Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: v6469e5+gleD3LZlFsOEa1G/JWAcvAsmd9B6XMYh/gw=
Subject key identifier: BC:54:43:6E:9A:C2:52:FF:D0:60:B0:2C:F9:A1:AE:D4:A2:08:1C:2C
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01976BBD76BC72D6004468C6F3AC544A2162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0C9D
Signing time: Sat 14 Jun 2025 00:01:08 +0000
Manifest this update: Sat 14 Jun 2025 00:01:08 +0000
Manifest next update: Sun 15 Jun 2025 00:01:08 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: ZYO/Bp3Kys3rJ0AoUgiXs8ZoB26ngrzcycIp3Cqv6w4=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:76:bc:72:d6:00:44:68:c6:f3:ac:54:4a:21:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Jun 14 00:01:08 2025 GMT
Not After : Jun 15 00:01:08 2025 GMT
Subject: CN=bc54436e9ac252ffd060b02cf9a1aed4a2081c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ee:50:6d:6f:42:28:73:04:12:8b:08:40:48:
55:7c:a4:8a:60:2b:83:e8:db:30:06:ff:94:1d:2e:
4f:3e:1e:c9:89:21:80:c0:6b:d7:d4:85:8f:ec:dc:
ba:23:f8:07:42:be:4e:86:2e:ee:4c:72:b2:7b:14:
92:dc:6c:ca:30:a9:64:68:af:d0:ab:54:f6:a8:fc:
bb:4b:58:a5:04:fc:be:c6:51:52:66:91:79:cc:66:
d7:32:ec:05:99:df:cc:0b:ee:25:c9:be:e5:ba:05:
18:a3:a5:3b:74:2c:80:bb:d5:bf:76:34:ee:4c:0e:
1d:33:91:7b:17:7d:fe:e7:aa:2d:b4:eb:d8:30:3a:
cf:42:ad:0e:9b:70:d7:22:1a:45:85:ab:02:7f:55:
16:2e:bb:01:d6:1d:a9:f1:18:08:f1:bf:88:a4:f2:
ae:cf:f1:6b:27:c5:01:27:fc:cf:48:13:b7:32:ea:
fd:bd:df:a1:db:a3:f3:e5:34:6d:3c:ec:8f:b6:85:
d0:c2:a2:52:d0:7b:26:de:f0:b7:c4:48:47:61:23:
1e:c4:4d:7a:5e:7a:9d:d7:0f:de:30:d8:87:30:54:
50:6f:64:88:a9:8d:75:6d:c1:38:9a:e2:56:9f:52:
38:29:e5:11:e8:f6:5a:84:f9:2c:46:75:40:f0:75:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:43:6E:9A:C2:52:FF:D0:60:B0:2C:F9:A1:AE:D4:A2:08:1C:2C
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:17:79:b5:af:e2:e1:ac:dc:a9:59:bf:f8:de:21:39:1d:b4:
77:79:f3:08:98:97:55:c7:c2:14:fb:1e:b6:81:e5:88:d1:39:
1b:15:01:80:c8:dd:81:3a:80:03:9b:74:1a:81:bf:85:13:9b:
28:77:4f:52:f0:53:47:d0:66:61:9a:cd:d7:79:eb:76:80:60:
df:d8:fe:96:2f:06:e4:fe:fb:14:b8:62:82:39:6f:70:75:d7:
12:f3:17:d8:63:7f:39:8c:81:e4:55:fc:00:7a:cf:91:48:0e:
70:a0:25:dd:d3:05:cb:52:19:0e:fa:fe:78:5c:a8:b3:e3:3f:
cd:63:67:48:51:1b:95:f5:c3:f1:c4:7c:b4:b4:8b:63:60:2c:
12:ee:ef:d0:9b:ef:ec:c0:6b:f3:17:bb:da:6d:22:2c:df:a5:
a4:db:03:27:36:e6:c0:1f:a2:aa:4c:4c:b6:39:13:df:7f:fc:
05:86:33:66:ed:0a:e2:49:cb:e7:4f:f4:e2:f7:39:d7:8d:cd:
28:a4:f1:ed:fd:82:ee:97:6a:11:36:9d:4d:64:cb:02:24:24:
72:1c:09:97:81:24:58:34:9f:bb:2f:49:40:e4:82:d4:28:69:
94:eb:59:fe:ee:33:f7:c2:dc:d2:57:0f:ce:11:5d:07:65:5e:
3d:76:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:40 2025 by rpki-client