Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: FzHQ4t9dMN7ylo8Z/7RoR1fFnRCc5H/ozasHzS6KK68=
Subject key identifier: CD:72:23:E3:4D:E5:0E:4C:C5:88:BD:E4:D4:A3:6C:62:93:5B:54:BC
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 01987486902356079CBA36014D69A2EE7C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 135F
Signing time: Mon 04 Aug 2025 10:00:32 +0000
Manifest this update: Mon 04 Aug 2025 10:00:32 +0000
Manifest next update: Tue 05 Aug 2025 10:00:32 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: wb3JvVeaaihc6sT2z+Mb25eKFiWOFUUDfVkp3OP1YXE=)
2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:90:23:56:07:9c:ba:36:01:4d:69:a2:ee:7c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Aug 4 10:00:32 2025 GMT
Not After : Aug 5 10:00:32 2025 GMT
Subject: CN=cd7223e34de50e4cc588bde4d4a36c62935b54bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:93:e4:dd:0a:c6:b1:ec:0c:69:f6:7d:eb:
56:46:b0:61:5b:1a:21:a7:6a:60:a1:75:c9:1b:48:
22:2c:01:1f:ae:73:ef:f4:bf:6c:97:82:f1:08:5c:
22:94:79:ad:0e:e3:3f:e2:6e:ca:30:1d:7a:e2:d6:
d1:58:7a:30:d0:fb:a0:71:ed:5f:cb:07:ec:03:72:
c9:77:50:a4:1e:14:e6:b4:3f:5c:05:89:8f:ef:09:
43:d7:1a:3a:61:79:e0:7d:fd:ed:a2:3f:5b:c5:75:
21:c0:55:39:98:32:28:39:3b:8e:ea:65:83:cf:76:
73:d8:4b:59:86:b0:99:79:32:24:5c:75:ba:c9:c4:
7c:b5:88:72:5d:0c:8f:cb:1a:17:d7:32:7e:7d:fe:
c2:ff:6e:c0:7d:52:a8:e2:87:65:cc:93:b7:60:63:
a6:7a:62:c0:46:a5:38:7f:ea:fc:ee:0e:fc:b3:e4:
90:75:2c:24:30:da:5a:c3:38:b1:ab:dc:5c:61:55:
59:cb:d1:65:bc:eb:a5:4e:3b:1d:fc:83:42:b2:25:
c0:43:86:9e:01:42:de:6e:a6:78:67:32:8f:02:03:
83:cf:58:ef:ca:83:0b:42:de:79:de:3d:96:cb:00:
77:a2:7d:eb:51:d2:7b:5e:02:93:58:a9:e3:10:79:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:23:E3:4D:E5:0E:4C:C5:88:BD:E4:D4:A3:6C:62:93:5B:54:BC
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f5:c8:71:25:76:da:f0:d9:72:3e:15:98:6a:63:73:2b:79:
7e:5f:28:bf:6d:b0:e8:f7:2a:7b:3b:1f:0a:12:6f:62:ed:6c:
e0:43:c6:d2:b0:75:c0:da:35:ee:71:b1:ae:32:a0:ed:54:d0:
53:2f:e2:a5:7c:f0:32:00:e1:0e:62:2c:4d:b5:3a:cc:fa:99:
51:ec:d3:ad:96:0d:b7:59:52:85:ef:52:be:7a:a1:77:06:0b:
02:77:09:88:4b:48:22:95:22:14:3b:ae:36:2f:73:7e:19:23:
de:38:ba:63:1b:7d:b2:53:fd:24:da:43:50:8b:51:86:d9:0e:
a4:10:b9:ef:73:a5:59:fb:0b:e5:e7:76:7a:83:5a:db:94:25:
f0:43:40:4d:09:0b:3c:75:3a:a6:37:d3:40:e3:2c:4f:bf:5b:
95:bf:15:77:75:72:05:33:cb:f6:72:bf:50:6e:3e:1b:b9:c5:
d6:d7:be:50:7c:65:f2:93:7d:a5:03:1a:1b:e2:90:ff:f9:2a:
94:dd:74:99:a7:fb:93:42:3d:13:c8:a3:70:fe:d0:07:20:96:
e1:1f:de:7e:f9:81:b6:c2:c9:2e:24:ad:83:19:6f:f0:3f:7f:
88:af:e3:1a:08:5a:0d:81:dd:f1:f3:18:99:8e:8e:16:0e:5f:
77:0a:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:09 2025 by rpki-client