Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: bbfPw3TJimiNO2zLWTimq8u9slY7Bwh23JdJA/CqkFA=
Subject key identifier: A5:3A:10:8B:E8:CE:EE:0C:4A:95:01:90:14:99:8C:DE:C7:92:FA:C8
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019A7225CD517BB92CAA8E4CE1B8DC40741F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0E2E
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: 4y363jDSf5JDNEVPHLe8Qwx6t3GzU5u1MDL3Jt1owFw=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cd:51:7b:b9:2c:aa:8e:4c:e1:b8:dc:40:74:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=a53a108be8ceee0c4a95019014998cdec792fac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:7b:2d:f7:f0:b1:9b:69:89:31:ef:0c:27:
4f:12:56:9d:94:be:f4:0c:d3:be:b2:06:38:9a:67:
5b:dd:f5:54:36:aa:ba:71:1e:b3:d0:63:5b:a3:ba:
31:26:42:1b:64:04:72:44:5c:53:7e:18:83:ca:e7:
b3:0f:e3:56:60:44:57:76:f5:f2:9e:17:03:32:24:
2b:6d:f6:11:61:54:f0:83:50:1c:00:1f:35:10:9c:
c3:cb:3d:6c:f8:0f:fc:a9:a2:0e:77:35:3b:08:b3:
c3:a6:55:7d:2d:51:aa:dd:e1:6c:5d:84:22:30:4f:
97:80:8b:db:55:2f:89:91:1d:d5:cf:05:99:7d:5f:
31:8a:6b:42:9a:6b:29:ea:43:e6:31:25:8c:02:35:
c0:48:c8:e3:af:82:2f:61:94:15:ee:4a:c3:c3:dc:
b3:a6:e0:2d:37:9d:65:95:e5:92:28:73:97:ff:37:
7a:45:63:c6:b3:05:d6:2f:be:a3:95:0a:68:6e:bb:
52:85:ab:21:a9:9f:8e:5a:f5:1d:c3:db:94:72:2c:
ef:47:db:0d:2b:e5:17:0a:1f:2e:94:25:f9:24:89:
b0:7b:46:ed:99:a1:1e:4a:38:36:2a:d9:49:f0:6e:
9f:55:f1:a1:f1:fa:ae:a8:7e:8c:24:f3:02:f7:dc:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3A:10:8B:E8:CE:EE:0C:4A:95:01:90:14:99:8C:DE:C7:92:FA:C8
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d9:e2:71:13:29:79:9d:e2:7e:22:0c:e3:44:c2:e0:33:20:
4a:e7:5e:5e:1e:e0:1e:68:57:3d:16:9d:ee:5c:d1:e9:b6:8e:
94:26:45:bd:7c:a8:b3:fa:5e:54:83:4c:87:ec:84:0d:49:71:
e5:c9:bb:7d:d8:63:de:d8:ed:ca:ee:8b:96:6e:bc:f7:cc:05:
2f:fa:2f:c7:e3:e2:1e:54:a8:b6:11:b6:16:93:a4:e9:6b:6f:
ee:ec:4e:79:e3:bb:a8:0a:c4:e5:bf:8c:0d:ed:ce:77:c2:81:
5f:b0:ae:ff:b9:40:6c:1d:67:fb:bf:c1:1f:21:f0:b6:24:a2:
34:f6:fe:85:9f:01:17:20:5f:31:63:c1:47:07:8c:e3:f2:2c:
5e:a9:d4:b0:f6:e7:fd:bd:b0:27:d9:16:1c:12:41:a5:9b:64:
82:a5:92:77:25:f6:5f:28:03:a1:aa:10:7b:99:1b:f9:12:1a:
ea:d7:a7:1c:22:3b:a0:9c:33:54:06:d1:aa:b4:ef:6c:17:3a:
28:2b:ac:1b:0c:89:f8:23:7a:89:17:44:65:46:9a:e5:3a:8f:
a0:08:65:be:f5:2b:ba:7f:76:89:dc:55:94:94:77:aa:5e:ca:
4b:f8:8e:62:58:a8:3c:b3:7d:ff:4d:89:b8:b3:47:01:fe:45:
8f:ea:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:38 2025 by rpki-client