Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: KwA8j+Grke7nPbchOIWNaI7KS6vYxmyuIyDmyHfpgW8=
Subject key identifier: 82:0E:0D:96:83:5B:B2:04:82:C2:94:2D:A7:AB:4C:2D:D9:37:59:0D
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01965793C272E3B9138CE95B004E8ADAAB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0C0E
Signing time: Mon 21 Apr 2025 09:00:23 +0000
Manifest this update: Mon 21 Apr 2025 09:00:23 +0000
Manifest next update: Tue 22 Apr 2025 09:00:23 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: B2eo+hmgjIddo7jh9+vezM1FTOD0ApWi0M3ul73LtBs=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:c2:72:e3:b9:13:8c:e9:5b:00:4e:8a:da:ab:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Apr 21 09:00:23 2025 GMT
Not After : Apr 22 09:00:23 2025 GMT
Subject: CN=820e0d96835bb20482c2942da7ab4c2dd937590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:66:26:19:04:37:e7:81:fe:7e:d8:d5:f5:
d6:e8:5f:7b:63:74:92:fa:31:c9:ef:0b:1d:59:2c:
47:c2:ed:61:64:51:f6:f9:b3:35:ad:cc:58:3d:e4:
e2:96:9d:f7:8f:33:3d:d3:8c:45:7e:cf:db:58:7b:
f5:eb:55:7b:26:4c:0c:72:c0:d8:6f:ff:0d:fd:de:
e9:f5:fb:fa:63:86:48:78:da:3d:8c:35:3d:01:80:
54:bc:fe:e4:53:f0:f6:b0:6e:a2:e4:43:9f:40:1c:
76:3b:35:34:c8:37:5e:31:44:f2:24:78:ab:bc:88:
5d:08:0e:2b:db:74:a3:c0:f3:8b:2c:36:2d:4d:b9:
7e:76:81:62:e1:bf:02:32:37:7f:fa:5c:81:f0:10:
ab:16:18:8d:5c:bd:81:c1:7c:e4:77:37:59:c4:22:
ee:55:8d:ef:ad:38:c7:b6:57:e0:0f:7b:d5:ef:b4:
45:83:41:e8:a6:88:ec:0f:0c:fc:0f:57:fd:93:53:
97:cf:61:ec:5c:19:a7:83:eb:a7:fa:85:8a:a8:86:
86:70:9a:5a:74:d3:22:9b:36:aa:dd:fe:ec:95:e5:
71:b5:57:35:d2:b7:66:4e:70:35:f2:63:97:7a:40:
de:a2:d9:01:23:31:70:bc:e5:cf:6b:5f:45:dd:5f:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:0D:96:83:5B:B2:04:82:C2:94:2D:A7:AB:4C:2D:D9:37:59:0D
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a1:68:87:7f:4a:89:f7:a3:7c:1f:14:1b:ae:46:ab:e3:65:
54:60:e5:c8:fc:36:09:51:34:d7:8c:30:41:8a:b5:0c:1d:5b:
2b:28:f3:e6:a9:0b:be:30:69:19:c7:43:e7:02:f1:9b:8f:16:
72:a2:39:3b:01:11:ba:6e:71:13:4a:11:bc:e6:79:0a:27:b8:
a6:9a:df:9b:8a:4d:d8:25:96:08:e4:36:4e:1d:3c:95:bb:94:
3d:a1:d7:bc:b9:66:c7:c3:23:17:3d:c2:cd:1c:7d:6f:46:87:
da:30:74:60:55:76:28:bd:48:ee:df:3c:45:49:16:49:41:a4:
04:d5:e1:8d:a9:0b:05:47:79:e8:f6:5d:e7:75:e2:5d:40:b7:
61:c8:ba:09:ce:67:9a:53:76:e4:9b:2c:6c:a4:64:45:bd:63:
a7:e8:12:86:4b:c8:3d:8e:2d:80:a4:99:73:7c:ed:d4:36:db:
55:ec:66:18:2c:b4:b1:5e:ed:cd:b6:c5:0e:40:1d:c6:5f:bc:
75:2c:d0:f3:73:b2:62:9e:9f:b1:05:b3:04:dd:b1:21:d3:16:
03:4d:b2:86:8a:2b:ab:0d:21:a7:89:0e:a9:8b:e5:d9:53:61:
84:f6:51:a0:19:df:16:ed:30:b9:39:8e:40:2c:a4:e5:6c:ba:
87:0c:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:41 2025 by rpki-client