Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: riEKN46xjaZsNxHWPpL5tY1xCfuEQs+U4iqYNR8tVzM=
Subject key identifier: 9E:91:0F:1D:63:5F:91:1B:FD:69:AC:7E:E3:2F:D2:FC:27:22:8C:3B
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 019739BE583C536BE3BF7FFF475CE749CE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 039A
Signing time: Wed 04 Jun 2025 07:01:05 +0000
Manifest this update: Wed 04 Jun 2025 07:01:05 +0000
Manifest next update: Thu 05 Jun 2025 07:01:05 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: gMFy0jNBmyfPKIrAxnMiyqglh191I58I4HDhL5rikMc=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:be:58:3c:53:6b:e3:bf:7f:ff:47:5c:e7:49:ce:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Jun 4 07:01:05 2025 GMT
Not After : Jun 5 07:01:05 2025 GMT
Subject: CN=9e910f1d635f911bfd69ac7ee32fd2fc27228c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:bd:23:df:d3:0e:22:86:28:7f:c7:49:89:
51:19:1a:bd:19:83:4c:39:21:c2:85:d7:eb:93:ee:
30:b3:a5:f2:4c:44:39:da:a0:3e:54:a0:e4:f0:8e:
0a:dc:21:8b:31:78:ad:a1:1b:6b:37:b1:9f:d9:04:
d8:45:1c:1e:ef:32:67:f7:26:07:df:a6:62:17:3a:
70:b3:58:c6:46:67:fd:fe:e7:38:c6:1e:90:97:85:
01:50:04:60:19:98:3d:51:c0:15:64:6d:58:cd:cc:
7e:b5:19:e5:10:a8:b6:9c:b6:78:8f:8b:16:98:bb:
70:b7:5f:74:b8:4a:f8:2b:dd:06:0e:98:71:25:a2:
5b:c7:c2:a5:1c:e4:09:be:de:d8:e3:2e:de:19:c9:
fc:18:21:c2:dc:7a:db:f5:ae:dc:2d:f5:04:89:d0:
31:c4:39:ab:8e:1c:25:f8:59:79:c9:1e:82:60:fb:
27:fc:34:ad:b5:b7:98:5e:a8:55:a3:9b:06:c3:4d:
4d:53:a0:0c:9d:a5:6d:8e:54:70:0b:d4:0e:e7:f8:
8b:1e:42:a7:94:0b:f7:69:e9:06:fb:cc:38:f9:9b:
9c:71:9f:cc:8c:7c:6a:1d:bc:16:9c:c5:85:cd:97:
5c:36:d9:fe:65:21:02:0a:66:7f:18:0a:ff:c8:4a:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:0F:1D:63:5F:91:1B:FD:69:AC:7E:E3:2F:D2:FC:27:22:8C:3B
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2b:88:ef:36:90:2e:2f:f2:33:d0:85:53:56:77:20:02:0a:
92:2f:0b:7d:83:db:25:9b:9e:9b:ad:2b:9d:2e:f5:fe:4d:06:
b6:6f:b4:14:b1:4a:4c:24:33:1f:6d:48:06:cf:98:46:ba:36:
54:0a:e8:c0:08:b4:59:e5:bd:12:f9:95:60:d5:22:dc:45:e0:
d3:f1:6d:5b:1e:8d:be:64:0a:f9:5c:e5:51:3a:f0:9b:45:27:
5c:4f:79:d3:10:bb:99:2d:b8:91:4d:3a:5d:a1:fe:92:6e:2e:
48:d6:50:84:a8:ba:11:db:4e:73:53:af:f9:21:7d:09:17:7f:
52:90:ec:af:68:46:20:8d:c0:15:ee:6b:f2:1e:00:96:e0:15:
09:35:ca:12:19:59:0d:db:40:30:e9:1f:ec:df:93:ec:d2:e6:
02:22:a5:66:c7:2b:e3:cb:e2:c7:1c:c1:25:9a:61:fa:c6:8f:
50:e0:61:94:c7:45:d7:ab:69:0a:11:3a:9d:66:94:d8:c4:6b:
b6:cc:4a:80:22:60:cb:6c:00:6b:67:bc:d8:62:58:17:e4:b5:
85:8c:c5:dc:83:f1:a7:44:b8:4f:c5:36:40:d5:dc:85:00:86:
bd:33:93:ed:5b:f8:4f:51:be:94:b1:e7:2a:cb:2b:10:ef:9c:
5e:d5:8f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:26:25 2025 by rpki-client