Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: aiM9F1lmN3LcbGuuL2oFrW6BS+OC04++uXbhgSIMFXc=
Subject key identifier: CE:A0:0B:34:E1:06:FC:D1:63:79:CA:86:80:46:1B:04:BA:59:42:49
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 0196C3828EAB659273858327C068072AA863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1283
Signing time: Mon 12 May 2025 08:00:35 +0000
Manifest this update: Mon 12 May 2025 08:00:35 +0000
Manifest next update: Tue 13 May 2025 08:00:35 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: vwUu6ZSW5zb5jlUGD084nWEhasdwIzZj0hyb3Kg9kek=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:8e:ab:65:92:73:85:83:27:c0:68:07:2a:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: May 12 08:00:35 2025 GMT
Not After : May 13 08:00:35 2025 GMT
Subject: CN=cea00b34e106fcd16379ca8680461b04ba594249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:3c:6e:5c:98:15:d7:1f:9d:08:94:1c:6a:
c7:79:6d:76:4a:4f:eb:85:22:45:8e:ae:0e:80:ef:
14:12:5d:1d:b6:da:d5:01:76:66:29:02:71:a6:0d:
53:a9:cd:40:4d:b3:30:0c:11:3b:41:6d:9e:fa:de:
3f:46:8f:02:40:b9:7b:45:99:2b:57:1f:bd:c4:f9:
9b:5c:36:23:7d:91:f9:16:01:32:2c:06:c1:d6:fb:
5b:01:67:07:1e:05:5d:c2:43:5c:7d:21:1f:69:93:
df:ce:aa:e5:ec:9a:ff:f1:d6:d1:9f:c3:a6:df:f5:
09:32:af:e5:33:26:e5:fc:fa:48:15:3d:bd:4e:59:
1d:32:98:8b:40:42:d4:52:6f:1e:a6:14:16:6f:1f:
1d:55:3e:91:6e:8d:35:38:02:c2:9d:d6:3b:9c:31:
5e:51:c9:cf:88:a4:cd:64:8f:5f:0c:bc:bf:47:9f:
55:06:6e:6b:16:7b:7b:51:b5:d0:76:d5:41:ee:a9:
3d:43:71:34:57:8e:b3:4d:b3:92:6f:fb:db:3c:04:
4d:e5:81:e6:b4:d9:68:4a:eb:ec:1f:12:82:87:c3:
e9:8a:db:73:ec:c1:bc:91:5c:0d:72:de:95:82:73:
b7:9b:f8:e3:6b:05:47:b9:d3:4a:77:4f:fb:31:39:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A0:0B:34:E1:06:FC:D1:63:79:CA:86:80:46:1B:04:BA:59:42:49
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d1:81:ae:38:44:7c:7d:fb:04:44:f9:97:c6:a1:11:37:9f:
d8:f0:ce:a7:70:21:22:2e:4a:06:e0:fb:0f:c4:8a:51:2a:0f:
95:51:0e:09:3b:0f:1c:b4:80:bb:fe:62:a0:fd:4a:29:ac:07:
07:25:e2:3d:42:2f:46:d5:7d:5f:d4:4d:c7:c7:00:a1:8d:12:
7e:06:06:0d:53:38:d6:63:13:df:da:87:97:ef:ef:9d:0c:c6:
8b:b9:66:56:72:4a:d2:23:17:89:03:23:96:05:1d:b8:9c:ce:
18:19:09:9d:68:73:e4:af:f6:32:53:9d:63:db:9a:5e:b8:41:
1e:49:fd:18:35:47:b8:c8:e1:cb:64:72:47:0a:0a:06:99:07:
e1:cd:59:48:3f:78:c6:79:88:11:41:2d:8d:bc:2b:9d:df:9c:
db:bf:29:7d:9b:4b:8a:66:38:2c:bc:28:e5:11:d0:2e:bb:a0:
37:60:b9:16:17:dd:de:62:e1:70:50:98:9e:05:0b:fd:17:2a:
e9:be:ce:14:d4:9d:c4:8e:5e:46:25:58:20:5c:99:eb:02:85:
83:4c:d5:7f:fc:1c:b5:29:8f:47:1a:71:d3:9c:ee:d8:ad:74:
21:81:36:a6:2b:37:0c:de:5e:f5:b5:98:de:dd:f6:d9:46:c3:
a6:2e:e3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDgo6rZZJzhYMnwGgHKqhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx
Y2IzNzgwHhcNMjUwNTEyMDgwMDM1WhcNMjUwNTEzMDgwMDM1WjAzMTEwLwYDVQQD
EyhjZWEwMGIzNGUxMDZmY2QxNjM3OWNhODY4MDQ2MWIwNGJhNTk0MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjg8blyYFdcfnQiUHGrHeW12Sk/r
hSJFjq4OgO8UEl0dttrVAXZmKQJxpg1Tqc1ATbMwDBE7QW2e+t4/Ro8CQLl7RZkr
Vx+9xPmbXDYjfZH5FgEyLAbB1vtbAWcHHgVdwkNcfSEfaZPfzqrl7Jr/8dbRn8Om
3/UJMq/lMybl/PpIFT29TlkdMpiLQELUUm8ephQWbx8dVT6Rbo01OALCndY7nDFe
UcnPiKTNZI9fDLy/R59VBm5rFnt7UbXQdtVB7qk9Q3E0V46zTbOSb/vbPARN5YHm
tNloSuvsHxKCh8Ppittz7MG8kVwNct6VgnO3m/jjawVHudNKd0/7MTmfIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6gCzThBvzRY3nKhoBGGwS6WUJJMB8GA1UdIwQY
MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt
ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0
LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNGBrjhE
fH37BET5l8ahETef2PDOp3AhIi5KBuD7D8SKUSoPlVEOCTsPHLSAu/5ioP1KKawH
ByXiPUIvRtV9X9RNx8cAoY0SfgYGDVM41mMT39qHl+/vnQzGi7lmVnJK0iMXiQMj
lgUduJzOGBkJnWhz5K/2MlOdY9uaXrhBHkn9GDVHuMjhy2RyRwoKBpkH4c1ZSD94
xnmIEUEtjbwrnd+c278pfZtLimY4LLwo5RHQLrugN2C5Fhfd3mLhcFCYngUL/Rcq
6b7OFNSdxI5eRiVYIFyZ6wKFg0zVf/wctSmPRxpx05zu2K10IYE2pis3DN5e9bWY
3t322UbDpi7jqQ==
-----END CERTIFICATE-----
Generated at Mon May 12 12:22:48 2025 by rpki-client