Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: SuJYndFQWg4loGjlqRTZydCvbBkQrdVjv4+3kDovVKA=
Subject key identifier: 4D:CD:D3:63:7B:36:F5:67:3D:8A:22:20:FB:18:1B:B9:67:47:E5:2C
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 019771F5CF3AAD417CE63C27AB0A4EBB43AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 158F
Signing time: Sun 15 Jun 2025 05:00:24 +0000
Manifest this update: Sun 15 Jun 2025 05:00:24 +0000
Manifest next update: Mon 16 Jun 2025 05:00:24 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: 9uC2jhGJFq7HQgm5qVuQ8I0CKcSdZOtMLrlM2/+zrEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:cf:3a:ad:41:7c:e6:3c:27:ab:0a:4e:bb:43:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Jun 15 05:00:24 2025 GMT
Not After : Jun 16 05:00:24 2025 GMT
Subject: CN=4dcdd3637b36f5673d8a2220fb181bb96747e52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:b9:bb:33:6d:b4:6d:f3:cd:24:4e:c8:4e:
e9:8e:16:c2:16:f2:00:fc:ea:35:16:1c:cd:7c:cf:
9e:fd:de:bd:ec:df:30:da:0c:7b:7f:c0:3e:91:40:
fb:b0:33:05:10:48:97:a0:a9:b3:11:03:c2:76:77:
20:f7:67:47:57:60:07:2c:1e:2f:1d:fe:de:d8:0d:
2e:57:a0:7a:a4:94:3b:08:90:a5:70:de:3d:db:86:
ce:82:5f:d9:d8:bc:e0:10:04:5a:6f:a7:7e:e0:05:
7d:46:88:82:33:96:19:9f:62:c5:90:a4:dc:64:5c:
89:dc:6c:8a:41:e3:e2:7f:db:1d:bd:7c:88:55:c6:
da:a6:26:44:0b:94:d4:e6:2a:39:53:71:8e:cd:62:
df:a9:44:53:a0:4f:c8:cb:36:bb:dd:f1:d6:07:ec:
92:9f:df:e4:38:8e:53:51:d1:ad:b1:a0:ab:f3:56:
16:3c:96:ee:f0:36:2d:18:4f:0b:97:17:b7:4e:5b:
c1:5a:86:db:95:b7:bb:7c:20:58:7f:b7:12:34:08:
9c:d9:b5:64:22:e2:87:6e:1c:67:a3:25:98:66:19:
a1:31:bd:83:e9:0c:af:b9:e7:8b:14:25:80:ae:ed:
d8:84:00:81:42:74:30:74:2b:90:04:cc:0c:0a:00:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:D3:63:7B:36:F5:67:3D:8A:22:20:FB:18:1B:B9:67:47:E5:2C
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:67:6d:dd:b9:6e:1e:21:6c:5f:da:1a:97:ce:cf:9b:4d:ac:
5e:12:a7:08:f5:18:00:ac:45:0e:9b:31:6f:aa:6c:41:dd:f3:
0f:3d:45:f6:a9:76:62:fc:f0:ff:13:36:ca:5f:ca:2c:aa:6b:
1d:cc:3d:58:98:dd:7b:50:6f:50:eb:63:58:fa:5c:05:fe:be:
94:13:84:3e:64:8c:76:27:de:b1:5c:85:39:b3:03:4e:ef:ad:
08:11:01:f2:e0:73:61:c7:d3:d5:eb:48:15:7e:01:9d:1b:bf:
21:19:98:81:ef:af:07:f9:c9:c0:eb:54:63:d4:37:2a:15:3b:
3c:87:3b:96:f0:aa:63:df:4e:dc:5b:49:04:6c:a6:c3:d4:9f:
f8:7d:67:01:a2:20:48:c2:5b:7a:64:3c:7a:50:a6:c9:8f:23:
12:e7:36:a7:bf:0b:7e:33:cf:0c:10:c0:58:6f:1b:1a:06:d8:
35:f3:93:97:21:e5:f8:b9:23:76:30:2e:a8:ac:f1:8a:1b:6f:
b4:b3:50:b9:b3:bf:3a:13:0e:ed:56:79:c6:c2:d5:aa:8b:79:
86:78:e8:1b:c1:86:d0:4a:ad:a8:23:a5:22:5d:1b:70:9d:ef:
a1:8e:16:84:b6:95:09:55:26:1e:bf:b4:31:ae:4b:7b:2a:d4:
d6:c3:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:49 2025 by rpki-client