Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: jWVE5FjyepwqShTVsGxiJgrc3/YcBBvfc38MnBKW1LQ=
Subject key identifier: 1C:FD:6F:07:9C:C9:7C:F3:F4:1A:AA:71:66:14:6E:9E:EC:45:76:82
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 0198D70598AE38DE1F500F9A51A78511A482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 0470
Signing time: Sat 23 Aug 2025 13:02:04 +0000
Manifest this update: Sat 23 Aug 2025 13:02:04 +0000
Manifest next update: Sun 24 Aug 2025 13:02:04 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: xL7LPyPOJaO0nuaTk7/7xQIxgMv9whUMOGP6+u6ATvI=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:98:ae:38:de:1f:50:0f:9a:51:a7:85:11:a4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Aug 23 13:02:04 2025 GMT
Not After : Aug 24 13:02:04 2025 GMT
Subject: CN=1cfd6f079cc97cf3f41aaa7166146e9eec457682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:f4:cf:21:6f:cd:98:3d:80:86:37:e6:68:
82:1f:cc:32:39:e4:c6:bd:84:0b:61:56:c7:58:f6:
c5:bb:17:ed:57:d9:99:a2:e7:eb:2c:65:85:15:c1:
06:e4:69:5f:8b:cc:d7:56:49:fd:99:a4:7e:29:34:
5f:fb:05:f5:dc:22:2c:a3:47:5f:ec:60:e2:ba:c5:
64:4f:a5:56:55:d3:ac:13:91:24:d8:dd:22:79:fe:
c7:e6:1b:53:82:a8:ed:bc:44:7f:ad:b6:33:cb:eb:
a0:fe:f3:76:4e:3e:f4:33:e5:45:1f:96:62:e6:21:
95:f4:a6:08:2e:4d:4c:84:80:e5:2d:c1:ec:99:d8:
93:42:54:97:f8:1f:27:24:67:5e:30:94:a1:dd:e9:
b4:47:0c:d3:df:46:9b:c3:eb:bc:d7:e2:d2:8a:91:
26:f6:85:7b:53:c7:74:76:0e:12:e1:2d:68:4f:1a:
11:8f:8f:b0:85:99:b3:a8:0c:cd:b2:11:b4:24:92:
d9:3b:63:cd:36:bb:9e:9b:38:25:41:c2:ee:6c:6d:
a3:c8:82:a4:ec:9c:da:f6:ed:01:5d:b6:e8:88:b2:
b6:be:34:b0:83:bb:65:9f:d9:1b:0a:9a:1e:18:a8:
62:47:ef:18:a2:84:98:ec:86:e7:89:4c:ac:90:d3:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FD:6F:07:9C:C9:7C:F3:F4:1A:AA:71:66:14:6E:9E:EC:45:76:82
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c0:6f:e4:16:a9:fe:b4:33:66:7a:5a:ec:66:a0:2f:7c:a4:
a4:56:a7:88:03:1b:54:78:8a:67:9f:0f:30:cf:8a:74:6a:8c:
9f:5b:c7:30:e5:f8:28:b0:90:bb:08:b0:af:40:da:de:6f:9c:
34:98:87:e2:ad:03:29:a0:81:67:9e:f7:f0:d2:2b:99:45:60:
c1:2c:ac:0d:5e:6f:83:d9:98:db:0b:79:81:24:3a:3c:db:a2:
65:d8:33:fd:2d:63:c0:63:59:1b:28:32:fd:11:6b:5b:a2:e5:
8a:35:0c:b2:83:75:6f:76:98:5b:04:81:e1:0c:1e:db:17:ad:
b2:93:43:3f:d3:70:55:3a:41:21:ea:8e:8e:05:7b:54:64:5d:
84:8e:a3:4d:b6:4a:56:22:80:38:b2:f8:2c:61:ea:1e:f9:b3:
f6:bb:b2:2c:62:9b:77:c5:68:41:0d:46:56:42:ee:27:f5:19:
ca:f0:6b:99:c1:c7:aa:da:cc:8b:a5:dc:c2:47:71:6d:18:13:
dd:6a:1f:83:0d:c3:09:8b:13:fa:6f:d6:63:2e:21:39:b7:db:
b3:06:67:34:65:e4:fb:cf:dc:11:7a:38:0c:2e:c8:67:8e:04:
07:5b:6c:1b:8f:a8:5a:bd:bb:e5:c1:1b:b3:7d:49:85:9f:15:
c2:c7:90:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:48 2025 by rpki-client