Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: NF58QF2owDG/eC1eZgMJXkTNYLCiMcmptxbXHr3QRAg=
Subject key identifier: C9:25:E2:E6:92:7D:EE:13:F1:CF:0C:85:F3:82:C2:9B:4D:F1:16:9D
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019771BF6FF3124C8830FAD3B6BE20B3A97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 04:01:00 +0000
Manifest this update: Sun 15 Jun 2025 04:01:00 +0000
Manifest next update: Mon 16 Jun 2025 04:01:00 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: j0WddZL1nG8P7I2T/P8A2H57Z6pmx8wTPiLK0uPBJlQ=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:6f:f3:12:4c:88:30:fa:d3:b6:be:20:b3:a9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Jun 15 04:01:00 2025 GMT
Not After : Jun 16 04:01:00 2025 GMT
Subject: CN=c925e2e6927dee13f1cf0c85f382c29b4df1169d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:a9:21:d0:c3:47:a8:4c:d4:aa:48:3d:3c:
fd:43:e8:a8:b8:ea:a0:93:05:2f:40:72:be:36:08:
ad:0a:db:b8:9d:47:c5:94:9f:77:f9:28:1f:3d:3f:
3a:bd:8a:7b:d8:65:21:08:b6:fb:e9:06:32:7f:12:
12:17:ac:39:7c:2f:d3:ad:d1:b8:f8:9a:f8:3c:f9:
80:47:6f:03:b3:88:89:2c:ce:f2:d8:2b:01:20:6d:
1a:a3:4a:1d:21:88:54:57:4d:d2:23:4a:41:91:ba:
fb:2b:ae:f7:f9:30:55:3f:cd:3e:91:6a:95:6a:9d:
0e:d1:0e:70:85:b9:bc:da:c8:17:ec:74:35:1d:2d:
3d:cc:f5:dc:cc:c9:48:b6:7e:20:77:3a:e9:a9:f7:
6c:3c:0c:8d:fc:81:42:bb:e4:58:25:58:a8:64:c6:
51:eb:f8:71:8b:b7:54:84:bc:b5:e4:96:70:77:c2:
be:34:78:30:d5:9c:be:f7:00:90:2f:c0:80:1d:d4:
e0:8c:68:00:43:e1:c4:94:d7:9e:d5:a6:d3:aa:95:
d5:57:37:ba:63:37:7d:c0:7e:f5:03:f2:5d:63:29:
5e:35:18:d9:99:6a:cc:8d:12:0b:23:42:40:84:bd:
1e:66:17:16:0a:90:b0:eb:f9:43:49:06:d3:29:11:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:25:E2:E6:92:7D:EE:13:F1:CF:0C:85:F3:82:C2:9B:4D:F1:16:9D
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ee:d0:13:05:57:bc:4d:85:ea:da:03:a6:33:83:3c:b1:77:
e3:1e:15:0c:d1:0a:60:17:ba:91:3f:d7:32:c8:cb:a2:7e:89:
bd:1c:d1:e6:d3:ce:f5:74:91:74:56:75:00:ae:a5:5d:41:f8:
55:fe:8e:ec:f5:5d:c0:ca:99:7a:a0:da:7c:21:a2:50:03:19:
ba:ae:3b:e1:8c:45:12:61:6f:2e:df:35:79:89:eb:9e:3c:0c:
e8:e3:8c:9d:05:c9:40:21:1b:8c:7b:7f:6c:dc:97:ac:17:59:
b8:a8:eb:f6:f3:3e:9e:94:69:c6:75:1f:a4:d0:f1:9f:82:39:
db:73:5f:5d:bb:4d:52:d3:ee:a7:f8:0e:bc:12:89:3a:56:59:
a6:33:5d:18:db:02:1f:4b:c4:6a:ef:a8:09:9b:e2:71:5d:ce:
47:69:f0:46:e8:f0:2f:c2:cd:1f:de:d9:d7:84:c0:80:f3:7e:
11:40:22:20:9b:be:81:0c:46:6d:ef:83:cc:16:f5:55:74:80:
ec:bf:48:dd:57:f8:91:58:5d:bc:ac:fb:3e:8d:29:b5:00:da:
41:84:39:d8:b8:44:78:5e:30:62:0a:a1:a2:38:40:39:25:86:
6d:f5:ba:59:f6:e5:95:0d:21:61:b4:9c:2b:fc:da:88:a9:e6:
33:b9:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:36 2025 by rpki-client