Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: hfzgvR9PXIGrV7jH+nh0jJxKgN23JzD20Tazy+yXj/8=
Subject key identifier: 4A:FA:63:5A:39:32:7E:CA:D4:46:EB:39:10:BF:0C:BA:69:3B:D2:13
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 0199654924F115A4CC769587A26882BB2283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1626
Signing time: Sat 20 Sep 2025 04:01:56 +0000
Manifest this update: Sat 20 Sep 2025 04:01:56 +0000
Manifest next update: Sun 21 Sep 2025 04:01:56 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: FqPsS8+8syGVR2zDaHbjRk+fbpSddnB36eBaN13g7XA=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:49:24:f1:15:a4:cc:76:95:87:a2:68:82:bb:22:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Sep 20 04:01:56 2025 GMT
Not After : Sep 21 04:01:56 2025 GMT
Subject: CN=4afa635a39327ecad446eb3910bf0cba693bd213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:cd:a9:0e:fe:29:cb:5d:c2:ff:1c:df:c9:
f4:c5:0b:95:d8:0f:88:5d:f1:e5:92:1c:40:ed:d5:
99:ed:df:ed:57:3d:f4:52:70:19:53:2e:5e:4f:f8:
01:ec:9b:43:03:bf:c4:29:3e:58:36:0c:fb:79:09:
22:c3:44:f2:d7:29:94:b9:8c:30:b0:94:60:25:f0:
bb:26:14:fe:67:7d:3c:78:97:47:cc:19:3e:6d:29:
90:43:b4:35:5f:80:2f:40:7e:6b:c9:1b:e2:80:37:
b8:8d:51:ab:3b:93:38:ca:39:ab:43:e4:83:7a:3b:
de:d5:7b:7e:2b:0e:22:e3:71:7d:aa:13:1f:57:00:
8f:7d:61:86:a5:c9:f4:4f:b5:6e:e0:c8:84:a4:08:
01:bc:cb:ab:b7:a9:56:f3:04:4b:a5:36:91:1b:3e:
d6:d7:47:a6:66:78:ae:a9:e4:1f:46:8c:be:91:12:
b9:69:d2:46:dc:f8:6f:c9:85:aa:26:76:9f:f5:d8:
95:b8:1c:00:55:79:f6:a0:af:8d:8b:88:a7:36:5e:
c8:68:02:5e:df:ff:81:10:7d:6b:2c:1d:ba:de:2b:
bc:2d:f5:c3:17:37:0f:20:6d:85:b6:c8:e8:61:bb:
87:05:36:70:eb:a1:d0:71:0b:8b:d3:34:46:f2:1e:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:63:5A:39:32:7E:CA:D4:46:EB:39:10:BF:0C:BA:69:3B:D2:13
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:fa:09:a6:62:8d:0d:ca:33:f4:68:85:31:5e:9c:81:b9:
57:49:4a:28:96:4f:07:39:3e:8c:6b:a1:ef:6d:41:05:5e:77:
ce:ae:ed:30:10:24:d7:11:d6:42:ef:90:57:2d:63:3f:cd:a7:
13:5e:ea:d7:09:9c:a2:77:1e:23:aa:71:7b:81:8f:0b:c3:01:
a4:e1:13:b5:11:89:9f:4e:33:82:8c:20:a0:8a:96:c1:52:94:
73:98:90:b2:03:97:a1:4b:d1:19:95:18:af:00:ab:60:78:d4:
79:0c:de:27:d0:0c:31:ce:3d:cc:03:e7:97:0c:54:41:b1:87:
da:5e:69:7e:67:96:de:26:df:6d:80:70:4c:f6:0d:5f:d6:30:
1a:ff:67:d7:74:ff:18:e9:00:a2:0b:8b:69:9c:75:a7:ff:68:
c0:c9:cb:07:0d:e8:d7:3e:fa:0d:79:5d:1c:e9:43:29:56:5c:
a1:e6:6f:ad:7b:bf:41:e4:2a:e1:d9:07:50:02:1d:4d:46:eb:
f8:fc:58:3a:5a:17:ad:0a:b5:5b:fc:d0:82:e0:40:7d:60:0f:
1d:ee:f8:a3:eb:24:34:f6:4d:65:61:d9:2a:43:55:49:32:34:
2e:a4:39:fa:ab:4c:e5:d9:63:1e:f4:ef:1e:34:c6:f2:fc:55:
69:dc:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:34:49 2025 by rpki-client