Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: mqeyVCFzuQxU6XR6FoODZ00Zru5J1ji8HeAIe7tig6U=
Subject key identifier: DE:82:5A:90:38:22:11:D4:EB:44:6B:69:10:2B:72:8C:E1:AA:20:B1
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 0198955BA1CD84EF19289F7FE38D8A936155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 0A50
Signing time: Sun 10 Aug 2025 19:01:07 +0000
Manifest this update: Sun 10 Aug 2025 19:01:07 +0000
Manifest next update: Mon 11 Aug 2025 19:01:07 +0000
Files and hashes: 1: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: ZoLb7AAPFpWPabz0llUcQTl85+VpdQ3TXf3P6uka9dA=)
2: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (hash: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=)
3: vbTBxrwzB75awQdnuHxvUmGSxrI.roa (hash: BNvntPsh9Cs3tqn2zXlS+7ZhQF3J782Zk6D2d5jtV8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:a1:cd:84:ef:19:28:9f:7f:e3:8d:8a:93:61:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Aug 10 19:01:07 2025 GMT
Not After : Aug 11 19:01:07 2025 GMT
Subject: CN=de825a90382211d4eb446b69102b728ce1aa20b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:a9:06:e1:c3:77:02:b3:46:77:ee:c3:c8:
fd:4f:05:5a:ff:ef:8e:4e:d3:1f:9b:6c:12:bf:aa:
ac:86:aa:11:9b:2a:63:56:b6:02:43:be:42:6e:5a:
9e:54:2d:88:1c:21:bb:c6:d4:0b:1b:1e:87:bd:c3:
67:2c:21:12:f1:4f:58:98:1e:b3:12:22:58:f9:7a:
25:e2:15:00:97:02:63:85:11:31:83:37:38:93:3c:
55:6d:a2:31:b3:48:81:f3:53:bf:94:48:6a:01:06:
cc:04:7e:c2:94:47:f6:76:ec:f8:71:ec:86:e4:0d:
e7:ba:fe:ba:ba:de:08:d3:a6:31:f0:f1:64:d8:6d:
bf:47:af:33:74:f0:b7:50:21:fc:24:d9:40:ff:75:
54:3e:e3:ca:32:d5:6a:15:f5:55:2b:a0:e9:a1:ff:
2b:c5:ff:22:55:b8:ba:e0:5c:8f:6b:b7:64:bc:2d:
57:f0:0e:af:81:a9:14:10:37:a3:df:bc:06:6e:8e:
8d:96:43:c8:d7:e7:a9:48:15:2b:1b:bd:42:49:20:
e4:19:74:81:c6:b4:eb:fc:96:63:48:d4:b6:32:cc:
ff:ef:0d:5f:0a:de:8d:32:2f:63:eb:a5:9d:48:36:
1a:2a:2d:ed:74:e6:98:6b:a3:fe:52:f6:ee:e1:d2:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:5A:90:38:22:11:D4:EB:44:6B:69:10:2B:72:8C:E1:AA:20:B1
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7e:1d:6a:52:5b:3b:8a:d7:8c:db:31:9e:e3:f0:80:dc:8a:
74:ab:fa:21:a0:2d:81:44:f8:af:c5:54:9c:1d:b6:3e:24:bf:
d8:11:54:72:f1:10:91:4c:76:b1:f7:19:07:a6:a2:4f:be:22:
97:e1:55:7a:61:88:8f:9f:9e:56:45:e5:78:4f:23:a0:af:63:
8b:55:7a:a8:db:bf:19:b5:e5:12:81:40:8e:db:b1:b8:78:81:
9d:08:6f:ad:03:21:a9:55:ce:64:55:bd:28:1b:64:e8:a0:3f:
a1:c0:43:c8:91:32:b7:23:b8:b8:0b:b0:81:c6:7f:d9:93:8e:
ee:0d:89:df:6a:32:39:b1:ba:18:fa:53:e8:ce:12:13:e9:36:
32:a9:21:c0:33:c3:79:8f:9e:6e:12:a8:cf:d2:30:7c:39:f2:
25:8c:9d:5a:89:1c:61:a2:68:fa:c6:52:f9:fd:ed:b1:c5:f9:
d0:f8:98:27:24:c0:44:2d:07:cf:43:0d:dc:13:f8:ee:d3:63:
6c:34:29:8e:80:7a:86:63:b0:cb:24:b3:0e:f9:d0:23:f4:94:
d6:ce:a5:08:28:aa:3d:73:14:43:04:64:8e:c0:ee:61:09:7e:
70:ba:d9:da:6d:eb:8f:d6:af:c6:6e:91:b1:3b:63:34:3d:f7:
22:20:a8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:44:45 2025 by rpki-client