Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: 6ARYeltB7OtwRByRdYxV2t90NYjwfx+LvJ4ivMipPeM=
Subject key identifier: CB:CF:BE:38:97:51:D3:61:C7:2D:BF:4D:FC:29:04:4C:33:16:E1:A4
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 0199FE1027582A5A4389EB14E6284D737C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 142F
Signing time: Sun 19 Oct 2025 20:01:35 +0000
Manifest this update: Sun 19 Oct 2025 20:01:35 +0000
Manifest next update: Mon 20 Oct 2025 20:01:35 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: wA3QuYq+OvBv5SqYv3TA4XxxtM+OBp6UebSTvjgel4A=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:27:58:2a:5a:43:89:eb:14:e6:28:4d:73:7c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Oct 19 20:01:35 2025 GMT
Not After : Oct 20 20:01:35 2025 GMT
Subject: CN=cbcfbe389751d361c72dbf4dfc29044c3316e1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:10:bc:e2:6d:58:cc:dd:17:09:b4:15:36:
d6:2c:55:23:e4:0b:c8:7f:d1:f9:57:c3:93:1a:5d:
54:14:60:fd:0e:da:26:4b:c4:c0:f3:18:f9:03:e6:
8d:c9:36:85:85:1f:51:2b:81:af:a6:cd:0c:15:46:
a3:db:72:07:1a:45:94:4a:ca:80:80:25:bc:48:a2:
ec:9b:14:e4:89:c2:25:91:07:a1:6e:ad:59:75:3a:
4c:b3:ca:6d:58:bf:70:07:28:df:81:d2:c5:42:d7:
e1:c5:cf:70:d9:b3:3e:bb:5f:60:8c:34:dd:15:b6:
45:74:43:28:a1:90:34:18:39:e3:26:ed:4a:6a:33:
ad:6e:f4:a2:cb:12:40:a3:35:25:0d:8e:1d:51:0d:
bf:f1:e3:dc:ba:e4:5a:68:c2:dd:d8:56:08:fa:4a:
ab:48:70:44:7b:6f:4f:b0:07:31:8e:a3:17:eb:c5:
e0:2f:b0:63:6a:08:24:98:01:af:f3:41:32:ee:48:
6b:e9:4d:be:2a:86:82:12:8b:d1:41:4b:3f:af:48:
e2:0a:74:f9:f9:be:f6:8d:02:1f:cb:bc:c1:b8:79:
d3:09:08:9f:2f:2d:88:26:4e:6b:77:53:6b:30:b0:
3e:1c:4f:cd:a4:6b:ac:2a:71:97:26:bc:bd:7c:8b:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CF:BE:38:97:51:D3:61:C7:2D:BF:4D:FC:29:04:4C:33:16:E1:A4
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:12:e9:b5:39:71:37:99:83:3b:38:fe:5b:5f:d8:f2:30:b5:
50:56:79:46:fc:15:00:97:48:68:71:83:86:f7:ce:c7:1c:55:
06:0b:b2:4c:d0:1c:d1:a8:41:a3:69:ef:af:04:b6:5f:36:a9:
3d:10:09:f3:81:c3:ad:55:87:02:75:30:d7:17:c6:31:3e:91:
46:14:2e:83:51:43:2a:15:0f:7a:a9:a4:6f:57:a9:d3:ce:f8:
fe:5b:ac:4e:e6:27:5b:fe:fd:6c:2e:45:69:4f:02:13:60:7b:
c9:8c:be:55:85:cc:6b:a3:fd:f6:23:6c:d5:72:3d:46:5d:38:
ae:ea:40:fb:40:7d:fa:02:fb:d5:e7:c9:e1:83:8d:30:2e:a1:
ae:7c:cd:e0:fb:22:30:a4:ec:1a:05:fd:1b:87:a7:41:b2:61:
36:52:07:02:0a:59:eb:c2:52:7a:0a:30:af:a4:f3:a8:f7:73:
3e:96:50:cc:c9:f1:bd:2c:dc:f7:a9:28:b9:8a:76:d1:74:f4:
70:dd:9a:c0:59:99:4d:07:08:9f:58:01:50:b3:56:2a:d8:75:
a0:98:52:33:34:53:bc:d0:65:98:09:1c:80:1b:8c:e8:c4:c1:
a6:76:20:8b:1b:7f:56:09:d5:20:cc:89:b4:e9:09:35:b4:3b:
48:03:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:20 2025 by rpki-client