Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: I0ARYoLCxuCROuQffIxRtO+mDmcJqBRnpLgaUpM8hjY=
Subject key identifier: 96:C7:61:3E:BD:16:36:9B:9A:F1:67:55:C7:27:6E:38:F4:40:F9:56
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 01987B9B7A3F65D667178104F2FD280D9FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 0C83
Signing time: Tue 05 Aug 2025 19:00:43 +0000
Manifest this update: Tue 05 Aug 2025 19:00:43 +0000
Manifest next update: Wed 06 Aug 2025 19:00:43 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: WD0NhLX42AIWyB3CQlR6YBChv706d7XnluOO2XTJgkA=)
2: GWHlXKm0sM09h00CHS4OA90ZDEo.roa (hash: nINowmfDfKGL1Tvt7j8uTMeqVpzK8gUstL889w0cG50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:7a:3f:65:d6:67:17:81:04:f2:fd:28:0d:9f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Aug 5 19:00:43 2025 GMT
Not After : Aug 6 19:00:43 2025 GMT
Subject: CN=96c7613ebd16369b9af16755c7276e38f440f956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:0a:9c:14:0a:71:cf:d9:4e:b4:57:bc:5a:
57:1b:cf:95:42:b4:89:71:35:77:27:62:d0:ba:f1:
13:62:4f:d6:b4:0a:cd:5a:fd:a4:14:9b:f2:c5:02:
b4:80:15:09:81:f4:42:e5:8a:0e:31:24:a0:ed:e6:
51:a6:f0:cc:ae:10:29:13:64:4e:3a:20:aa:36:94:
53:56:2f:58:4a:ad:ea:15:a3:ce:44:f6:30:bc:15:
0a:d9:1a:e8:d0:14:a6:e0:ee:24:41:b3:ea:49:d1:
06:2f:f8:bb:ae:dd:9e:d5:8f:a9:9f:4d:a8:13:6c:
81:79:ac:cd:0e:e9:62:05:ad:a1:6e:0d:c7:67:b2:
db:9a:05:98:95:92:cd:b4:8a:c0:cd:88:7f:6b:d9:
ba:d0:e5:a8:ef:8d:13:0c:bc:cb:18:4a:93:4a:dd:
d3:a4:6d:9d:ae:5b:08:e6:4f:83:d9:ce:a6:10:92:
92:dc:dd:cc:ff:15:31:7a:b9:58:d4:9e:5b:19:14:
c2:df:10:dd:ed:c6:fd:f1:1c:2a:37:6a:4d:62:38:
85:bb:d0:78:57:ee:87:fd:66:55:2c:8c:89:3d:fd:
10:1a:e7:13:64:13:03:ba:b0:20:9f:cd:e2:43:21:
80:1c:59:69:94:00:47:cc:b2:58:38:0d:ec:b5:c1:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C7:61:3E:BD:16:36:9B:9A:F1:67:55:C7:27:6E:38:F4:40:F9:56
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ff:72:68:dd:89:f1:8e:2d:2a:4b:af:ce:6d:92:70:a7:ce:
36:fc:f9:90:2b:36:24:57:28:31:3b:4f:5d:bd:fe:b0:04:c6:
c7:d5:fb:a1:3e:94:28:5d:8f:ab:6f:d8:3d:16:5f:5b:f5:65:
9a:49:90:97:4a:6d:ea:17:cf:d6:b2:8e:18:8e:1c:f3:9b:bb:
29:58:0b:fb:7b:22:52:bd:60:78:59:dd:bf:d4:ee:d3:78:48:
fb:6b:8f:b4:8d:a1:db:6e:32:70:c8:ee:29:ee:ec:ff:bd:a2:
b2:1c:a9:ee:10:f6:62:0d:ea:75:c7:c2:81:28:a4:21:26:0b:
bf:72:b4:f0:ce:c5:26:ea:3e:f4:fe:cf:20:d4:9f:56:1d:0b:
31:74:c3:d2:42:0e:b6:48:8c:06:af:0e:52:39:af:1d:cd:7f:
0a:a4:04:be:ae:81:20:b2:85:ef:28:e6:e9:11:d0:97:ce:15:
a8:2e:d8:39:92:df:e0:00:3b:36:f2:3d:52:3a:03:7e:c8:17:
23:70:40:a4:cc:9d:f0:00:9a:a0:5a:92:e8:61:d7:71:c0:0f:
be:09:17:d1:73:8c:73:8a:52:d6:dd:04:89:ca:90:ac:44:07:
af:18:7c:75:60:92:0e:91:3f:b3:c7:a3:b0:72:32:01:72:0b:
2c:08:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:09 2025 by rpki-client