Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: Ys9poxfs9OdDuqWK55dop2B93TO9T7s5tKjAhO4uI5M=
Subject key identifier: E5:99:2E:97:9A:BD:27:5B:CB:D4:8F:79:04:5B:4D:E6:4E:0A:D5:30
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 01984965CD2F09E4F4E7277C826DAD0AA3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 01:01:05 +0000
Manifest this update: Sun 27 Jul 2025 01:01:05 +0000
Manifest next update: Mon 28 Jul 2025 01:01:05 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: bUHjlsuqsrud9cOcZdTQFoY3GhgCWsNUAfzMmrRC0Wc=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:cd:2f:09:e4:f4:e7:27:7c:82:6d:ad:0a:a3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jul 27 01:01:05 2025 GMT
Not After : Jul 28 01:01:05 2025 GMT
Subject: CN=e5992e979abd275bcbd48f79045b4de64e0ad530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:05:8f:9f:bb:e6:ca:f2:78:95:c1:16:62:
cc:92:ab:52:57:c1:96:13:8b:5e:d7:ca:0f:a0:15:
42:4e:e8:3d:14:53:f8:63:e1:3a:9c:0e:3f:2d:0c:
a9:fb:5a:4b:79:1f:d9:43:20:f9:13:f0:46:d6:1c:
8e:8e:5c:66:54:cb:e7:e6:31:3c:23:5e:0f:b9:eb:
67:e4:e7:ea:b1:0f:b2:97:41:2f:4c:81:50:16:60:
e1:f5:ca:ff:76:1a:b9:f8:78:90:81:21:a2:48:df:
74:e0:a1:8d:da:af:8e:07:20:70:3e:22:a4:8a:83:
71:41:54:3f:85:f6:d5:6e:96:ca:d4:f4:60:51:28:
ac:77:95:76:3e:9c:5e:c8:db:ec:8c:e6:81:e2:a3:
af:9b:e0:bc:c8:c6:23:14:5f:e8:3c:d8:1a:c3:67:
a9:bf:94:7f:e5:75:f3:75:a6:c3:53:c2:f8:1a:04:
6d:f0:15:8f:c4:80:22:35:6f:44:2a:91:e8:cc:6d:
1b:19:81:fe:a6:60:ba:ec:ee:b4:ab:31:56:3b:c8:
8d:cb:8b:df:00:15:3d:5b:23:95:d2:f5:34:76:0f:
bf:08:c7:4b:2e:b7:dc:58:f7:d3:e7:ff:d4:20:d2:
bd:2b:e1:35:c1:d2:c8:33:0e:7d:15:41:33:3c:5e:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:2E:97:9A:BD:27:5B:CB:D4:8F:79:04:5B:4D:E6:4E:0A:D5:30
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e5:e6:7a:01:03:a2:3a:df:48:ad:32:6b:1f:18:32:48:5e:
92:38:17:aa:78:f4:9e:8e:de:41:81:15:99:e7:b4:4f:7a:a7:
2e:50:ba:25:39:95:77:23:12:b6:ab:fa:bc:d5:03:ad:26:f8:
6a:c8:82:c7:76:2b:53:41:c9:bc:90:42:0c:8b:35:0b:b2:47:
e7:d5:44:70:cb:2c:3d:5a:d3:c7:c5:8b:4f:4b:74:ae:64:af:
ab:aa:15:ba:cc:4e:f4:da:10:8c:a7:2b:ee:a6:b2:e8:9b:06:
22:5a:fa:f9:23:39:76:6f:27:6b:c7:77:ec:da:83:00:d8:51:
85:48:f2:fe:da:8d:68:47:05:25:58:3f:9a:6f:26:90:1a:fb:
15:8d:16:40:9f:e2:04:e2:68:54:b3:c5:1f:03:1c:ba:61:7b:
51:93:9e:e6:f2:56:ec:17:32:07:2d:f7:95:84:03:f7:36:61:
d7:e2:e1:f4:9b:79:66:0f:40:62:e2:5f:1e:f0:f3:5b:e3:51:
82:3e:56:56:fd:a6:90:16:0b:41:49:66:c5:7a:3f:c3:1e:9b:
36:96:d9:23:f1:61:4b:d7:ee:6c:ca:57:aa:ac:2d:1c:78:19:
b4:4d:29:c8:93:db:68:8d:dc:f0:58:46:c1:ac:4b:61:36:f3:
84:59:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:47 2025 by rpki-client