Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: fdewzc7AiOanVAgATWpnERsYX3+eU2XNSnf4GC5hc4s=
Subject key identifier: AF:A2:D6:98:55:43:39:45:F8:49:61:A9:64:F2:7D:CC:78:E9:CB:FD
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 0199221ED76510229BF85755C10E62F824BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0D80
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: BujPmLCXVNIMQwf70tVFiHSGOTuI2Ifc6g8VWqPNODo=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d7:65:10:22:9b:f8:57:55:c1:0e:62:f8:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=afa2d69855433945f84961a964f27dcc78e9cbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:e1:e7:a8:c1:30:ff:49:00:13:79:5c:67:
ab:5d:1b:ee:20:70:17:93:9e:db:ac:f0:00:87:49:
49:90:e9:6c:3e:3e:fb:0a:d6:06:5e:2c:2c:31:b2:
85:d0:87:d1:de:cf:32:96:d2:f9:67:02:b3:8d:29:
ca:d8:44:13:9f:b9:46:c2:7a:a5:42:d9:6e:26:63:
6d:a5:99:61:ec:2c:e6:4b:fa:b6:9b:7f:20:ec:9e:
a9:01:12:62:c5:89:a1:f5:d0:dd:d5:e8:2c:b7:24:
ce:0c:3c:19:a0:36:72:67:d2:94:8c:69:3b:72:30:
5d:87:90:b3:79:0a:ee:cb:a8:b8:f8:43:93:e6:0c:
8c:98:b3:9d:75:07:af:99:05:6a:e8:6d:38:71:c6:
a1:82:de:fe:dc:17:b9:db:a0:98:0c:59:e9:b0:61:
13:01:f3:63:3f:e1:d5:63:73:bd:64:8a:65:05:e4:
a0:12:0f:b3:3a:65:37:11:40:45:bf:a1:43:49:a2:
76:c9:5b:3f:0f:99:21:ff:08:19:8b:b2:2b:0c:05:
6a:99:ca:59:52:74:1b:db:27:09:30:8f:eb:a4:66:
40:26:fd:e6:a8:fb:39:5e:e9:5c:c2:86:06:2f:6b:
b2:78:64:1d:fb:b1:e4:35:b6:55:ed:30:c4:ad:b8:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:D6:98:55:43:39:45:F8:49:61:A9:64:F2:7D:CC:78:E9:CB:FD
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bc:d2:1a:2c:15:60:cb:38:b5:f6:a3:d6:f4:9d:4a:39:8d:
9f:9b:13:1b:ea:d6:08:25:20:aa:aa:ac:14:65:0b:0e:90:be:
d2:77:3b:5c:21:41:2e:00:07:86:5d:6b:1b:af:9d:c1:d6:f4:
5f:d1:bd:f5:7e:df:32:03:bd:9e:9f:93:73:8d:4e:db:f1:68:
95:c7:9f:9b:d2:cf:79:87:d8:a6:14:6d:75:b4:fe:1b:eb:ca:
a5:b2:b1:6c:fd:fa:69:a0:36:ea:66:d4:1b:29:97:d5:1a:d9:
7c:bb:94:a3:7e:86:a8:cb:77:fb:83:dc:10:0c:0d:60:38:4e:
b6:55:57:01:a4:d9:3a:39:86:15:cb:6c:9d:29:bf:a8:31:19:
51:d7:d3:27:70:27:db:14:58:6b:4a:e9:d2:7e:0a:74:3d:69:
1b:37:66:78:33:51:18:e4:e3:fd:8c:e9:98:de:ad:18:ff:18:
d7:e6:4a:e8:46:41:6d:81:96:c1:ea:b0:9b:1a:a4:37:05:46:
61:1c:2e:07:c2:42:f8:72:e8:d4:ba:0b:91:d4:a1:9b:34:d1:
ab:ed:58:c7:e9:3e:e8:25:2b:f3:81:a1:b5:57:16:b5:af:fc:
df:bb:a3:33:f4:72:4f:55:9a:5c:05:55:14:12:74:c6:28:a1:
04:f9:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:49 2025 by rpki-client