
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: zBcAZkw/zB39AtyypMtqlerdkBjJgv0s0/2GyMEp0Cs=
Subject key identifier: 1F:EA:5A:B1:28:0A:39:65:7E:CF:BB:7F:95:50:F7:2F:FC:B8:0C:CE
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 0198745061D69C40C167131AE46F3058D8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:01:21 +0000
Manifest this update: Mon 04 Aug 2025 09:01:21 +0000
Manifest next update: Tue 05 Aug 2025 09:01:21 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: ezsigMgXSRnb35e6rwAS/bBZLXZVqeLy/hnpCxUzGKo=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:61:d6:9c:40:c1:67:13:1a:e4:6f:30:58:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Aug 4 09:01:21 2025 GMT
Not After : Aug 5 09:01:21 2025 GMT
Subject: CN=1fea5ab1280a39657ecfbb7f9550f72ffcb80cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:04:27:7a:0b:37:41:0c:b1:b5:d1:ec:5f:
27:08:3d:8c:88:e6:35:57:ad:21:d4:1b:b8:30:f6:
ce:7b:19:95:56:43:09:55:56:5b:95:ce:fa:e1:5c:
94:43:29:4b:4d:35:cc:f5:21:d0:d4:d3:79:b8:de:
1e:a5:91:26:ca:58:45:fc:76:2f:bf:23:3b:ec:78:
f9:f1:3a:b7:ae:86:4e:4b:92:f4:96:ea:b6:32:3b:
b6:7f:a2:90:46:21:84:6c:ce:ef:bd:90:ac:a5:bf:
ef:3b:16:ad:74:d0:a8:59:b5:2e:ed:9b:27:9b:7e:
55:9f:38:fd:40:17:9a:f4:81:c4:d0:fa:55:14:fa:
50:bd:6c:34:13:5f:cb:79:a5:7a:7a:23:e2:8d:f8:
1d:a2:35:0e:28:29:5e:e1:b6:8a:3d:47:bf:f9:71:
96:c0:d8:be:5d:80:4f:55:19:b0:d4:ac:a3:7b:21:
33:65:8a:5a:1b:1c:55:e7:8b:ea:af:1f:da:b9:4d:
75:5d:70:c7:66:e5:8d:ed:46:14:88:4f:a6:e4:c2:
63:4d:42:50:6f:33:58:71:31:8a:82:f4:00:57:bb:
1d:09:83:62:78:f6:24:48:20:68:18:14:cc:8b:7d:
f9:a6:e6:91:76:fd:f7:6e:b3:1d:e1:b6:a9:0d:ad:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:5A:B1:28:0A:39:65:7E:CF:BB:7F:95:50:F7:2F:FC:B8:0C:CE
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5c:08:a1:15:0d:7e:5f:04:80:5e:7c:9d:28:19:a2:a1:4c:
90:e3:2c:1d:38:41:be:d4:69:53:06:c4:23:92:b3:6e:c6:21:
54:f6:04:ab:16:14:e6:14:d4:41:25:fd:c2:d0:8d:e8:27:ad:
1b:61:57:fb:d7:3d:40:7c:70:5f:f9:fb:70:6d:a2:ee:3e:62:
a0:75:3e:1a:b6:ee:a3:be:a8:77:84:17:97:39:31:38:36:f9:
2d:4d:2c:dc:71:9d:63:55:2a:e1:eb:46:2d:3f:c2:e0:6d:15:
5e:2f:47:89:f7:c3:ab:0b:6c:7a:4c:6b:29:5e:7f:0c:16:05:
a7:f3:42:81:1a:bd:f7:d3:6e:a6:94:23:b1:d4:7a:71:89:14:
6e:86:2a:12:79:07:0a:51:5e:c1:bb:15:fa:5b:8b:a0:41:20:
d5:85:88:2e:34:8e:d1:be:e2:ef:f5:76:f5:95:93:c6:87:02:
11:e3:ee:2c:c2:bb:b1:96:17:58:ba:be:5b:bc:b8:18:0f:23:
31:7a:f9:b1:14:e2:f5:37:02:49:ac:3a:7c:62:6d:46:6e:9b:
88:f1:d5:2e:22:18:be:3d:ca:84:5f:f0:08:c2:ff:22:84:a6:
ca:6e:13:e0:e1:6a:e3:33:76:7d:66:ce:e2:12:7e:ff:d0:27:
03:a3:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:39 2025 by rpki-client