Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: qrUqL/4obWZvL1xvUj60wRBvRkNUQXV/6FU/4lcopuk=
Subject key identifier: 42:A7:93:79:3A:41:B0:FA:CB:B3:A4:D8:0F:20:84:09:78:B8:B3:14
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019896A4B5294411C0A9CDCD57CD6A0B6CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:00:33 +0000
Manifest this update: Mon 11 Aug 2025 01:00:33 +0000
Manifest next update: Tue 12 Aug 2025 01:00:33 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: FyUqrQrPUvHVAChlrqbwEReOuIVtP32syxy7cWJ9qJs=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:b5:29:44:11:c0:a9:cd:cd:57:cd:6a:0b:6c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Aug 11 01:00:33 2025 GMT
Not After : Aug 12 01:00:33 2025 GMT
Subject: CN=42a793793a41b0facbb3a4d80f20840978b8b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:6a:7a:5e:46:a9:34:dd:b8:2b:80:9e:0d:
c1:2b:7c:a2:b2:b4:a2:92:0f:32:fd:dd:15:74:b3:
74:3a:f8:54:00:d2:ab:90:30:cf:d5:8d:9b:58:12:
65:9b:07:bc:82:3a:32:66:af:8b:64:0c:30:a3:ee:
80:8d:46:d1:53:be:21:8d:2a:0a:4a:44:eb:ba:de:
c6:f5:31:7d:9f:dd:58:30:8e:85:c0:93:c2:f4:94:
66:5f:d0:b7:85:24:b2:84:aa:54:d5:eb:0d:56:73:
9e:df:64:a9:6a:fe:14:08:13:39:6c:c4:6d:e6:3c:
86:0e:92:20:81:2b:f6:f9:65:4f:70:6c:80:2b:67:
4b:4c:87:29:4e:be:1e:6f:f5:97:34:94:b0:d9:ea:
1e:89:87:84:1a:69:47:bc:b1:f3:01:e3:da:f5:3a:
90:65:75:0f:cd:6a:d8:c4:29:8e:f4:59:08:05:fd:
4f:e2:cf:e3:ed:4a:6b:8d:b2:70:3f:dd:c2:59:5e:
17:73:ae:3f:37:52:22:45:8f:d5:5e:a3:1a:2c:e2:
90:62:57:16:9c:2d:a1:ba:3c:7d:f8:4d:99:64:8f:
e9:8a:3e:76:08:42:f0:18:89:d3:48:e5:c4:29:43:
f3:84:d6:c6:80:1b:6c:60:e9:df:42:93:e1:c7:4b:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A7:93:79:3A:41:B0:FA:CB:B3:A4:D8:0F:20:84:09:78:B8:B3:14
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d2:e8:89:71:d1:bf:a3:42:d3:cc:63:fa:23:3d:14:b5:fd:
a3:25:65:91:9b:11:a6:b9:2d:ba:f1:5a:59:a3:5f:dc:cf:54:
45:8d:ff:96:74:aa:73:46:90:ce:33:1e:d0:dc:e2:a6:56:40:
79:b2:a2:fe:26:0a:8d:7b:aa:a1:60:ba:74:f2:0d:30:cb:e3:
f9:65:71:7b:91:87:b2:cc:68:10:c2:71:7b:96:6d:42:39:8e:
0b:6d:77:70:a1:e5:a6:c2:71:8b:87:66:72:1a:46:d3:4c:eb:
0c:c2:21:0f:5f:3d:82:85:d1:b6:6b:0a:77:f4:66:a2:a9:5b:
d7:e8:8f:4e:73:f3:9a:e9:81:a2:20:e5:fb:7f:5e:cc:f2:cc:
2f:86:c9:18:10:83:44:05:ac:62:0b:e1:84:50:dd:db:88:bb:
7c:42:82:32:27:63:06:75:19:a0:8c:17:ac:79:34:5e:f1:61:
f0:5a:4a:10:77:22:c5:71:31:d3:7e:e5:c4:c0:a6:dd:e5:3c:
1e:09:9d:b3:6a:52:8a:f6:d0:68:c1:97:a4:30:04:7f:22:02:
76:a1:75:2a:5e:a0:89:b5:b2:20:c8:51:e0:53:28:1e:8c:2f:
1d:19:78:66:bc:a7:9c:6d:38:ef:73:e6:4b:3d:b7:6b:20:83:
5c:2e:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:47 2025 by rpki-client