Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: i56AIde1/tJD9yk2Z5/EilK2y+Eh0FF2nPLYb14VOcI=
Subject key identifier: 65:92:AD:5B:4C:DB:71:A8:D3:B3:65:65:0A:BD:DF:7C:1F:F6:84:BE
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01977CB12CA427CCEA460AFA37D6DAE9C3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 07:01:15 +0000
Manifest this update: Tue 17 Jun 2025 07:01:15 +0000
Manifest next update: Wed 18 Jun 2025 07:01:15 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: Kg8dUxxrggqNF3TL20vOHVaa+jES2kNIKX6mMSSglO8=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:2c:a4:27:cc:ea:46:0a:fa:37:d6:da:e9:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jun 17 07:01:15 2025 GMT
Not After : Jun 18 07:01:15 2025 GMT
Subject: CN=6592ad5b4cdb71a8d3b365650abddf7c1ff684be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:a9:00:aa:26:7f:59:7a:8d:87:14:43:c5:
a8:ec:77:54:26:30:30:5f:75:3f:13:65:9f:97:15:
ff:7f:31:34:0f:fb:f8:4e:9a:51:6e:97:10:a5:68:
51:67:db:06:da:0f:81:0b:a1:f1:3a:6e:c0:df:bd:
61:7d:f2:02:7f:5f:e9:36:7c:bd:03:ed:bc:58:eb:
24:68:7d:d0:3d:3b:eb:af:f8:4e:07:cb:75:54:66:
97:36:c5:ce:6e:a8:eb:a3:31:cf:e0:73:59:fc:58:
3e:74:6c:12:76:ee:29:79:2a:af:98:62:b3:9c:c2:
66:80:3f:5f:12:71:b8:e2:cb:b6:fc:7f:06:6f:55:
dd:d5:50:9f:eb:2b:74:42:2f:ac:7d:b0:76:41:2c:
57:15:cd:f1:d7:ec:cb:00:e1:c4:a6:cd:9c:00:a0:
d7:f0:8d:f1:d7:e8:7e:d3:5b:8c:24:ce:d1:06:e0:
50:d2:52:bc:08:54:dc:41:80:28:2c:ff:0d:89:df:
ec:ba:c0:c9:8b:a3:b1:bf:01:7f:53:95:b1:54:43:
66:ce:4c:09:70:8d:f5:8d:47:4d:25:4e:33:ef:e8:
73:ee:69:3e:bc:26:91:35:63:86:45:2a:12:47:ed:
2d:b3:26:15:a4:6c:c3:17:ee:ef:2a:2b:a0:72:af:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:AD:5B:4C:DB:71:A8:D3:B3:65:65:0A:BD:DF:7C:1F:F6:84:BE
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:81:be:6e:8d:03:99:25:dc:7d:68:ee:36:1f:81:63:29:6c:
c6:01:24:84:41:b4:cd:ba:eb:84:ca:43:01:8b:91:7e:5e:ec:
2b:58:50:ef:7a:75:e5:32:6f:6f:01:30:4f:f2:a2:e0:7f:44:
ed:22:77:08:12:3d:c9:36:ef:dd:cd:bb:49:24:3d:19:6e:f0:
c1:e6:77:e5:85:29:f5:f6:b4:fb:01:f7:6c:9e:55:aa:e0:39:
c5:ad:b1:08:e4:10:46:7e:94:f0:ab:47:9f:53:d6:3a:86:d8:
1d:86:76:88:ea:99:30:b8:f8:de:36:08:fc:d2:76:56:65:cf:
9f:27:fd:c1:13:97:68:2e:d9:38:cb:20:c8:84:95:17:00:c2:
4d:be:a1:f2:2c:ed:ae:78:3d:d6:a0:07:7c:94:93:7d:6a:e1:
3b:5b:ef:51:4b:51:5d:8f:bd:6f:38:94:28:48:ba:c8:66:c0:
82:94:34:39:ed:c2:57:61:e4:3c:03:29:1f:19:0e:58:67:9c:
26:ad:00:24:82:a7:8f:35:0b:5e:42:45:2e:67:a8:7a:21:fd:
72:5e:76:ee:eb:a0:34:8c:9e:7a:b9:55:aa:64:b6:9e:58:23:
63:f1:6b:3a:d5:ee:23:85:56:62:8f:42:d3:88:63:dd:49:03:
ee:ac:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:08:56 2025 by rpki-client