Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: KpS0lvR+1DLBBHK1zv8v4nxcLAqhdWOJFSYEsBPGQ1A=
Subject key identifier: 5C:C4:58:13:07:0A:F1:E5:B0:2F:BC:B5:36:97:87:2F:A0:54:62:E3
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 019873E2D516DDFDE6EB0774B664754682E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:01:42 +0000
Manifest this update: Mon 04 Aug 2025 07:01:42 +0000
Manifest next update: Tue 05 Aug 2025 07:01:42 +0000
Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: xsKKDeeBfa7XEi/Fb1MVDFmKf9n5yLomcHkAtMPSXxY=)
2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=)
3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d5:16:dd:fd:e6:eb:07:74:b6:64:75:46:82:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Aug 4 07:01:42 2025 GMT
Not After : Aug 5 07:01:42 2025 GMT
Subject: CN=5cc45813070af1e5b02fbcb53697872fa05462e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:43:1d:f4:5d:7d:0b:cd:e0:47:85:02:54:
62:e2:77:48:ed:b0:1f:a5:00:62:73:27:24:52:ca:
0b:91:9d:cf:08:87:65:3a:b4:4d:06:ee:ed:86:79:
e3:18:35:fb:04:d5:fb:fd:14:fb:8f:08:37:e3:87:
e1:6b:93:e1:67:b1:44:23:1c:ad:ae:d3:ab:a2:ab:
dd:00:f1:40:e8:45:7a:63:46:32:73:b2:82:a1:90:
94:14:ed:54:6a:0f:37:53:36:d6:62:c6:4b:82:84:
a0:35:7b:04:63:41:0e:a7:9a:02:c2:b0:b5:3a:a8:
cd:e5:4c:78:60:38:6d:9c:70:8a:44:96:af:87:56:
3f:3f:8a:ce:0d:a6:db:8c:5d:29:8c:dc:93:6b:4d:
91:7c:81:41:33:2e:92:fb:62:1e:50:62:af:ac:a5:
90:f9:9d:a7:d5:25:ab:85:45:a0:81:79:f8:42:82:
b4:8b:f4:0d:8e:93:79:57:b8:ee:99:53:51:ef:68:
93:74:2a:a7:8e:c2:44:ef:6d:83:71:f4:a9:a0:dd:
ce:bc:04:61:25:d7:7e:56:07:1b:a1:67:94:2e:f2:
97:f5:03:25:0f:dd:29:18:43:db:44:3a:71:a2:d4:
ed:a7:09:50:0f:de:d8:15:c3:a5:9a:06:5b:a4:33:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:58:13:07:0A:F1:E5:B0:2F:BC:B5:36:97:87:2F:A0:54:62:E3
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:14:d1:6e:f7:09:4a:b3:af:9e:ec:cf:90:32:c4:38:3e:8e:
89:c9:60:7e:46:cf:6a:ad:96:d1:29:b7:f5:c8:76:2f:e6:60:
b5:8d:e0:34:78:89:71:89:24:af:f1:84:01:0f:96:2c:71:20:
8a:41:e1:0c:e0:91:f5:77:07:e6:f6:00:8d:0f:0e:61:b3:71:
82:fa:a9:e3:1c:da:56:55:29:12:e3:cd:29:45:a9:eb:c6:2b:
5d:6d:19:cf:02:bc:31:9d:fc:93:04:a3:2b:35:ab:c9:99:b2:
73:40:6b:fb:9c:8c:b4:7a:89:ae:43:fc:74:54:e7:4f:10:03:
ec:9f:72:c9:a1:d2:26:2a:bf:a7:0a:cd:7f:e0:37:6f:9d:43:
ff:8c:60:0b:2d:89:2c:46:9b:8e:d0:aa:92:c9:bc:14:04:de:
80:5d:8b:f4:37:88:46:7a:69:41:27:3b:ce:c6:18:12:db:2c:
ab:3b:a3:26:e0:ba:5d:4f:8d:36:d5:7a:91:ef:0d:73:62:61:
1b:f3:8f:22:75:91:82:76:da:e8:03:9e:49:52:1b:9c:d9:e1:
e1:ff:34:e1:bf:4f:fa:b7:1b:73:bc:e6:f3:c8:4e:fa:a8:f5:
04:3c:24:22:cd:f0:5c:2a:74:19:46:46:13:d8:3f:dd:2d:4b:
56:a9:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:02 2025 by rpki-client