Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: t2J8J4nP1sygAH4d1S9gPDZjUDuHp5nZEaV+skVEX3Q=
Subject key identifier: 28:A7:41:0D:18:99:D7:CE:89:5E:F3:D2:09:CA:DB:64:5B:5B:0A:E6
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 0198D660191B4FBA5428C481E1FA66789A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:18 +0000
Manifest this update: Sat 23 Aug 2025 10:01:18 +0000
Manifest next update: Sun 24 Aug 2025 10:01:18 +0000
Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: y6V72Sd6We6F5Xk5TlQFshPWOnC6kQsZY1JtkCyIVTw=)
2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=)
3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:19:1b:4f:ba:54:28:c4:81:e1:fa:66:78:9a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Aug 23 10:01:18 2025 GMT
Not After : Aug 24 10:01:18 2025 GMT
Subject: CN=28a7410d1899d7ce895ef3d209cadb645b5b0ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:6d:db:3c:d3:59:cb:37:d0:a0:04:3f:2f:
27:57:b7:e9:9e:ae:b7:8e:19:80:0b:9e:fb:de:2c:
71:ea:b7:d3:b7:fa:0c:7a:3d:8f:8e:88:4f:c8:ca:
c3:3d:0d:74:c5:86:f8:50:5f:85:96:a3:d6:a1:0b:
3a:e2:a8:4f:42:71:bb:6b:a4:30:d0:b6:1f:59:e5:
d6:ca:2d:3c:f0:31:e2:70:0e:b6:a0:3e:52:d2:d7:
2d:55:de:42:c7:3c:41:43:ac:ca:c8:e1:a9:48:06:
8b:38:e0:f9:01:48:22:ea:8c:aa:fc:fd:b5:55:76:
95:a9:95:56:25:f1:b8:e1:7c:7a:9f:7d:24:a1:a5:
73:e5:e6:20:8c:0d:6f:de:5b:2b:e0:7b:1f:50:fc:
fe:69:8d:16:dc:d6:d5:8c:23:62:19:23:35:60:a6:
4e:09:a8:51:60:70:3d:a5:23:63:89:1a:b6:1b:25:
4d:8f:15:d3:d9:a2:99:eb:7a:41:c8:ef:40:62:82:
83:70:36:3f:59:0d:a5:db:dc:49:ca:68:ef:55:de:
61:25:a3:41:90:86:1b:a7:1e:ed:97:c5:a4:37:eb:
de:9e:ba:db:82:83:e1:10:39:77:dc:39:7a:e4:b3:
03:a0:5e:0c:43:4d:88:09:fa:28:ac:34:53:bd:1b:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A7:41:0D:18:99:D7:CE:89:5E:F3:D2:09:CA:DB:64:5B:5B:0A:E6
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6e:c6:df:54:a1:a7:d5:b0:57:ab:f2:cb:73:0b:f3:24:38:
44:4d:23:7b:ba:a8:3a:e7:0d:64:25:d4:9e:d4:96:13:c7:01:
90:49:eb:62:1d:19:c9:a7:5e:cf:2c:e2:c2:5b:4c:e9:0a:4a:
2c:43:d2:3d:cc:bc:6c:6b:72:9b:8e:e7:5c:07:d2:60:65:60:
f8:84:ab:08:cd:77:97:7f:c7:86:9d:80:2b:48:3b:7f:f1:a3:
e2:62:97:c1:7a:62:fd:49:3d:c2:45:6b:7d:5e:52:7c:12:7a:
8d:55:e4:05:55:97:32:68:b5:08:35:5e:7d:ca:2f:0a:39:ff:
79:d8:77:7c:73:83:5b:b0:14:72:6d:47:5b:38:0c:9f:21:e2:
28:27:31:ec:6c:c4:d9:4d:06:4b:66:28:c7:8d:39:cf:e2:01:
f2:f5:a9:da:33:00:18:91:21:e4:af:fb:de:fd:8d:65:c9:bd:
03:bd:b7:6f:b1:53:f3:9f:76:9d:ad:69:3b:50:7c:05:a7:65:
48:df:c1:f8:44:fd:d8:c7:eb:fb:6c:27:2d:24:17:bc:8f:1f:
c5:12:0e:a5:db:af:ef:1d:aa:5a:10:fa:2b:c8:c5:41:d9:b0:
ed:60:d7:36:a4:40:d9:56:b6:a4:c6:6f:ba:96:a0:77:94:46:
b6:58:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:38 2025 by rpki-client