Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: k/brdC9gEOY4NkHAERe2QfRUA5mkGClVq9RXMJIdDVs=
Subject key identifier: 24:2D:42:28:69:F0:16:08:F2:4E:59:40:6C:B7:80:F3:C9:AF:2A:E0
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 0197B6A0D317C8CFFCD7680B8E48A9E5025F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: pZnI0H0nMULdCmIrEjGjPtyA+J4n77tH15DyCxKPFeo=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d3:17:c8:cf:fc:d7:68:0b:8e:48:a9:e5:02:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=242d422869f01608f24e59406cb780f3c9af2ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:ab:8b:82:d5:b2:2f:77:41:c8:b2:39:b5:
2c:c5:f6:7e:b3:3b:bf:d9:26:9e:42:bd:11:de:90:
67:85:17:87:08:10:e3:b5:31:35:d3:a6:45:1e:02:
c8:53:65:e5:80:ab:89:d4:32:96:23:85:5a:de:6b:
96:05:f6:81:a4:56:5a:b8:79:73:d4:6e:16:bb:93:
20:3a:48:7c:8a:33:01:96:d3:75:b9:33:36:6f:29:
0e:ae:5b:75:14:cc:e0:78:df:86:77:25:19:2d:9c:
42:65:0a:23:56:eb:d1:16:e3:46:69:55:d7:37:b5:
fa:8a:02:80:eb:79:83:a3:67:45:82:93:94:36:f7:
df:6a:d8:cc:de:09:8b:ce:5d:31:6d:ee:be:c8:ef:
13:bc:cb:8c:73:72:19:25:25:74:af:ee:f7:1a:92:
f5:09:ee:39:f3:50:5a:1c:bc:6f:1e:71:4f:fe:29:
2d:6a:5d:2f:17:f1:f1:28:fa:62:7b:76:40:c6:71:
d5:fb:59:21:f8:47:65:cb:ed:70:5e:ed:a4:e5:8e:
39:6d:18:c6:ef:69:dd:dc:99:3b:2d:16:65:d1:2e:
9f:02:bf:b4:51:8b:69:9e:53:ed:e2:f6:5b:29:1e:
7c:25:94:75:86:13:83:a1:a5:d6:63:c3:3e:34:9d:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:42:28:69:F0:16:08:F2:4E:59:40:6C:B7:80:F3:C9:AF:2A:E0
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:59:1c:5a:50:91:ac:84:12:62:e3:b0:35:99:a4:b5:09:87:
e6:6b:a1:dd:96:ca:3a:10:66:9e:a9:70:0b:89:e7:0f:02:81:
0c:27:08:b0:3b:b2:41:e8:2b:4e:45:13:d9:86:1b:e3:48:87:
e3:b5:74:bf:e8:e0:22:ab:df:59:22:78:fe:a9:94:b4:dd:82:
d9:2d:c7:8a:bc:20:35:f2:35:9f:25:db:3f:d6:a5:7e:69:74:
88:c4:01:2f:cf:49:2d:92:62:35:ff:40:e6:fa:ea:1a:18:7f:
b6:9b:94:8c:4e:4e:80:e7:01:bb:d8:d6:ac:d8:56:ba:f1:f5:
4c:05:2f:47:47:33:16:d7:89:60:de:b9:57:8d:97:85:dc:21:
ca:0b:8f:2b:a8:8c:d7:d6:89:b5:34:0d:18:19:2c:b6:49:b4:
98:5b:52:97:bb:22:79:a7:67:0f:58:c3:88:82:e8:ae:49:6d:
84:25:c0:87:ca:05:c2:a4:19:21:ba:3d:ec:30:2d:03:e8:9d:
de:b2:c2:9f:c9:be:95:7c:b8:98:2b:f8:6b:a7:5d:b6:5d:36:
08:bd:65:34:07:73:63:25:cc:29:33:be:a8:47:63:d8:4d:c1:
d3:f7:8f:d1:e7:b1:72:b3:17:50:98:f0:b3:d4:a0:04:44:38:
dd:4d:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:53 2025 by rpki-client