Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
File: CpfAyBiGg3PEAUcVBTra9hrx2h0.mft (raw, json)
Hash identifier: xgwGZPgyDHGmXZYJrEopboPhXcuJw5M1etHVUgRGyyI=
Subject key identifier: 21:93:FC:CC:25:C9:9C:A9:CE:1B:02:DC:75:09:67:FF:1F:1A:1C:3A
Authority key identifier: 0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
Certificate issuer: /CN=0a97c0c818868373c4014715053adaf61af1da1d
Certificate serial: 01987562C441A06EFFA46D8DF8F9BD8DF36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 14:01:03 +0000
Manifest this update: Mon 04 Aug 2025 14:01:03 +0000
Manifest next update: Tue 05 Aug 2025 14:01:03 +0000
Files and hashes: 1: CpfAyBiGg3PEAUcVBTra9hrx2h0.crl (hash: 8OFnocmemOHUaaX65E1Hh2r7AMQh+JaBDFUEfHKhU9A=)
2: _qAUmpmDNefd9UH0oGsDdu0Dm10.roa (hash: dhnP4xuQumbVUsoW5XRDL/9RukaAPXCZivf9aCXaQyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:c4:41:a0:6e:ff:a4:6d:8d:f8:f9:bd:8d:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a97c0c818868373c4014715053adaf61af1da1d
Validity
Not Before: Aug 4 14:01:03 2025 GMT
Not After : Aug 5 14:01:03 2025 GMT
Subject: CN=2193fccc25c99ca9ce1b02dc750967ff1f1a1c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:a5:42:ed:3a:0b:46:47:e2:cd:5d:12:89:
48:fe:91:6b:3d:2a:68:3e:8d:bb:7d:ec:6d:10:f9:
70:76:a9:4b:51:b7:9a:6b:e9:e1:2b:1f:c2:08:fa:
c8:52:84:4b:9c:23:bd:a4:37:0d:99:b3:83:10:f4:
5c:90:6d:ad:be:a5:54:dd:db:fb:79:13:13:8d:ed:
7a:42:cc:39:5e:0e:a5:ee:ba:b3:1a:52:66:05:c9:
bb:a3:b6:94:62:e7:d7:f6:95:dd:db:c9:cc:f9:33:
f7:2a:78:37:7d:6e:7a:d3:42:b6:8e:a0:b9:1b:ab:
be:39:5a:16:8d:a1:6c:9f:80:2b:f6:3f:12:c6:03:
09:29:86:cd:80:f7:51:77:f8:a8:0c:1b:08:5c:41:
15:75:66:cc:f4:52:a5:1f:66:c3:9b:d0:61:a1:fb:
b6:a3:c9:19:9a:f5:4d:e3:1a:fd:e2:a9:f4:a6:ee:
09:8c:40:df:5d:02:80:9f:ec:f8:ee:6f:30:ce:a0:
00:45:12:6a:bf:7c:64:6b:e1:0f:24:eb:c8:7b:51:
50:4a:9d:5b:79:f8:18:85:38:62:2d:01:5e:65:01:
2a:44:e4:73:82:59:46:34:4c:36:55:9e:03:64:16:
be:24:aa:d9:ab:96:3e:a2:2b:c1:a9:e0:6e:35:87:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:93:FC:CC:25:C9:9C:A9:CE:1B:02:DC:75:09:67:FF:1F:1A:1C:3A
X509v3 Authority Key Identifier:
keyid:0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d3:40:99:0a:ec:23:42:15:03:b7:34:46:39:b7:b3:2b:b7:
5b:c3:58:2a:3b:04:41:7a:24:ee:1f:2d:b1:2d:92:5d:e8:ed:
b6:f9:49:7f:87:34:c1:de:59:80:28:82:92:29:d7:bf:38:aa:
91:3e:e7:4c:be:8a:fa:b8:f0:09:10:5f:11:11:f2:e2:8a:ec:
87:73:a3:37:dc:fb:fc:57:8e:c9:2e:43:79:64:ce:e0:74:0f:
ff:b7:e0:a8:d5:d8:87:03:37:e0:d6:29:3d:38:78:b5:3e:04:
b2:51:91:6d:56:86:c6:9f:c9:9d:13:e7:80:db:e5:b8:13:dc:
83:51:6e:c1:bd:c8:c7:42:64:f0:54:bd:06:32:c2:aa:07:36:
40:1b:02:d0:bd:97:05:ac:0b:92:7b:fb:50:93:aa:49:33:82:
bd:d7:2b:70:8b:a1:4e:2d:c3:d5:0e:62:d3:7c:fd:57:87:a3:
9a:5e:4f:78:1c:57:15:85:62:a0:09:61:3a:a9:36:f9:68:64:
e0:f7:72:e5:de:4e:34:1b:76:e2:7d:56:75:fa:76:78:35:4b:
7a:55:45:98:78:ba:d2:e8:7d:2b:97:5c:dc:1d:60:dc:5c:19:
de:bb:d4:8c:a9:93:8c:45:a8:50:1c:c7:f1:dc:ab:3b:04:81:
07:7d:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:06 2025 by rpki-client