Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: adjbf7fn+zUUnzZJKak35Bn4oKGi9YKBoEMx9a0dQz4=
Subject key identifier: A6:A1:BE:2C:87:36:EB:92:9E:6B:5F:E5:1C:DE:6F:9B:BE:4E:4C:C8
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 01992255F2807A3C34B85457DAA759A34222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0497
Signing time: Sun 07 Sep 2025 04:01:21 +0000
Manifest this update: Sun 07 Sep 2025 04:01:21 +0000
Manifest next update: Mon 08 Sep 2025 04:01:21 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: YYiqD7EsvhM9hkFVBHAc0uL0oj/bz7gHtaFQKMZ7nJc=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:f2:80:7a:3c:34:b8:54:57:da:a7:59:a3:42:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Sep 7 04:01:21 2025 GMT
Not After : Sep 8 04:01:21 2025 GMT
Subject: CN=a6a1be2c8736eb929e6b5fe51cde6f9bbe4e4cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:b1:d3:8d:5b:cf:71:26:b8:bc:ae:cf:2e:
3e:27:f4:c8:d5:9a:3a:88:30:a0:87:95:fc:34:35:
57:5e:a9:3c:96:31:cb:35:e6:44:d0:47:d3:19:43:
35:58:5d:86:9d:f9:41:68:d6:ac:7f:dd:4c:08:88:
b3:52:ed:8e:3b:8a:ef:da:5c:74:03:a4:d3:04:84:
e7:6e:86:63:9d:53:5b:ed:0b:4e:33:cf:08:1f:6e:
85:5f:bd:02:cd:e6:66:be:3f:d8:c4:d3:09:a4:5b:
55:86:a9:89:81:40:48:a2:65:2b:db:6f:a2:5c:39:
49:2a:72:5d:e2:1e:35:f1:4f:79:fa:24:4d:e4:f4:
16:e8:28:74:31:01:13:09:e5:e9:05:78:30:e7:ce:
4c:ca:88:d9:cf:9e:14:d4:5b:07:1d:fc:ca:58:d8:
f0:54:5b:55:9a:21:9b:06:76:08:02:78:a1:f3:71:
54:a8:41:f2:df:f4:c9:01:a0:71:6b:26:c7:a8:41:
70:1e:43:88:10:2d:d7:f3:7a:5b:7d:83:4b:63:a4:
39:46:36:e7:d3:e0:83:bd:29:ea:0e:98:01:dc:7b:
11:48:37:e7:84:bf:f6:85:c8:98:69:98:d5:36:2e:
92:32:56:f1:cd:9d:87:c7:db:3d:64:f4:86:f3:fd:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:BE:2C:87:36:EB:92:9E:6B:5F:E5:1C:DE:6F:9B:BE:4E:4C:C8
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e4:03:77:8a:71:cc:c0:3b:90:2b:ee:9c:75:53:8a:35:d2:
75:ef:fa:dc:09:62:0a:57:aa:b2:4b:e7:4a:97:e7:39:66:96:
dd:af:ed:29:ab:d2:c4:08:ff:41:8d:75:a7:0d:3f:e3:cc:4c:
c2:d3:4a:a8:92:d2:ae:71:0e:dd:f9:9d:d4:88:6f:d4:d5:ea:
2d:7b:5f:65:75:9e:55:32:e8:33:1f:7d:cf:8e:c3:8b:69:4c:
46:6c:b0:7d:c3:4c:9e:e4:63:92:c2:64:c5:c0:64:3b:16:06:
35:f4:2b:24:4c:79:9e:f0:90:35:f6:66:62:fb:a8:ee:3a:41:
f9:e5:fb:60:79:f6:b8:87:cf:58:c7:cb:8b:52:9b:02:c1:de:
29:02:99:4b:1b:a3:2b:d9:7b:ce:c0:95:03:73:1c:45:59:87:
b9:a4:07:fc:35:a5:62:be:ac:ce:2f:bd:56:c8:ce:d1:c5:7d:
5c:d4:eb:11:84:de:c1:0a:23:95:d4:ab:cd:61:3a:18:43:db:
6c:5d:eb:c0:af:82:5c:1e:12:7c:39:f1:b7:fc:fc:d6:c2:e2:
36:43:5b:8c:38:d0:6c:77:69:74:fa:4e:d6:18:43:0d:03:3a:
c2:81:2f:cb:c8:c4:3e:51:ec:50:92:e8:f2:40:f2:89:34:71:
0a:70:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:30 2025 by rpki-client