Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: b10va80K4SWRqKKJBPCmDgsiYfEmAWbjnR7c41I3lco=
Subject key identifier: 27:20:25:DD:26:94:7D:36:AF:65:59:C4:03:34:78:2E:13:35:95:19
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 019848899588E0B5BD0B53FCECA0D7EC809A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 01A0
Signing time: Sat 26 Jul 2025 21:00:32 +0000
Manifest this update: Sat 26 Jul 2025 21:00:32 +0000
Manifest next update: Sun 27 Jul 2025 21:00:32 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: /2DWUSOh0S+52DT/sfdoTvN73JZH3zGWtLty4hW7Tv0=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:95:88:e0:b5:bd:0b:53:fc:ec:a0:d7:ec:80:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Jul 26 21:00:32 2025 GMT
Not After : Jul 27 21:00:32 2025 GMT
Subject: CN=272025dd26947d36af6559c40334782e13359519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:a0:46:bb:8e:7b:6f:e6:09:79:56:72:b7:
dd:26:ca:29:d9:39:09:bc:13:b4:65:ce:44:53:21:
69:06:74:f9:cc:d9:a4:59:f0:33:8e:61:a2:aa:48:
55:eb:82:9c:43:b9:b3:7a:c8:f2:0c:0c:77:ff:d5:
c0:7c:ed:7a:8e:e5:fd:b5:11:2c:50:ac:f9:d2:65:
e6:78:21:65:ee:4e:37:60:2d:63:82:d7:63:13:bb:
3b:07:cb:05:21:48:0b:e2:ab:35:04:af:20:fa:e7:
1a:e3:dc:ce:6f:8d:f1:3d:16:bb:27:c1:56:7e:01:
14:2e:e3:86:a5:32:2e:73:a7:1b:58:5c:6f:fb:e7:
b5:33:97:33:b9:9b:70:1a:b3:71:9c:72:df:02:49:
04:cc:6b:1b:20:7c:21:1a:eb:9e:28:da:bf:bb:0b:
6f:e2:53:66:0d:ea:c5:7a:32:e9:37:53:0f:d2:58:
d2:76:bd:90:61:b3:02:68:7c:50:70:fc:6b:08:29:
86:ff:f0:c8:bd:57:74:5e:c3:e3:85:26:7b:41:8b:
71:f5:b3:0f:44:8b:d7:59:a5:57:ef:7e:02:d6:f9:
b6:57:1d:cf:c7:40:0e:23:d7:66:92:2d:4c:46:04:
37:fb:70:9d:99:9e:fd:bc:21:7e:12:06:89:e2:ea:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:25:DD:26:94:7D:36:AF:65:59:C4:03:34:78:2E:13:35:95:19
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:30:94:c7:c7:ac:63:e0:a2:22:13:b5:76:62:df:29:ae:68:
38:a5:f5:67:5f:3d:f1:ec:cf:3c:c0:8a:27:a5:e4:07:25:b1:
fd:6a:76:f8:94:fa:bf:b9:46:9c:3b:80:74:be:7c:dc:58:80:
46:d2:c8:df:55:cf:4f:ff:87:7e:0c:34:80:9c:c3:d3:9c:7a:
86:21:2a:b5:c9:21:16:79:2b:c5:22:71:b2:a4:bb:a0:58:f0:
38:da:ae:c7:85:7a:09:b4:3d:05:4a:13:ce:f4:a9:85:8f:56:
24:c2:22:2f:ec:53:04:c4:d7:0b:0f:ae:4e:f5:c9:f3:70:93:
be:a7:59:d6:d5:24:20:13:9d:17:d6:b8:5e:2d:b0:74:1d:dd:
99:f4:00:6e:c9:ec:f2:54:37:c4:7f:0f:a0:ed:96:df:39:ae:
45:bb:fe:59:4c:4c:dd:3a:48:93:85:28:7b:45:fa:05:b6:19:
56:36:f1:20:2d:65:a1:52:b7:8d:53:1e:ca:a8:b2:6f:2c:56:
01:e8:79:2c:07:36:e4:ee:80:88:5a:56:05:d3:10:84:22:9d:
a2:f9:fd:32:5c:d5:ff:b8:b8:9f:f4:02:16:43:fe:01:ec:ca:
8b:1d:d6:f1:5e:86:e0:ec:8d:cf:d5:c3:93:35:58:a7:2c:8e:
8d:42:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:23 2025 by rpki-client