Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: j8y7luvDbvA5qwT2nMgP0WhLyYFznC4dvlDNppmz9Nk=
Subject key identifier: 06:88:AE:F7:0E:5A:F4:81:FF:CE:7F:B1:01:80:05:C5:C1:23:8E:EC
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 01984250AFACFE16FC206CC43FA9E5430587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 15FF
Signing time: Fri 25 Jul 2025 16:00:40 +0000
Manifest this update: Fri 25 Jul 2025 16:00:40 +0000
Manifest next update: Sat 26 Jul 2025 16:00:40 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: DH5pGToEXvPn9ulbZCNDCS/ZHoFJ6FJyb1O78BlpFME=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:af:ac:fe:16:fc:20:6c:c4:3f:a9:e5:43:05:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Jul 25 16:00:40 2025 GMT
Not After : Jul 26 16:00:40 2025 GMT
Subject: CN=0688aef70e5af481ffce7fb1018005c5c1238eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:aa:da:ea:ef:f3:b8:d2:65:72:d4:38:05:
1e:2b:dd:43:8d:68:85:43:5c:52:d1:f4:82:d2:25:
82:6e:cd:65:f0:74:8a:a5:a1:1d:8e:d8:78:12:27:
bc:33:4c:69:e2:e5:d6:20:3d:01:76:d1:71:20:5f:
ea:5c:a1:0a:7f:1d:91:cf:80:24:a7:45:f5:67:35:
22:38:47:5d:4c:ee:e4:ac:e7:95:81:c8:be:d2:43:
ff:59:3c:1c:aa:d5:7d:4c:74:5d:5f:62:3c:d1:26:
f7:c0:27:d8:5a:60:b2:96:d0:20:60:0b:fa:15:57:
ff:97:e3:d4:c2:cf:1a:5c:e7:b1:9d:e4:c9:8e:53:
a2:48:ec:5e:7a:e2:5d:35:22:32:ba:72:ad:32:66:
73:c5:29:9d:42:d5:af:f1:f1:6d:1b:37:67:3c:ff:
7c:3c:0b:ee:8e:fd:97:a9:50:b1:d2:ad:78:7b:b1:
f0:ff:1a:44:31:1a:f8:36:2d:4f:10:cb:e4:8e:38:
9b:a5:f8:aa:0f:14:f5:ba:12:0e:ba:35:2e:e1:14:
56:15:50:b0:f7:c2:f9:95:27:44:5f:0c:02:2a:e2:
41:c1:55:df:e6:d4:d7:79:d9:09:6c:42:f3:a3:0a:
e1:a8:e0:bb:91:46:86:72:9c:d4:e5:b4:c5:b7:12:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:AE:F7:0E:5A:F4:81:FF:CE:7F:B1:01:80:05:C5:C1:23:8E:EC
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:f5:0a:19:6b:5c:94:71:e4:c2:ae:0a:5d:03:1f:eb:29:e4:
a5:4a:f0:04:49:01:c3:4f:18:66:30:39:7a:66:8b:c7:9c:47:
bd:e5:40:4e:7a:8c:31:2a:e5:ff:46:06:e6:9a:b8:0f:95:d2:
2d:d6:2b:b6:fd:61:d6:97:f8:a6:7b:f6:79:cb:b9:31:10:e1:
31:1f:e5:9c:84:21:6e:2c:95:39:9e:8d:60:66:55:51:78:fa:
59:a2:80:ad:c3:5c:05:76:b8:8f:32:c3:a3:d0:0b:ed:20:5a:
ae:d6:e2:2b:6f:55:1d:be:9e:43:85:7e:d9:98:5e:04:e6:92:
68:b7:a7:99:47:68:d6:ed:76:fb:81:b5:eb:3c:27:e8:47:aa:
a0:e5:a8:cb:d6:8c:5c:09:44:00:63:42:f2:f0:ef:aa:76:e2:
fa:5b:43:f6:42:35:7f:b5:3a:c2:d8:d9:fa:6f:39:bf:e5:7a:
37:cf:c7:43:7c:e3:76:79:6d:d8:ce:89:55:67:4d:0e:f4:05:
1f:24:71:10:dd:8b:85:8b:bc:fa:12:5d:2e:c7:32:9d:9b:7b:
98:ad:cd:1b:46:9d:97:0a:b1:2f:6d:ea:84:6b:54:08:e5:a0:
f0:b2:d0:e8:3c:e7:aa:4e:5f:5f:8b:fa:88:f2:2d:b0:0b:91:
29:5e:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:37 2025 by rpki-client