Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: XsM0wPNwqEH9ahcQ0ICjiL/HoORZc39T2QPtY6TJ9JM=
Subject key identifier: 61:02:97:64:B8:08:38:80:73:9D:C8:57:B2:87:E1:CF:DD:5F:39:1B
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019883C331ACCF3502820DC7E4B86D9F8227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0D2E
Signing time: Thu 07 Aug 2025 09:01:04 +0000
Manifest this update: Thu 07 Aug 2025 09:01:04 +0000
Manifest next update: Fri 08 Aug 2025 09:01:04 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: fvmDkfPYDtR7b1cZOsvgxmdU9Nl7O1zCHMxaDCaH0x8=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:31:ac:cf:35:02:82:0d:c7:e4:b8:6d:9f:82:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Aug 7 09:01:04 2025 GMT
Not After : Aug 8 09:01:04 2025 GMT
Subject: CN=61029764b8083880739dc857b287e1cfdd5f391b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:4e:b3:a2:0f:3e:fc:27:a9:87:13:c3:9a:
6d:1b:40:01:00:44:a2:be:ac:77:4d:5d:33:f8:02:
20:db:03:5c:3f:96:ca:72:ec:7d:f3:f2:46:d3:fe:
45:21:85:63:8d:cf:7c:6e:1c:b3:93:22:e6:b4:5d:
27:a6:ca:89:b9:23:12:e5:9b:37:f8:97:28:50:99:
c5:41:90:51:e5:06:64:cf:23:52:3d:0e:76:d2:b2:
a1:18:1c:cd:5c:e4:cc:4b:aa:5a:82:f1:6d:48:08:
10:92:9a:81:ab:7c:c7:e0:d0:32:99:b4:51:ef:0d:
79:47:00:09:a7:84:e7:f1:c2:63:61:df:41:d9:61:
82:93:53:98:ab:e5:75:a0:3d:d1:a2:c1:ba:27:29:
78:02:b7:a4:8d:42:bc:c2:60:d2:76:9c:07:c6:6c:
b8:1a:ca:1e:f8:c3:0b:06:9e:aa:62:30:80:c9:aa:
f6:b8:f0:94:46:d5:22:4a:e2:b3:82:84:59:13:d4:
1b:b8:23:c0:fe:06:e7:88:e8:90:ad:1b:4d:a8:5f:
45:b1:db:65:2f:f6:f0:3a:3d:71:f3:90:32:5b:63:
80:dc:92:32:5a:4a:af:d7:f4:c5:87:fe:ee:0e:31:
17:c5:b4:8d:6d:dd:e9:bd:ce:7d:8d:48:83:66:f7:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:97:64:B8:08:38:80:73:9D:C8:57:B2:87:E1:CF:DD:5F:39:1B
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:23:e6:7f:bc:09:f0:09:67:9f:0a:ba:25:57:ac:a1:09:
95:44:b6:35:f0:78:45:24:b2:90:0d:02:46:69:f0:1f:f6:69:
89:04:4d:4d:11:84:53:0f:62:ce:6f:18:a1:ab:a4:75:58:98:
29:d3:33:77:d6:37:72:10:12:e1:e1:d5:13:97:09:61:1e:56:
a3:51:ff:b6:bb:98:11:38:af:36:b5:25:91:38:d0:71:e0:bc:
59:4b:ce:a9:6f:1a:cc:3a:fa:7a:2e:6f:0c:b6:23:54:08:65:
f1:90:9e:bc:6c:b5:d8:b7:19:2a:5d:fa:b9:58:63:fb:67:5d:
da:a5:f5:ed:c2:4a:8c:aa:a1:f5:70:c9:4f:a8:bd:66:c5:32:
0a:49:97:e8:f6:34:b9:49:c6:7f:3a:7b:f2:8a:2c:fe:d5:82:
04:59:40:24:28:33:75:49:a4:ad:3f:92:55:f6:a6:ba:70:87:
e4:ad:d6:f2:59:fb:06:fd:5b:7e:0f:6c:e1:9f:80:28:e9:32:
cf:fa:b2:13:b9:98:46:8d:e3:9d:dd:22:a8:43:8e:62:e9:60:
af:95:1a:b6:a0:ab:c2:9f:6b:c9:42:69:9e:a1:ee:0b:57:92:
aa:01:d5:13:c5:b3:e4:56:c1:2a:a2:bd:98:36:fc:83:e8:3e:
a4:d5:00:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDwzGszzUCgg3H5Lhtn4InMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjUwODA3MDkwMTA0WhcNMjUwODA4MDkwMTA0WjAzMTEwLwYDVQQD
Eyg2MTAyOTc2NGI4MDgzODgwNzM5ZGM4NTdiMjg3ZTFjZmRkNWYzOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz79Os6IPPvwnqYcTw5ptG0ABAESi
vqx3TV0z+AIg2wNcP5bKcux98/JG0/5FIYVjjc98bhyzkyLmtF0npsqJuSMS5Zs3
+JcoUJnFQZBR5QZkzyNSPQ520rKhGBzNXOTMS6pagvFtSAgQkpqBq3zH4NAymbRR
7w15RwAJp4Tn8cJjYd9B2WGCk1OYq+V1oD3RosG6Jyl4ArekjUK8wmDSdpwHxmy4
Gsoe+MMLBp6qYjCAyar2uPCURtUiSuKzgoRZE9QbuCPA/gbniOiQrRtNqF9Fsdtl
L/bwOj1x85AyW2OA3JIyWkqv1/TFh/7uDjEXxbSNbd3pvc59jUiDZvcZ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGECl2S4CDiAc53IV7KH4c/dXzkbMB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUoj5n+8
CfAJZ58KuiVXrKEJlUS2NfB4RSSykA0CRmnwH/ZpiQRNTRGEUw9izm8YoaukdViY
KdMzd9Y3chAS4eHVE5cJYR5Wo1H/truYETivNrUlkTjQceC8WUvOqW8azDr6ei5v
DLYjVAhl8ZCevGy12LcZKl36uVhj+2dd2qX17cJKjKqh9XDJT6i9ZsUyCkmX6PY0
uUnGfzp78oos/tWCBFlAJCgzdUmkrT+SVfamunCH5K3W8ln7Bv1bfg9s4Z+AKOky
z/qyE7mYRo3jnd0iqEOOYulgr5UatqCrwp9ryUJpnqHuC1eSqgHVE8Wz5FbBKqK9
mDb8g+g+pNUADQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:41:29 2025 by rpki-client