Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: z5ljwc8zhZ5+qHu0QrvKGcKupRRgqCLPUBqOkLMKF0k=
Subject key identifier: 34:6C:2B:8E:12:8D:29:F8:E4:38:B3:39:BB:20:FA:04:3E:76:E0:76
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 0198D5F17662A0F761388A398A1DE8D75209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0AC8
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: Pgp/YYkORx5F0bPyToflG1P+rZnjSsorUH8nSc2do9Y=)
2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:76:62:a0:f7:61:38:8a:39:8a:1d:e8:d7:52:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=346c2b8e128d29f8e438b339bb20fa043e76e076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:be:64:4e:fc:7b:ac:7b:e1:cd:cd:57:33:
51:2f:60:66:6a:80:e2:ff:62:9c:cc:f5:ed:ab:98:
f8:d0:5c:d1:a3:ae:19:ab:c3:5d:c5:48:82:4b:c1:
8b:cf:2b:23:66:f1:01:49:df:fe:e6:d5:22:f7:0c:
9f:e2:a7:07:b4:58:8c:05:45:ff:82:11:56:24:0c:
59:de:93:24:a4:d1:42:98:8f:c0:3c:06:47:f3:6b:
51:02:e5:f5:20:d1:3b:d6:63:bb:b1:a6:73:05:bf:
3e:a3:88:39:61:1f:63:4a:1c:89:9c:1c:91:cc:80:
0a:3a:cb:0a:af:64:07:33:58:a1:e6:e2:c1:e5:15:
9b:ec:eb:46:42:4e:cb:07:4d:97:a4:d4:38:31:cc:
8d:03:47:7d:6a:1f:5b:07:fe:a5:f0:fc:42:d6:6a:
15:97:38:40:13:07:ab:da:3b:67:ab:6c:9e:bb:38:
36:be:45:05:21:75:a7:0a:17:97:42:14:94:ac:39:
9c:5c:58:94:60:cd:55:11:0e:f2:2e:ee:ce:07:5a:
e2:37:d6:96:db:ee:70:ec:c9:2a:33:b2:ae:c8:eb:
ba:7a:7f:c5:95:f8:63:de:5f:25:14:42:52:ea:8a:
98:9f:32:81:a0:ae:57:da:57:65:e0:db:2c:36:17:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:2B:8E:12:8D:29:F8:E4:38:B3:39:BB:20:FA:04:3E:76:E0:76
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ff:36:d2:77:c9:6e:05:a4:c9:57:9e:60:69:ed:4f:9f:1b:
f6:60:dc:83:15:6f:09:5e:b9:4c:34:8b:a0:f3:43:21:76:24:
60:43:b7:56:84:b9:04:79:30:cb:58:4c:3d:6d:b7:dc:fc:82:
7b:75:32:44:48:69:6b:4a:59:66:0a:c8:26:59:33:67:d6:d1:
43:34:20:8f:cb:75:f8:10:76:6c:e0:d8:23:e0:8a:6d:74:db:
90:f7:0b:8d:a7:ed:fc:bc:bf:a9:77:80:c3:35:ec:f4:c2:93:
a5:57:a1:62:ed:23:17:7c:a9:5a:97:fa:b8:97:00:fb:15:2e:
06:d4:32:5d:4d:ff:df:ea:5f:10:76:d6:49:c7:5d:2a:79:18:
f1:c0:70:df:01:81:4c:e1:a7:ee:09:c7:c6:92:73:da:6c:a2:
cf:59:94:2c:19:e8:da:82:e5:4b:a5:b9:48:86:d6:45:86:9e:
1f:2a:5e:c4:3a:da:b9:9e:1e:ec:26:09:0e:cf:96:44:59:9d:
eb:81:2a:eb:be:91:26:d9:be:9d:98:d4:f0:7f:07:b2:53:86:
76:fa:60:53:9e:fc:ff:35:45:7a:59:49:40:fb:53:58:20:68:
9f:c3:ab:3e:d6:88:f0:74:1a:b6:ca:77:7f:c3:c0:c9:22:a3:
43:00:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:38:33 2025 by rpki-client