Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: HOAq4J70oMEkMBBRpEa/m8/o3sjhOYhEnM1+OAkHglg=
Subject key identifier: 52:C6:8F:F1:19:6A:15:25:85:42:4F:DE:3A:97:DC:B2:91:1A:C9:42
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 0198D65F5797653D9AC7135BD688B6B9E2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: HeP1lhGPAyD4RqbJAiH9CL8xI4iR9/3yIqMsqH1EIrM=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:57:97:65:3d:9a:c7:13:5b:d6:88:b6:b9:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=52c68ff1196a152585424fde3a97dcb2911ac942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:8c:6f:9a:2d:bb:f5:95:3c:07:b7:fc:fd:
99:39:22:8f:dd:f9:d2:7f:ac:50:fe:6e:e6:81:0c:
7b:af:df:ab:dd:9f:f2:43:b6:6b:b6:27:ed:81:0e:
94:29:39:d1:9f:95:d9:d6:ea:2d:ea:91:be:7d:86:
1e:32:60:dd:78:b3:6a:20:7c:60:3d:1d:ee:f3:67:
e9:a3:1b:d6:56:e6:ba:1b:ee:1e:97:84:36:d9:98:
61:0d:7b:3e:08:31:5a:58:76:2a:1e:9b:8c:b0:ed:
83:5e:a0:ef:f3:0c:68:51:54:c7:92:f6:84:f6:8e:
c9:6d:ba:01:f2:c3:6d:d3:3a:a9:5e:51:6d:60:59:
4d:2e:ba:44:f8:f7:00:a4:0f:c2:fc:73:26:0b:8d:
73:7d:fe:d4:7f:67:d3:a2:ef:0f:a3:ae:be:68:ac:
ab:05:2a:ec:34:b8:3f:c6:00:6c:13:ff:ec:de:2d:
f6:d7:74:7b:39:a6:14:04:a7:3c:15:31:47:3e:4f:
38:cd:36:47:51:8a:f5:07:a3:28:8d:6e:7c:dc:4e:
3c:c6:6f:42:3d:98:07:9f:0b:d0:d1:03:fb:9b:2d:
61:b2:4a:78:ad:98:95:a5:09:91:df:dd:a1:fc:54:
ba:cc:23:03:79:17:42:8c:6c:1f:c5:b9:53:fb:30:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C6:8F:F1:19:6A:15:25:85:42:4F:DE:3A:97:DC:B2:91:1A:C9:42
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:65:c3:f1:a6:af:fe:10:f6:0c:3e:29:ae:1b:67:d0:9b:4a:
1a:ac:d4:20:32:cd:3a:07:be:59:01:7c:51:aa:ae:44:e1:15:
db:6e:93:4d:cc:a6:24:f9:e9:a7:62:91:ad:9e:83:a3:ba:e7:
62:9e:05:c7:e0:27:03:8e:38:d6:1e:27:3f:d0:4a:57:77:af:
38:01:9b:b7:1e:52:19:6d:29:5b:e8:2a:af:55:47:f6:1e:3c:
40:77:a7:5f:b3:a9:94:12:32:c5:17:1a:05:bd:3b:57:ed:87:
ce:de:47:3e:87:1f:bb:b6:39:1e:56:bf:c3:5e:4e:93:22:d2:
36:07:ea:a4:58:8e:d6:f8:be:91:aa:8d:d6:af:a5:65:81:c7:
99:db:90:a2:0d:24:1a:a8:62:e1:3a:45:4b:7a:1c:6f:e6:3a:
76:ab:52:6c:76:17:7b:00:66:97:86:b8:d5:16:b8:62:5a:11:
63:ef:c2:5a:6c:10:22:a6:c3:02:4b:6e:d2:93:51:27:40:d7:
73:ae:2e:cf:6c:d5:c5:6e:b8:8f:72:b2:ce:50:ea:65:7a:4b:
a3:24:9f:3f:51:07:5c:81:03:91:b1:62:3f:fd:af:a4:1f:3e:
e6:a3:99:97:d0:17:bc:5c:48:df:7c:d8:be:be:1a:03:62:9a:
15:32:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:28 2025 by rpki-client