Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: mEfpK7kOSPFN9sb8QYAm3gZBWvrCm2fnzgjqTPSXu2s=
Subject key identifier: 48:09:81:F6:7B:A6:19:F1:77:60:60:09:13:37:7C:64:78:1D:C2:24
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019872988F0A8F7FE16DF770AEB4BC67FF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 01:00:57 +0000
Manifest this update: Mon 04 Aug 2025 01:00:57 +0000
Manifest next update: Tue 05 Aug 2025 01:00:57 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: QhugrHlHKJwRG4yQu8LuSXI1Y7/74eLHgY1/NLwKnHI=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:8f:0a:8f:7f:e1:6d:f7:70:ae:b4:bc:67:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Aug 4 01:00:57 2025 GMT
Not After : Aug 5 01:00:57 2025 GMT
Subject: CN=480981f67ba619f17760600913377c64781dc224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:aa:71:7f:75:37:0c:fc:40:95:30:c2:4f:
01:68:af:bb:f4:40:16:02:5a:2b:8e:cc:a3:b6:2e:
fd:40:61:c7:5d:9f:09:e3:2c:0d:e2:c4:35:32:78:
e0:de:f2:64:e7:7c:cb:ff:55:af:16:9c:e4:22:b7:
69:94:a3:6b:39:39:52:9f:01:1f:93:8c:93:41:27:
4c:e2:58:0e:b7:63:2f:53:40:84:ba:53:b9:48:a0:
d3:40:03:dc:59:f4:b9:58:0b:df:7b:ce:b2:c4:29:
4e:7a:5d:69:ac:b7:f5:53:73:dc:0c:99:e8:e8:fe:
5f:6c:e4:39:81:90:10:32:cd:18:50:c9:1b:bf:50:
9a:13:01:98:81:af:38:44:61:8d:a5:04:af:c8:99:
ff:9b:da:20:03:a5:9b:8f:50:1c:36:4c:0e:2b:8d:
55:7b:d6:49:ee:fa:ff:eb:20:69:4d:07:9f:33:26:
61:bf:be:b8:c1:a7:3f:fb:e0:c4:59:90:7c:57:5c:
1a:1b:cc:62:e9:e4:ef:19:90:ec:b4:7b:0c:a1:c4:
ae:68:b1:1f:59:75:d1:57:cc:e0:22:1c:74:4c:65:
85:b1:cb:a8:11:74:88:a6:e3:9c:bc:2c:5e:42:75:
be:e3:ca:ab:27:a9:0b:18:4d:89:26:fd:8f:55:11:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:09:81:F6:7B:A6:19:F1:77:60:60:09:13:37:7C:64:78:1D:C2:24
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:64:97:9f:b3:46:85:32:6b:28:3b:e8:69:8b:7e:0a:80:20:
ec:9d:79:d4:5a:a4:b5:0a:3c:8f:49:f2:39:73:f5:dc:91:99:
20:f3:4f:1b:20:ee:65:54:49:05:8a:84:75:ad:71:7f:49:59:
eb:fd:5a:7d:3b:32:81:fb:74:7a:9c:21:f0:b2:1c:5d:79:9c:
10:64:9a:10:5f:c2:f2:44:7e:be:fa:ef:62:55:b3:d6:da:e6:
bc:d0:51:60:f5:13:53:17:0d:17:6d:79:5f:58:f8:c8:33:3c:
42:e6:c9:62:0d:25:55:61:5b:d1:42:9d:71:58:35:e7:8b:ef:
06:81:cc:28:85:a4:4e:d7:f1:67:1e:5c:f5:fc:66:95:c7:f2:
81:13:6d:6a:68:5f:00:5f:b0:ae:18:a3:cd:c9:d9:44:bb:1a:
ef:28:d6:c6:99:3b:40:21:ad:05:4f:7d:ce:56:30:c3:65:85:
23:55:6e:bf:c0:ea:18:71:eb:39:d0:c0:55:6c:96:4b:ab:5c:
d5:ef:ee:90:93:53:65:b3:43:2a:31:54:2b:7d:8b:0f:27:a6:
22:9b:d5:19:58:b7:ec:11:30:a1:f6:15:ba:54:cf:01:de:39:
41:56:c0:13:7f:5a:fe:9f:af:f0:e1:96:30:8e:bd:d0:e1:3a:
2f:32:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:20 2025 by rpki-client