Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: Vx6+X1pflqaofd41Cq1UqSwgb7e66UjLbZJVajy9ACQ=
Subject key identifier: 3D:A1:B9:E8:40:3F:87:30:F0:44:D9:48:D0:FE:2F:94:75:6E:C7:95
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 01976D069251611DCAA2522E8317099FB2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 06:00:36 +0000
Manifest this update: Sat 14 Jun 2025 06:00:36 +0000
Manifest next update: Sun 15 Jun 2025 06:00:36 +0000
Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: JQ7AznswNwD1gm+A8ksNSk9gyGQtr4CwGp9taw1rdEQ=)
2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=)
3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:92:51:61:1d:ca:a2:52:2e:83:17:09:9f:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Jun 14 06:00:36 2025 GMT
Not After : Jun 15 06:00:36 2025 GMT
Subject: CN=3da1b9e8403f8730f044d948d0fe2f94756ec795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:2f:e2:3a:16:6f:ab:93:51:94:c7:c5:6d:
ea:34:c4:8a:12:2b:23:4b:1e:7b:2b:ea:8b:66:01:
82:1c:67:78:a3:d8:d4:e8:d7:8b:7c:d4:6a:6b:42:
ba:36:a2:26:50:a7:f3:a2:70:37:c4:8d:1f:3d:76:
98:de:2a:77:98:ae:0c:5b:89:84:5d:7f:06:21:83:
04:ee:ee:22:1a:4d:46:9a:e6:88:08:d1:69:a9:4b:
51:8f:2e:80:82:02:e5:49:6d:98:75:28:0f:5f:be:
03:e0:f0:ad:aa:de:f2:bc:6a:6f:9f:9a:32:be:e7:
44:60:3e:9e:0b:ff:4e:46:67:db:5e:ce:bb:79:38:
46:50:53:23:e2:81:a4:73:12:37:9b:d0:50:d7:f6:
c5:de:38:21:f3:23:93:07:60:1b:4e:ff:6e:a8:89:
c1:e1:63:2c:ee:e3:39:65:a6:f4:7a:45:81:ed:81:
fb:c0:41:0a:21:e0:34:94:24:23:09:cd:e4:fb:fd:
0a:0e:ff:46:ba:76:76:c4:4a:c9:cc:2d:90:d0:31:
1c:fa:11:c4:64:de:57:7c:bf:d2:68:44:4e:d6:49:
6e:cb:50:65:3a:e5:07:af:58:54:61:c6:df:2e:42:
ac:3a:c9:29:56:e4:9c:97:49:55:c7:db:23:83:d3:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A1:B9:E8:40:3F:87:30:F0:44:D9:48:D0:FE:2F:94:75:6E:C7:95
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b8:07:b4:a0:18:23:5a:18:b0:46:63:09:9c:cf:fa:af:78:
d2:f2:59:c1:72:5e:6a:21:97:0e:b7:9f:e5:99:67:0c:7d:50:
81:9b:16:2e:88:61:60:5a:8d:39:3b:b6:4a:10:f4:5e:da:43:
de:bd:98:44:44:e3:c7:e0:46:9f:d6:68:4d:9d:91:e4:0f:fc:
4d:78:35:fa:42:b3:cc:cc:88:5b:55:b9:51:1b:f8:2b:7f:57:
80:bf:20:e5:c7:db:a6:72:0d:66:53:20:af:e6:14:35:fe:da:
01:3d:0c:6d:6d:ed:b9:f8:91:0f:d1:00:a0:76:06:c3:30:05:
e2:98:d1:79:d4:57:b0:91:71:5a:d4:cb:35:87:d2:62:cf:5a:
35:dd:fa:45:07:f9:c7:5b:a2:0b:44:9f:51:6f:47:8a:02:5f:
db:58:f1:64:8f:39:5d:e1:91:87:bb:df:90:79:cb:66:8e:24:
82:d7:7e:68:cf:d7:75:ab:3f:7b:17:2a:5a:5b:53:b5:d5:81:
a7:af:e2:dc:30:e4:88:07:3e:e9:4b:1d:23:af:72:03:1f:fd:
71:f3:a1:f4:ca:22:97:ae:9b:6c:17:85:a8:40:b4:41:05:11:
36:fe:83:fc:ac:ac:f1:60:a8:72:68:a2:f9:75:42:d0:8f:2b:
9a:66:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:15 2025 by rpki-client