Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: XA63V98N659TkGCN1MTUZp7KfkRTPoN/SqelT6arMwc=
Subject key identifier: BB:91:E4:EE:6A:4F:8C:DC:0B:E2:34:4C:61:2B:D5:53:AB:E8:1B:29
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 0197D3CF055C2307392A361CE3C90439A29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1310
Signing time: Fri 04 Jul 2025 05:00:49 +0000
Manifest this update: Fri 04 Jul 2025 05:00:49 +0000
Manifest next update: Sat 05 Jul 2025 05:00:49 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: 66Mbp7t3cnJsMTD7LTA6Ie/hgYAFHzEHjlzuxRmVKqA=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:cf:05:5c:23:07:39:2a:36:1c:e3:c9:04:39:a2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jul 4 05:00:49 2025 GMT
Not After : Jul 5 05:00:49 2025 GMT
Subject: CN=bb91e4ee6a4f8cdc0be2344c612bd553abe81b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:29:c0:ae:de:63:52:b1:03:78:d4:3d:e1:
af:60:1c:df:83:16:c5:54:f4:c5:df:f3:a9:60:66:
45:d7:68:06:8b:df:b2:da:fe:8e:1b:e8:ad:d3:c9:
41:24:3e:8d:be:24:e1:f0:0a:30:0c:29:24:4c:3a:
09:a6:4c:d3:df:9d:29:9a:4f:6c:d3:9f:42:df:4e:
ad:5e:92:c7:72:ba:96:a0:4e:22:50:7b:a2:0e:c9:
74:fe:44:5f:07:80:c4:8f:2e:0d:57:0b:fd:40:22:
f9:2e:1b:12:4b:b7:b8:4d:e2:2c:6b:b5:78:e6:72:
e9:00:f1:f1:a6:c6:a4:5b:0c:d3:fc:31:55:97:cf:
3b:8a:77:75:16:f5:5d:ea:36:cc:0e:9e:87:0d:9b:
11:d1:ae:38:7f:14:e7:55:d0:70:68:25:8f:78:49:
20:63:30:fb:d6:db:5a:a6:f8:f4:f5:62:ae:36:74:
a8:f4:2c:6e:0f:cd:d2:1a:40:6b:24:00:bc:7a:83:
5a:56:7f:32:06:e3:f4:16:d9:d3:81:25:e9:f9:51:
b7:0d:36:f2:d7:5b:b9:fb:58:cf:4e:41:0d:65:2d:
96:45:64:22:95:82:9c:c4:f3:17:05:f1:d7:5d:63:
f8:d3:3e:88:ec:6d:52:15:e3:b6:cf:cf:18:0e:33:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:E4:EE:6A:4F:8C:DC:0B:E2:34:4C:61:2B:D5:53:AB:E8:1B:29
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:22:b4:da:aa:ca:01:bb:7a:3f:0a:e2:4d:c9:14:b9:55:6c:
5b:34:4d:c0:50:0e:f2:6e:03:91:f0:73:4a:da:a1:80:a6:d8:
af:f7:92:64:12:96:07:58:f5:7b:2b:8b:9d:7b:e0:d3:b1:ef:
b9:11:3b:83:ee:7c:b7:43:dc:08:4f:60:49:68:38:90:f0:13:
95:5b:9f:06:c2:9c:9b:6f:fc:19:c3:7f:fe:fa:5d:f7:7a:28:
54:66:76:97:a7:77:db:38:e6:2b:62:5b:52:07:bb:70:e9:eb:
a7:55:92:df:22:ba:fe:fb:9a:0d:1c:50:1e:88:aa:cb:ed:76:
c0:71:c3:e3:7f:08:34:ff:a5:e5:ca:7b:96:2b:c4:1a:a4:e1:
25:e4:20:79:4c:c5:1f:80:85:4e:76:08:99:b9:2a:aa:63:57:
b5:ce:de:96:b4:07:08:bf:bf:7b:75:c4:3d:07:7e:38:ba:71:
bd:bd:73:58:e2:02:a1:94:0a:ca:92:c6:09:f7:c1:26:2a:92:
f4:e0:2d:c0:36:62:ca:46:79:6d:63:6f:ed:89:d4:c4:b1:f4:
fb:64:f3:7e:8a:1b:b1:6d:10:85:75:28:8d:76:e8:13:f9:89:
81:5f:01:eb:b0:d4:65:36:4c:54:ae:1f:68:b8:7f:4c:6e:7d:
c6:77:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:28:49 2025 by rpki-client