Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: yX7VO0E6Y2UZCc1cDnDtIVpz1XsA0FttGvXymzvL0QU=
Subject key identifier: 1E:26:77:B6:C2:31:59:C5:4E:18:D7:E6:34:16:D6:5B:6B:63:9B:DA
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01974E5809251DAEF7095168D7E1A9AA4812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 07:01:21 +0000
Manifest this update: Sun 08 Jun 2025 07:01:21 +0000
Manifest next update: Mon 09 Jun 2025 07:01:21 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: t1DTxXgApM9V49eB69GT8UAY81jv5ZD6ToZv1brqJ3g=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:09:25:1d:ae:f7:09:51:68:d7:e1:a9:aa:48:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jun 8 07:01:21 2025 GMT
Not After : Jun 9 07:01:21 2025 GMT
Subject: CN=1e2677b6c23159c54e18d7e63416d65b6b639bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:c2:ac:cb:0c:92:68:ec:0a:fd:e3:1b:b2:
f0:37:c2:5d:b6:fd:f8:a1:14:5d:72:1e:40:21:7c:
4d:d0:b1:52:52:d4:a0:56:b7:c7:88:f4:7c:51:7d:
48:ba:04:e9:29:e8:80:8d:06:a4:b0:92:8f:9c:e2:
de:03:14:b4:b9:13:ec:84:22:cf:4e:89:1f:64:ae:
ab:01:b7:e4:5b:21:59:65:83:00:0e:53:5d:75:0e:
a6:11:d4:d8:19:b5:2c:26:47:d2:98:84:96:33:1b:
56:ec:99:ee:6a:f4:f3:04:51:e5:5b:0f:f6:6e:e7:
31:0b:b8:21:a7:b5:28:c8:e5:ad:f3:9c:4a:32:b0:
74:8e:6c:1f:af:b5:1f:80:34:24:3e:97:0c:29:63:
42:ac:0d:4d:42:93:c2:0d:7a:91:b9:45:11:e6:f5:
dd:db:e6:ca:55:78:5c:16:90:a9:63:ec:8c:ae:30:
fc:dd:85:db:59:e5:47:b6:5a:28:d2:47:84:6e:ba:
16:ba:25:4d:bf:f5:3f:aa:a6:c4:87:17:40:e7:ef:
84:94:7d:f4:71:8b:b5:15:8b:89:42:25:13:8e:d0:
1e:e2:27:4b:5d:6a:44:fc:6c:e6:a4:c0:7b:91:a5:
c0:63:3d:61:20:11:e0:76:47:3c:7a:86:02:06:6f:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:26:77:B6:C2:31:59:C5:4E:18:D7:E6:34:16:D6:5B:6B:63:9B:DA
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d5:50:88:dd:d5:63:ef:8a:c6:f0:4c:ad:6c:33:c9:9d:6d:
c3:02:6a:fe:36:bc:0a:3b:ba:40:d4:f4:da:ef:0f:2d:51:c6:
b9:bd:85:bc:fd:fc:b4:03:88:2a:93:ca:f1:18:0d:67:aa:f9:
94:48:2e:e4:e0:f1:e1:55:e7:ca:b9:ff:0b:ea:98:76:e3:50:
9e:06:67:e5:d4:60:16:0c:9a:b4:71:4b:4d:6a:ae:64:8f:91:
1c:d4:ac:22:db:7e:1c:2c:25:d4:6c:34:e0:4c:9e:b6:38:35:
a5:c8:9d:9e:a2:c7:17:4a:bc:dd:b7:f3:a0:e2:8e:ef:97:70:
ff:1a:d6:7c:fb:44:38:6f:a7:32:86:9e:55:4f:fe:e5:68:00:
bf:3a:c0:4c:b8:ae:40:24:6d:39:5c:e8:c9:7f:f8:55:44:98:
a8:a4:23:13:70:a8:ca:ca:44:69:f1:80:c4:ca:14:77:b2:ed:
f0:19:ca:aa:36:d0:ab:ce:d1:92:d0:55:e9:87:a5:95:8a:e8:
7a:55:c1:75:5a:0c:1d:21:fa:f0:05:63:ee:10:20:0b:c7:c4:
80:9f:61:d6:a7:34:65:72:a0:e3:31:fd:5e:e0:50:a5:e7:ab:
c9:e4:66:4a:72:35:d5:cd:05:ba:3f:c3:73:2d:2f:e7:51:27:
47:81:79:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:41:48 2025 by rpki-client