Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: 8uWQjZpxTQBFIzD4w3u2eOmW8G10UyN4qWe50p7Ad+E=
Subject key identifier: 01:36:89:F0:D8:95:62:76:09:05:04:B1:38:9E:51:7E:54:25:FC:45
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019827479E86E0B48F926E71C527E769B947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0415
Signing time: Sun 20 Jul 2025 10:01:01 +0000
Manifest this update: Sun 20 Jul 2025 10:01:01 +0000
Manifest next update: Mon 21 Jul 2025 10:01:01 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: w2ACqBW26vAW2a4sDvj080Gr8yukybzDn1C1zDAAxqk=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:9e:86:e0:b4:8f:92:6e:71:c5:27:e7:69:b9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Jul 20 10:01:01 2025 GMT
Not After : Jul 21 10:01:01 2025 GMT
Subject: CN=013689f0d8956276090504b1389e517e5425fc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:f7:6c:9a:16:e9:64:9c:1f:17:62:38:a8:
92:e6:a8:9f:eb:cc:f4:15:d4:4e:0e:4c:73:19:85:
90:1b:83:5a:b6:a3:af:f4:f2:99:e4:6b:c6:66:8e:
c7:7a:a2:ec:b8:ea:69:02:3b:d4:8f:dc:e4:5d:15:
78:27:36:09:7f:40:38:14:fd:fa:ca:db:7d:b4:4c:
65:fe:22:b1:14:0c:cc:5b:b5:37:b4:86:ee:ce:1d:
2c:64:24:a3:fb:70:c1:0f:63:b5:b2:7c:d8:c0:e9:
73:dc:f3:57:51:4c:f4:26:d3:d9:74:d3:87:06:e2:
fc:79:91:57:f2:08:71:a1:ea:81:5d:fc:8c:67:b4:
14:39:80:ce:1c:9e:ff:a6:e8:c9:0f:fb:21:e5:4c:
e7:ce:60:f6:5b:16:c7:ff:d5:5b:b8:37:67:a3:24:
ec:43:bc:0d:28:05:18:06:03:19:6a:b4:49:ba:9d:
cc:e2:70:f3:85:eb:6e:16:2e:40:e0:a7:3c:51:85:
82:43:a3:c9:6f:93:46:94:d9:d4:42:ca:bb:32:6d:
42:7e:d0:ef:a3:ed:79:8c:aa:0a:10:ba:29:97:ac:
c3:2e:d8:48:03:53:05:38:29:ca:68:ee:95:39:31:
87:92:7e:72:d9:aa:9f:77:14:c2:46:8c:e3:b5:79:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:36:89:F0:D8:95:62:76:09:05:04:B1:38:9E:51:7E:54:25:FC:45
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:67:63:a1:a7:6d:8f:1e:86:ed:e3:1d:12:c1:7f:99:2a:8d:
19:28:7c:86:8f:9c:26:99:f5:7f:3c:4d:9b:86:d8:4a:2e:1a:
29:e1:b6:16:13:35:6f:28:dc:a0:a7:45:20:04:16:2a:fe:b2:
49:a8:a4:13:7f:48:75:64:bb:8f:58:05:5d:7d:eb:e5:95:a1:
33:19:64:4e:fa:ea:7c:4e:7f:9d:89:58:81:c8:ec:69:25:28:
f0:93:f1:46:46:ec:c1:18:ab:11:5f:e3:6a:8c:84:44:df:2c:
e2:30:24:38:c0:62:85:48:c9:6e:60:88:90:e9:23:fe:6d:79:
0e:ff:5c:29:82:52:6c:51:2c:33:9d:ab:f8:22:14:e8:94:2e:
c6:c1:28:40:c3:36:ed:18:a9:20:ea:e4:b4:da:35:c4:3f:17:
b7:40:0e:f9:c4:ab:31:8c:cd:a7:c9:fd:51:9a:4c:74:77:c7:
6b:17:06:d8:de:68:7b:dd:46:84:31:10:86:d2:91:1c:cf:d6:
25:8f:fb:9c:e0:93:c8:80:05:cd:34:22:6c:d6:31:06:43:97:
1d:27:9c:ed:39:fd:ab:22:15:27:5a:72:ac:3c:10:71:ca:57:
94:8a:fd:39:d4:c8:80:16:48:ef:58:8f:cf:42:45:08:62:98:
ad:e5:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:52 2025 by rpki-client