Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: rydhrTUWxOXUz2WPAIU78oSgiC6C08CbaHD5OU7A1kw=
Subject key identifier: 81:51:03:8C:6B:64:15:3B:0C:0E:A4:18:30:80:74:1A:E9:8E:75:15
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 019854FB7A035158066C7BD338FEF332DFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1599
Signing time: Tue 29 Jul 2025 07:00:23 +0000
Manifest this update: Tue 29 Jul 2025 07:00:23 +0000
Manifest next update: Wed 30 Jul 2025 07:00:23 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: 98BHQThDaLaYXSX4LTB8aRSiPswSZEe+vLxA7SAxL4o=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:7a:03:51:58:06:6c:7b:d3:38:fe:f3:32:df:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Jul 29 07:00:23 2025 GMT
Not After : Jul 30 07:00:23 2025 GMT
Subject: CN=8151038c6b64153b0c0ea4183080741ae98e7515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:f7:46:30:81:cd:67:3d:b9:78:09:d6:c1:
da:62:94:dd:fb:13:44:bf:01:c1:19:a3:3c:af:34:
d2:be:c6:13:37:53:c3:65:ea:3e:35:03:71:db:48:
ea:4b:a4:62:49:72:35:9d:98:44:fa:c8:b0:04:ca:
76:a7:25:51:31:fe:d9:d9:ab:36:a7:f9:76:62:a2:
d5:5b:15:ab:25:b6:cd:17:cc:c4:ee:29:1a:17:13:
63:fa:a1:5e:6f:4d:f2:1f:0d:a4:2a:9a:6a:22:ac:
ca:4f:b7:79:d6:42:3e:63:d0:1d:c2:b6:7d:97:b1:
4e:bc:92:92:28:a9:18:cc:7d:bd:9b:7b:52:f2:ba:
af:da:14:72:9d:45:f9:61:9c:47:0e:04:fe:db:6e:
fd:fa:f1:e1:e8:81:3b:95:a9:a2:1c:54:e8:6d:8d:
d1:8f:31:a0:84:df:6e:d6:a4:75:22:af:46:b9:d5:
14:8f:26:18:a1:0d:65:8c:50:d8:9c:6d:b3:2d:3d:
b5:41:bc:9f:10:8c:4c:d7:15:cb:1a:7a:ff:fe:18:
01:8d:b8:ac:dc:af:91:c8:f7:be:f6:50:e4:5d:55:
8d:55:4e:c5:a9:7e:39:23:2a:24:82:e7:e4:87:d3:
54:a0:5b:e2:0a:4c:af:0d:0a:f4:d7:4e:03:0f:e7:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:51:03:8C:6B:64:15:3B:0C:0E:A4:18:30:80:74:1A:E9:8E:75:15
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:77:82:1f:e7:17:e4:22:4c:76:21:8d:2d:d4:b1:d6:a7:13:
ea:03:d5:0f:94:eb:41:1d:fe:40:1f:51:72:60:78:0f:d5:0a:
e7:7a:a3:37:5c:c6:ea:88:82:d0:bc:0f:89:f3:62:6d:0a:e9:
f1:cb:3f:b7:36:df:fa:a6:fc:4d:ab:5b:62:87:62:78:ab:23:
9a:8a:bd:48:54:c1:5b:e2:ba:a4:2f:aa:3a:c0:5a:64:4c:9b:
18:7c:43:ec:34:d1:e8:8b:dc:49:b3:34:ee:ba:8f:bc:68:ff:
bd:dc:44:b1:2d:db:e7:9b:8c:73:3a:bf:7d:01:35:50:f2:cc:
4c:cf:8a:73:2d:80:44:2d:a5:53:10:d7:28:17:c9:53:ff:62:
dc:2f:ad:2b:e2:f2:e8:5d:49:bf:76:5c:01:ce:53:d6:a4:44:
d1:af:47:5e:90:78:64:ed:c5:5b:ed:98:6e:e1:89:d2:1e:ed:
28:d1:6b:77:04:bc:29:62:bf:84:a9:79:d0:e1:fa:f3:25:75:
9c:1f:1c:ea:8b:7d:52:d1:04:93:8b:13:22:5f:db:3d:9c:32:
80:b8:a2:c1:9f:d3:d6:e5:e7:8d:74:d5:b6:bf:d2:ce:8c:e9:
66:44:e6:ec:62:d7:11:35:ee:88:0e:33:3c:f5:ad:77:7f:14:
b8:2a:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:41:47 2025 by rpki-client