Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: RLNOwVMJGooijn2Z1SuPUnHqMZBr5/gnSlXvxSoJMHA=
Subject key identifier: EF:BB:67:1F:50:74:20:5B:6B:C2:D3:74:49:D2:65:A5:F7:6D:9B:23
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 0198D4A82A40A99840260EA9E08FFE63A18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1395
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: utn0FuVMRlzDWpY8cdAXQxp2ZEEgc/XFmZYZej1vA2g=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2a:40:a9:98:40:26:0e:a9:e0:8f:fe:63:a1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=efbb671f5074205b6bc2d37449d265a5f76d9b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:c8:46:a4:3e:8f:d8:ce:a3:06:df:d6:3c:
a8:4e:62:55:07:30:7c:3b:b2:95:13:cc:3b:82:e0:
1d:a2:12:d3:e7:aa:17:be:8a:33:28:4f:b4:77:41:
01:1c:97:63:a6:86:33:d2:07:4b:93:a8:a4:92:b0:
0d:37:a2:86:d1:1a:8f:b6:63:a9:de:54:94:31:e0:
45:89:c0:ea:fc:7d:ae:8e:96:c2:19:c8:a6:d1:d0:
fa:af:11:a1:98:20:8a:c0:82:bf:eb:ee:19:3c:5f:
c2:8a:32:6d:01:ff:b4:0c:54:5c:0a:88:a3:a8:5e:
22:ce:8c:f4:73:fe:38:2c:33:4e:35:51:96:16:4b:
38:e9:44:b2:d0:b7:7e:7f:c6:18:d5:63:d5:15:ed:
51:ee:9e:c5:85:9b:2a:2d:7f:29:9f:4c:64:d2:ce:
94:6e:5f:19:37:49:9b:eb:b1:ae:5c:ab:aa:b2:d4:
f4:e7:71:ab:a5:c0:8f:07:38:28:9a:e4:43:18:30:
37:fa:75:99:75:b5:a2:59:cf:94:f5:4e:3e:f1:b1:
85:2a:65:bd:7b:04:8b:0d:f0:5d:ae:c4:05:fc:11:
80:10:d4:ce:d5:36:2b:7d:41:a8:41:85:10:cc:cd:
8d:83:a2:88:da:41:e8:7e:00:5b:1b:2a:eb:5a:b9:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BB:67:1F:50:74:20:5B:6B:C2:D3:74:49:D2:65:A5:F7:6D:9B:23
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1b:fd:54:82:e5:47:08:23:17:06:60:4e:f0:8e:d6:9f:16:
62:b7:28:3f:36:43:12:8e:1c:bd:18:c4:0b:0f:58:e8:84:95:
7a:21:19:18:85:e0:36:b0:9c:e9:09:92:f4:f8:ed:38:68:d0:
99:2f:b4:7d:15:e3:3c:e0:33:02:01:26:2a:c6:c9:40:7e:d6:
e1:ae:1d:9a:36:d8:82:e9:bb:79:ce:94:94:f0:90:ee:6b:53:
81:fe:9a:4f:0e:65:37:3f:68:41:50:1b:df:ea:40:5d:51:fa:
7c:df:9e:e5:cf:65:d8:05:25:f1:a1:19:49:27:af:1f:b3:57:
52:c7:a4:88:a1:15:6c:d0:e5:d0:16:27:16:02:1f:36:2c:78:
b0:db:41:dd:8a:30:a8:41:5b:4a:f1:76:df:73:9c:f2:c1:5a:
0d:e5:0c:7f:d8:01:bb:15:03:46:e9:b2:d8:e7:0a:c0:30:45:
42:ab:98:57:5c:f5:f3:06:88:1b:d9:b0:2f:8e:1f:aa:44:a6:
be:9d:26:49:12:12:26:55:fb:63:90:bf:48:27:36:17:c4:78:
23:56:ba:ac:11:01:51:8d:2a:6d:60:33:61:19:1b:5d:87:e6:
9b:24:59:06:73:e0:ae:0b:c8:04:16:94:bb:8a:4f:b9:c7:76:
46:6a:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:15 2025 by rpki-client