Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: TX9G0F8OF225SIVZZJ30fCv0mHn9emQSbJY8fwHspfE=
Subject key identifier: DE:B2:AB:0B:70:C3:C9:97:24:A6:81:BE:12:98:B8:AE:FE:AA:97:72
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 0199240CB841DEC160E4FD8712CEBE044AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 12:00:37 +0000
Manifest this update: Sun 07 Sep 2025 12:00:37 +0000
Manifest next update: Mon 08 Sep 2025 12:00:37 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: G3lFauvsDi2SGZllSbXYh1zapK2jMnbMaoibfGz7SgM=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:b8:41:de:c1:60:e4:fd:87:12:ce:be:04:4a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Sep 7 12:00:37 2025 GMT
Not After : Sep 8 12:00:37 2025 GMT
Subject: CN=deb2ab0b70c3c99724a681be1298b8aefeaa9772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:27:04:28:1b:43:9e:2f:31:73:b3:cf:06:
75:fa:4b:bc:04:21:16:58:cd:99:25:0d:e0:c0:f4:
ff:9f:60:68:7c:b6:f5:59:10:cd:3a:da:a7:75:a9:
e4:0b:6b:f5:11:73:b9:d7:cf:c9:05:04:d9:40:41:
ec:69:a0:35:93:cb:2c:fd:4f:b6:b7:9e:98:a0:8f:
09:b7:3c:76:b9:18:cd:03:35:e6:1d:74:ce:3a:7e:
58:cc:20:93:cb:b2:7c:76:c7:cc:48:e8:81:04:70:
35:1c:94:19:e0:72:cc:77:28:cd:46:99:c2:e8:cf:
0e:09:9f:bd:dd:d3:10:45:25:68:5c:36:b6:bb:7a:
c4:1e:96:fb:f8:b2:df:11:4b:a9:58:2f:96:1e:1e:
58:cd:e4:79:51:4f:f2:f8:a5:c7:27:4e:7b:34:d8:
b0:51:e1:78:36:6e:11:5e:3a:e2:66:c2:5c:b7:27:
f8:42:a4:84:aa:f2:54:bf:04:28:4c:9e:7d:cf:a4:
8f:ca:ce:dc:48:43:f3:da:22:17:2a:db:7b:86:eb:
31:5d:d3:db:dd:88:a7:5c:58:5c:1c:58:85:2b:81:
ce:17:05:e3:aa:86:fe:5d:4e:c7:ac:b0:43:db:c3:
20:23:5d:a4:f2:ec:9b:a2:40:d4:be:38:63:b6:a1:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:AB:0B:70:C3:C9:97:24:A6:81:BE:12:98:B8:AE:FE:AA:97:72
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:f0:3d:aa:1b:ed:e9:23:f7:c9:1a:88:a6:6c:0a:77:50:
02:b4:61:a4:6c:dc:9b:9d:a5:8e:45:34:cf:f1:29:95:cc:cb:
4b:d0:a1:05:af:c5:a1:0e:01:e6:ad:1f:bf:99:25:db:46:86:
16:ad:b2:3e:93:d9:1b:e1:1a:14:00:99:dd:59:8b:9d:04:1d:
0b:a8:9f:1f:b2:82:f9:0d:17:71:87:1d:9d:3a:ea:43:bb:29:
4b:bf:8e:df:79:51:e6:8c:0d:62:03:68:d3:e5:9e:49:6e:87:
42:61:1d:7d:8c:10:c8:7d:48:da:ae:62:5f:68:15:08:85:21:
44:19:82:22:ca:2e:3e:a8:df:e9:d4:0d:b7:66:6b:1f:ae:52:
f7:8b:04:6d:43:4d:cd:27:df:d6:e2:4f:47:cf:df:ab:34:eb:
e3:52:be:b4:7e:e5:6f:23:dc:d0:2e:10:90:cd:7b:b0:6d:b5:
4e:9c:f6:b0:c0:d5:0f:48:60:c0:20:c2:1d:25:fc:7b:08:c4:
c7:fb:d5:e2:75:b6:31:94:ad:0c:2c:8a:fa:78:53:65:20:cc:
1e:67:67:a9:d2:f4:f3:ca:98:77:d2:f7:61:c5:43:8c:a5:83:
ef:bb:e5:49:ee:ec:a8:4d:c1:32:85:81:50:52:a8:33:c1:ef:
8d:de:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:34 2025 by rpki-client