Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier: AG4+ZNYAiW6hxlgnGLavUDfdtBhbnBXgnKd0l56ONB4=
Subject key identifier: 60:C4:D0:87:77:71:58:DC:E8:37:66:A8:75:6C:CC:B7:E5:29:C7:F1
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial: 0198D4731BBC0D5FE00D3DD04D865E670992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: 0Jffm/k4OxQl14hxAVMbgRt88O+mILLprpOSEQAf7VY=)
2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1b:bc:0d:5f:e0:0d:3d:d0:4d:86:5e:67:09:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=60c4d087777158dce83766a8756cccb7e529c7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:41:32:cf:cf:3a:ab:7e:54:31:81:04:fb:
f1:d7:4b:4e:70:0b:85:ce:a0:09:68:f2:b0:63:dd:
0b:e2:fd:3b:b9:cb:7d:f5:f2:5f:88:2e:29:a2:19:
5c:4c:1f:7b:b7:ca:f1:6c:bf:7a:90:dc:6d:2e:33:
b8:19:2b:2d:60:36:e2:54:e8:0e:6b:33:a1:06:05:
b7:2f:bd:2b:c0:db:c8:15:30:4f:ea:a9:7c:7c:11:
9d:50:ca:c0:2c:07:26:6b:22:d3:04:86:0d:31:e3:
d8:69:76:60:4e:68:e1:ae:fc:b0:1d:cc:a9:0b:91:
71:68:56:d0:f0:dc:2a:81:44:c0:bd:99:a9:e8:76:
7e:42:00:a8:85:15:81:7b:98:52:09:dd:ea:3c:2c:
ac:0f:ec:0b:05:1c:ff:63:d0:71:9e:57:92:fd:f6:
b6:4b:2f:0e:72:f6:fe:cb:9b:bc:be:cb:3b:9d:ff:
c8:1d:c2:67:dc:11:49:e3:41:b8:73:b3:80:6c:e6:
68:aa:60:fc:c7:55:6a:d5:b3:17:f2:d3:bb:0e:21:
4c:92:13:e6:7f:08:a8:15:e5:13:db:70:f3:d2:39:
d5:0e:c6:75:b6:13:17:06:db:7f:b7:49:d7:e9:20:
28:63:3f:9a:b3:f8:d1:a9:0c:42:96:df:53:be:03:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:D0:87:77:71:58:DC:E8:37:66:A8:75:6C:CC:B7:E5:29:C7:F1
X509v3 Authority Key Identifier:
keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:61:6c:5c:b7:76:47:00:59:c3:69:5f:d5:3b:04:33:8c:45:
0c:cd:f4:52:27:ac:4f:5a:39:60:2b:2a:e0:05:23:02:e0:db:
1e:9b:ec:f3:20:35:96:97:3f:f1:56:79:48:d7:cb:9b:62:51:
b9:43:54:e3:49:da:f3:d3:4a:af:b8:6d:d1:d2:38:df:5c:c0:
0d:0f:ab:3c:2f:d2:98:1a:64:b0:36:70:9e:7d:20:89:da:a4:
e1:1e:e3:e2:63:78:89:b1:20:4d:34:6c:79:cc:2d:9d:cd:dd:
1a:4f:4b:cc:4c:a8:d1:e2:a2:dd:70:97:82:95:3b:95:dc:c3:
c5:40:35:a9:0d:57:2e:88:c0:e6:b7:d5:89:c1:41:7e:df:a3:
7b:0f:82:e6:3b:01:b5:b3:be:3f:d1:e2:ab:2c:e8:07:aa:0e:
78:be:0f:2f:e3:77:74:29:fb:39:6d:e7:d5:9d:ea:ba:7f:29:
84:21:b5:4f:a7:19:71:04:e5:30:2a:3f:5c:ac:f1:84:7d:b5:
47:6d:90:5f:b8:03:f6:3e:f4:07:71:f1:2b:b1:90:a3:58:1d:
50:30:ae:c6:af:71:68:89:b0:8d:0c:7c:27:3e:ea:82:34:50:
d8:65:b4:2e:d0:2f:eb:fe:d1:65:a1:0b:ff:ee:0b:e1:62:4a:
18:57:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:01 2025 by rpki-client