Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: pldVMFXlEKK44wvpQRtWu+/afa1tUygBSRvDX/Ul5n8=
Subject key identifier: 12:35:66:08:1E:DB:98:AB:67:67:63:09:FD:32:36:AC:E4:8E:84:9D
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01974CD6A08ED6FF5A0531B3380FCB275B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0C8D
Signing time: Sun 08 Jun 2025 00:00:23 +0000
Manifest this update: Sun 08 Jun 2025 00:00:23 +0000
Manifest next update: Mon 09 Jun 2025 00:00:23 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: gk0y+L6bbXqOfdcql3/YUd0l7YvkcxiEHtS0a5aId34=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:a0:8e:d6:ff:5a:05:31:b3:38:0f:cb:27:5b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Jun 8 00:00:23 2025 GMT
Not After : Jun 9 00:00:23 2025 GMT
Subject: CN=123566081edb98ab67676309fd3236ace48e849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:bd:77:16:1a:cc:83:fe:6b:5e:d9:be:ca:
46:c4:71:34:37:b4:c8:68:5f:e1:d2:c6:cb:8e:9f:
b0:39:e9:c3:54:bb:10:05:84:c2:6b:75:fd:bb:31:
d2:a8:38:bd:bb:ad:64:57:88:5d:fc:f7:d4:0f:83:
00:40:c2:ef:7d:19:7d:d5:f0:db:ee:18:86:ac:78:
c9:b5:05:51:a0:fd:cd:e8:5f:91:1c:38:9a:fe:7b:
e8:7e:07:bb:aa:69:ec:71:45:c5:4a:cd:74:e1:28:
00:0a:ad:a1:1a:f0:e6:35:68:1d:16:c0:ff:a8:2f:
11:d5:97:40:a0:63:3b:a7:aa:44:da:59:64:30:ce:
e1:00:fe:1b:ca:db:70:af:4c:7d:01:4e:be:54:12:
c7:c2:88:59:d2:77:d1:76:d8:46:39:15:ef:fc:38:
94:35:92:ea:b1:83:6a:23:4f:1b:50:5a:15:af:fe:
51:3d:b6:6c:f5:6a:94:75:2d:fe:d4:ee:38:ff:10:
d6:0b:30:4c:b5:a4:28:5f:4f:9b:1e:94:2a:40:05:
2c:a0:94:61:af:3e:55:51:db:a1:b7:16:5d:3e:49:
98:d1:55:92:aa:6c:5d:cf:20:8d:dd:a0:ea:32:6a:
41:49:82:13:93:1e:5b:d8:4e:49:d3:83:81:ba:d1:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:66:08:1E:DB:98:AB:67:67:63:09:FD:32:36:AC:E4:8E:84:9D
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b1:57:33:6b:9e:f0:01:56:fa:26:c7:bc:b6:b0:0c:fe:3c:
d1:ac:86:9d:57:f9:c4:55:e3:25:ab:61:44:31:fb:5d:8e:3f:
c6:1c:83:b8:88:6b:43:a9:e4:8a:a9:78:65:d4:3a:9f:1e:33:
fc:e4:b6:ac:c5:b6:a9:b1:b1:08:aa:e8:2d:8f:82:4b:1a:fb:
4b:82:99:08:31:34:50:ab:1d:1a:11:48:dc:a5:be:7d:fd:3e:
38:e6:13:6c:05:44:37:aa:77:d6:cd:53:c2:19:a4:a9:57:7e:
b0:bc:2e:8f:d3:cf:f9:70:af:e7:f1:ae:c8:26:b9:43:e8:29:
02:5b:53:84:79:41:ec:a9:a0:dd:7a:f4:20:d4:f3:fa:6a:08:
3f:9d:03:1d:77:1f:0d:5f:a3:83:32:22:9f:11:15:34:7f:cd:
a8:cf:a6:22:9e:99:7b:ea:cb:e2:ae:da:f4:10:fe:87:04:c8:
19:53:71:88:0a:7c:8c:d3:43:8e:68:34:ff:40:1d:91:00:f1:
b4:6c:89:d0:f4:1d:ee:bf:93:d7:be:98:b0:49:7b:cf:30:e4:
b6:46:9e:f0:1a:45:63:3a:31:16:62:25:e5:48:20:8f:44:9c:
40:49:ce:0d:76:5d:92:51:52:f2:28:7e:3e:cf:ad:d4:0f:af:
e9:a6:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:52 2025 by rpki-client