Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: 8mwuaZNoOFoFNkL5BaMcS6iKlQnoxcugUViGRR2Ng60=
Subject key identifier: 44:97:1C:6D:C5:A5:93:69:D2:51:80:B1:D9:86:4A:02:A5:91:9E:DB
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 0197CE71ABA35C8F63E50DE0EBD78A213408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 03E7
Signing time: Thu 03 Jul 2025 04:00:45 +0000
Manifest this update: Thu 03 Jul 2025 04:00:45 +0000
Manifest next update: Fri 04 Jul 2025 04:00:45 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: TJUow6GdhAGbhz1IVEuY6I5LnyGlN0xBRchFNxHUr2E=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:71:ab:a3:5c:8f:63:e5:0d:e0:eb:d7:8a:21:34:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Jul 3 04:00:45 2025 GMT
Not After : Jul 4 04:00:45 2025 GMT
Subject: CN=44971c6dc5a59369d25180b1d9864a02a5919edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:44:13:67:40:bc:5c:d5:90:5e:20:98:f6:b3:
48:b3:7f:f5:69:2f:23:76:0d:85:20:03:41:90:e7:
16:0f:31:83:de:a6:b0:cc:e1:90:b5:c1:e3:87:9b:
28:a9:2e:03:67:06:cd:42:02:4d:2e:37:6b:26:9c:
f1:ec:5d:e9:6a:d4:3f:1e:ce:46:78:75:03:dd:86:
00:de:2d:ef:df:c3:15:53:25:2c:94:6f:9e:6e:81:
a9:2a:36:e7:7c:c6:54:13:82:c4:64:f4:8e:bd:ab:
d8:4c:1e:d3:8b:3f:e8:2e:da:24:a1:76:c9:cf:71:
c0:77:ed:4a:3e:c5:f6:e8:00:b6:e7:a8:81:8b:51:
cf:79:af:0a:54:7d:70:e5:2b:aa:1a:e6:a0:69:2e:
a7:c0:a7:8b:30:0e:0c:b4:3f:25:17:c0:67:af:22:
54:e3:59:40:5d:f7:9c:10:1c:af:72:b8:fd:9f:bc:
fd:cc:46:51:d7:11:ee:b0:af:3d:be:a9:45:c1:17:
ab:93:9e:d5:2f:7d:34:6a:0c:c8:88:d3:a5:13:31:
ff:7c:d8:16:2f:ac:39:8c:89:c7:25:49:68:ea:44:
ea:e8:25:2b:64:e0:58:2e:7a:14:e1:a2:ef:2e:bb:
cb:22:1a:3c:fb:fc:2b:78:c8:de:93:fc:69:66:26:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:97:1C:6D:C5:A5:93:69:D2:51:80:B1:D9:86:4A:02:A5:91:9E:DB
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:50:04:2a:d6:27:77:f4:62:6d:5e:26:55:23:72:c3:47:c5:
d5:39:23:a3:1c:79:ec:30:9b:83:8a:cf:39:b2:93:f1:ae:0b:
14:c9:44:03:fb:65:e5:f6:0c:3d:83:01:47:b5:db:6f:6d:e3:
a6:a2:31:b4:2c:5b:3b:e5:eb:a0:93:05:e0:71:52:41:c3:70:
5d:35:07:f9:6a:f7:24:78:fd:71:1a:7b:56:2e:c3:0d:02:9f:
02:b3:9e:34:3f:8b:ec:c9:08:96:c3:30:ba:05:9b:ab:2e:1e:
7c:1b:a8:ff:f4:00:10:11:f6:dc:67:f0:ff:c0:60:76:42:72:
7a:61:c1:99:2b:6e:47:7c:13:b8:00:e9:c7:11:b1:7e:43:95:
37:bc:11:4d:c9:0b:e5:31:7c:9d:61:91:5a:03:4c:77:1a:68:
a4:3d:8e:f0:0e:ab:ad:63:55:25:12:14:34:90:c9:a7:a5:73:
e0:23:02:34:fe:fc:9b:18:ff:f2:78:87:9f:29:56:d1:72:6f:
65:a1:c3:11:50:ab:9b:74:24:80:6d:b9:ad:76:57:03:c2:b4:
0f:fa:13:d1:cc:25:d8:7d:82:b1:44:3f:4e:df:0e:13:38:c4:
d4:dc:7b:9d:e8:90:98:02:25:c2:1a:37:a6:c6:7f:cc:06:f1:
93:18:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:00:13 2025 by rpki-client