Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: rUblDNtmc//hpOi0614PytMHOPtlYkAkcvs7BaAWOH8=
Subject key identifier: F2:A9:84:80:A3:6B:26:5C:7E:A6:9A:3E:49:11:86:47:B0:6E:FB:EA
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 0197B6A07359F98438415DFF118CDABF98CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: PTZ7c077C9RLVgWX7xkxEfHQkZlNwDdV9r9JtvI9In8=)
2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=)
3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:73:59:f9:84:38:41:5d:ff:11:8c:da:bf:98:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=f2a98480a36b265c7ea69a3e49118647b06efbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:f9:29:8d:e3:24:af:51:1c:09:6c:cf:8d:
fd:3e:2b:ca:06:2d:e7:61:ba:47:33:25:c9:27:12:
4d:a5:52:b4:66:36:96:8f:63:7e:11:4c:6b:7c:ff:
7d:75:33:9a:33:ea:bb:a2:cc:f2:43:84:10:50:a8:
a8:77:b4:af:bd:bc:32:ad:bb:7a:3e:41:4d:b8:ae:
ff:d0:4b:f8:a0:8e:ed:d5:6d:17:d1:fa:a1:e5:8c:
ab:48:25:37:af:48:97:b8:23:3a:76:3f:de:3a:a4:
ba:5c:63:71:4d:fe:68:e5:aa:25:2a:72:b7:7a:90:
bd:81:cc:d1:60:63:d8:02:b1:06:48:a8:4a:a0:60:
f6:e6:d6:9c:d3:67:ad:44:79:5d:61:9d:11:a8:1f:
f4:57:03:08:aa:3c:6e:4a:2e:3d:7c:c9:de:97:0c:
73:18:5c:24:52:bd:4c:6b:f3:c0:22:ca:09:59:f6:
40:e3:64:29:5e:0c:2d:01:78:d3:fe:a7:01:d6:04:
88:31:ab:b8:6e:4e:7f:01:45:28:52:28:36:f6:41:
3c:ee:44:12:63:5d:5e:08:0e:82:36:22:0f:df:90:
2f:8d:1f:6c:1f:74:89:f9:d8:e5:7d:7a:ab:ec:7e:
ca:53:07:71:eb:b4:c2:ba:81:de:06:17:c7:50:16:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A9:84:80:A3:6B:26:5C:7E:A6:9A:3E:49:11:86:47:B0:6E:FB:EA
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e2:6e:20:bc:8c:19:a6:da:7e:a1:98:9f:13:dc:41:cf:68:
a9:9b:45:6f:d3:89:df:6b:c7:34:a0:2f:c6:d3:0a:46:2e:34:
be:f6:a0:3c:0f:20:9d:2d:f2:90:67:08:8d:2f:49:6e:e2:0b:
f0:5b:a1:ab:60:d6:ff:ac:7f:f4:90:20:9f:b4:9a:92:87:c0:
ad:da:6d:71:48:ef:4f:4b:8f:f1:04:7c:02:b5:59:71:11:3f:
6e:7a:21:b0:48:ae:11:8a:c3:35:b1:b0:d9:b6:2f:76:fb:5a:
39:bd:41:70:25:65:45:0e:af:61:0a:e9:61:4f:55:65:1e:d2:
1d:0d:7d:04:c3:63:bc:f3:e1:b1:0d:b3:73:83:d6:04:2e:3f:
5a:22:3d:3c:85:ca:4e:1d:96:9a:46:00:70:d0:dd:de:e4:c7:
c0:4d:8c:1d:e9:d6:d8:cd:46:72:07:7b:bc:90:02:fe:1e:9a:
e3:c0:79:a5:da:7b:b2:e8:47:46:39:de:44:3d:fc:ad:72:b1:
46:78:a1:2b:d7:37:d7:43:cf:8b:78:a0:4e:5f:86:3b:c4:b4:
8d:3a:96:73:2a:13:f1:1a:2a:b2:d4:22:ac:1d:0a:b3:4b:53:
e4:b7:e1:cb:6b:33:31:d5:38:68:41:89:1a:0b:f6:f4:02:e7:
ca:6c:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:51 2025 by rpki-client