Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
File: cfxj7vZnTya1A6gwpd-pU9L_qr4.mft (raw, json)
Hash identifier: WCL0d63xYim7CFnUHbvGJ5aspmiBEycBmFtv4ILEcLk=
Subject key identifier: 24:B8:A3:68:83:E9:D4:81:1B:6A:83:7C:C1:4B:AA:88:83:22:10:7E
Authority key identifier: 71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
Certificate issuer: /CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Certificate serial: 01987BD2696D09308DA0833E21F1B9E036FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
Manifest number: 1483
Signing time: Tue 05 Aug 2025 20:00:43 +0000
Manifest this update: Tue 05 Aug 2025 20:00:43 +0000
Manifest next update: Wed 06 Aug 2025 20:00:43 +0000
Files and hashes: 1: cfxj7vZnTya1A6gwpd-pU9L_qr4.crl (hash: 2wlYRBnLGy0mLVcIMNYj4fZZYwFTvzH7aEBzGELN0hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:69:6d:09:30:8d:a0:83:3e:21:f1:b9:e0:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Validity
Not Before: Aug 5 20:00:43 2025 GMT
Not After : Aug 6 20:00:43 2025 GMT
Subject: CN=24b8a36883e9d4811b6a837cc14baa888322107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:12:e9:b9:9e:7c:07:77:d2:05:5f:f0:24:
d4:9e:a2:6e:91:35:ae:b0:00:4f:60:e5:aa:8a:d8:
dc:cd:7d:4a:8b:86:bf:b5:7d:17:34:a8:12:dc:be:
76:d7:37:81:dc:8b:46:23:54:dc:c4:1e:1c:df:f1:
95:56:5d:b1:2f:ea:30:a9:50:b6:ff:82:18:60:90:
70:7b:70:5c:b3:75:90:92:3e:b5:4a:61:da:95:ed:
2d:ba:7b:7a:7a:af:d4:40:4e:84:22:20:db:6e:c0:
8f:79:b9:15:7c:52:a9:6e:db:34:d3:c6:46:23:25:
c3:92:8d:f2:0e:39:88:5c:4d:e1:ac:77:f5:ec:81:
72:76:01:ba:9a:9e:f7:1c:bf:1f:cc:a3:ed:01:ab:
ec:2c:6e:4f:54:ac:e0:54:16:23:94:b1:cb:12:ea:
5d:26:f0:ab:d5:27:91:5c:f6:08:26:20:4d:6a:15:
b3:43:80:76:62:2e:d4:f6:51:32:76:ee:ec:58:9c:
7f:4f:9f:a6:68:60:10:0e:c1:30:f1:62:cd:0c:d0:
37:87:58:b2:23:fb:e1:99:70:da:da:93:2e:2e:30:
89:27:56:7b:2f:d9:b5:a6:7c:ff:8c:5a:68:e0:3c:
f4:81:23:5f:29:db:d1:f0:ca:81:0e:b8:5b:6b:a0:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:A3:68:83:E9:D4:81:1B:6A:83:7C:C1:4B:AA:88:83:22:10:7E
X509v3 Authority Key Identifier:
keyid:71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f8:39:02:09:50:e2:42:9e:8c:8f:66:c3:05:17:34:94:35:
a6:5e:32:1e:99:32:08:06:f2:af:b8:1d:a2:54:53:55:0b:39:
d2:d4:fd:f5:0c:32:f5:8f:41:7e:30:b5:c9:24:17:6a:5a:4b:
58:93:00:39:03:73:fc:a6:5a:58:d8:37:c2:eb:0b:10:c5:b1:
db:f4:dd:9c:50:4d:d4:fa:e6:78:a3:17:8f:0d:ef:bb:ed:0e:
ae:d3:00:fc:79:3b:16:f6:b0:bc:20:82:7f:83:f0:08:b2:24:
83:4b:ca:02:29:bc:7f:5e:e8:04:d2:1a:0b:2a:1a:24:4e:89:
d3:ba:ab:b0:d2:e4:1e:5f:b3:ec:91:14:f9:12:29:f4:86:7a:
1f:d6:a4:a4:39:ba:10:59:5b:80:d9:03:2f:13:b0:a1:84:99:
68:1b:a0:9f:5c:14:43:05:e4:f1:40:7a:ff:c8:6e:5b:1c:be:
ac:23:cf:11:6b:47:fd:30:56:fc:e6:e4:1c:7d:0a:81:88:02:
24:db:ed:77:9c:e3:d2:7b:21:b5:73:f2:ce:86:8f:92:d2:22:
b0:b3:c6:44:7c:ab:be:65:cd:62:7b:14:c3:17:f8:ce:5f:1b:
87:99:76:f0:f4:7d:78:77:0f:0e:dd:0c:a6:85:77:a0:63:97:
96:e6:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:25 2025 by rpki-client