea:d0:20:be:2e:c0:f9:c7:86:d1:38:85:9e:
22:bc:87:4b:a4:c0:0a:7a:d5:e0:5d:a5:15:5b:d0:d2:4d:3d:
d4:42:ab:c2:a5:8a:aa:a1:e6:c1:b2:dd:06:d6:0c:b7:65:09:
0f:86:fd:82:1f:bd:e0:4e:96:f5:8f:91:76:ef:b0:9e:14:25:
10:71:2e:b9:0c:01:07:72:19:81:e2:88:4f:98:fa:fe:a9:74:
d7:a8:87:b8:2f:47:91:75:71:fb:55:fc:95:b7:04:16:20:a1:
24:12:d9:2a:2c:0f:52:d4:18:5a:8b:08:ec:77:ee:f5:19:78:
e9:83:0e:83:f9:14:65:3c:b9:43:22:3f:c2:b4:d6:19:f4:a4:
04:0e:8d:32:05:a7:fa:80:42:85:21:d8:b6:13:d7:82:51:4b:
07:68:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:10 2025 by rpki-client