Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: 1HJz6uCgX3hxEPCi12caRGiv0XbMeoW9v09u6+E7kdM=
Subject key identifier: D7:4B:67:82:32:41:30:66:66:73:DC:14:77:29:62:28:E9:B2:01:36
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 0199FC58B8D8A218DBBC813D7874AE61F0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0DF1
Signing time: Sun 19 Oct 2025 12:01:36 +0000
Manifest this update: Sun 19 Oct 2025 12:01:36 +0000
Manifest next update: Mon 20 Oct 2025 12:01:36 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: YTd7aWyF3xSs2Ojhi5LPizK6ZhaABL5MKnxKlcD0IwI=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b8:d8:a2:18:db:bc:81:3d:78:74:ae:61:f0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Oct 19 12:01:36 2025 GMT
Not After : Oct 20 12:01:36 2025 GMT
Subject: CN=d74b6782324130666673dc1477296228e9b20136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:93:09:e9:9f:73:2d:71:97:92:16:52:0e:
46:fe:fd:f5:bb:07:15:55:02:c9:b8:e3:4d:70:b6:
fe:6d:72:da:be:7c:ac:d9:ef:7a:cc:3c:bc:d4:36:
53:71:ba:49:d2:98:a6:1d:22:48:01:45:b2:6a:d6:
c6:b3:45:50:39:9a:c3:b6:01:98:d2:1d:db:dc:4f:
74:a5:99:a7:27:79:12:35:d9:fa:ae:05:2f:4e:bd:
24:0e:9f:ce:64:96:18:5b:0b:3e:d5:67:3f:c0:55:
4a:96:b8:e2:70:c4:71:22:78:7b:5f:1f:59:b7:f9:
ec:46:71:e9:39:81:1a:ea:a0:66:a2:ce:1e:4c:4d:
10:fe:5e:a4:b9:e6:9a:da:87:e6:d2:d2:fa:0d:52:
ae:3a:30:3c:0c:8f:0e:00:b2:35:29:94:62:1a:5a:
e7:4b:5c:c1:06:e4:f7:07:2c:66:db:fa:57:c2:06:
43:a4:56:01:04:9b:46:65:8e:d6:74:36:7e:a8:b1:
28:97:63:41:71:66:6f:16:ca:3b:61:bc:f5:84:b4:
e6:ed:b5:ec:eb:be:82:27:13:89:f1:3b:53:de:43:
e8:34:d1:e0:6a:0d:a7:f4:07:88:f7:bf:cd:ae:3f:
15:b1:28:46:28:c3:33:4c:4d:58:3b:03:8f:c3:47:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:67:82:32:41:30:66:66:73:DC:14:77:29:62:28:E9:B2:01:36
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:50:eb:06:8a:d7:cb:13:ca:df:75:8d:b2:fd:fb:04:82:d2:
57:0f:c4:9f:2c:08:a2:3b:0c:7e:4e:be:f3:1f:af:d2:ae:07:
24:39:fa:29:c3:ae:b2:37:0c:19:6b:30:8f:3b:97:19:07:cd:
46:ee:00:67:b2:50:6f:61:6c:44:17:65:5f:ca:39:13:b7:09:
78:3b:0e:1b:d3:b2:0d:3a:0b:28:c3:8f:2c:9c:41:5c:42:5a:
dd:dd:87:e5:65:a2:7e:6c:9b:bf:6c:08:83:b6:cd:99:7c:84:
a4:0d:64:90:3f:30:38:bb:2b:9b:fc:14:38:34:9f:c7:31:e6:
dc:39:13:30:69:7a:0b:42:53:23:88:e3:73:96:8b:2d:a1:7a:
c7:2c:73:0a:46:bc:fe:fc:d3:f3:2d:50:6b:2d:f9:a5:18:9b:
8e:58:28:2e:99:11:e5:77:2d:6b:32:cf:ab:2e:83:9e:ad:bb:
91:3a:75:d7:1a:3b:24:4f:ab:f1:ff:d9:36:6b:ec:ff:39:28:
2e:06:44:3d:72:42:cc:54:00:6d:72:bf:ef:92:e1:6a:86:95:
6c:e8:e4:ad:2b:b7:21:d4:2f:3c:62:c4:6a:b2:d0:52:e9:37:
ae:94:7b:fe:ad:87:ee:0f:f3:13:ad:21:b7:66:d1:68:58:19:
c6:81:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:04 2025 by rpki-client