Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: SAdEOPop/SqzOwfFpKffg1L/moxIqhQJ0UuHsAYTcdA=
Subject key identifier: C6:A0:7C:81:23:65:06:65:1D:C4:13:86:A1:DC:B3:AC:DB:59:EF:C2
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 0197B70E9549743D975E5ABC30F27A50AA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 02AA
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=)
2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: E7ipRZpzWNbxvbJ20Le5/bgAFbmOqmV/qZzBEZ/hrkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:95:49:74:3d:97:5e:5a:bc:30:f2:7a:50:aa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=c6a07c81236506651dc41386a1dcb3acdb59efc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:a8:1d:39:85:f0:6b:a1:fe:ee:2a:76:90:
b8:d8:47:6b:95:8f:ab:81:6f:57:a0:4d:3e:ef:9f:
15:6d:31:47:45:38:25:87:be:37:2f:19:88:03:72:
ee:1a:89:d1:28:53:15:ca:74:8c:28:4a:36:f3:07:
53:d1:16:cb:71:a4:20:49:fc:d4:c3:fc:d4:1a:8b:
ec:4d:35:f1:89:fc:ac:f5:98:78:07:de:f9:13:94:
6d:53:6f:4a:da:36:46:72:c3:29:34:22:bd:13:f6:
ab:49:55:c4:ab:6b:71:63:10:cb:0c:af:82:7d:73:
14:89:af:a4:06:22:0a:c8:89:dd:89:26:51:9f:04:
a7:09:6a:8d:77:78:c2:2d:44:f0:58:ce:f0:57:0b:
39:eb:7f:a8:39:65:8b:aa:e8:77:f6:f8:22:7c:46:
99:5f:92:66:ec:02:3f:8c:60:61:e5:9c:5e:4a:9b:
aa:24:b8:6e:5b:f8:9d:a9:ee:21:c5:aa:f0:1f:d8:
c3:7f:f8:d4:42:4f:95:a3:78:66:c1:e3:0b:92:cd:
97:e0:5c:ba:4c:c9:d9:e8:63:25:8a:16:6b:8a:60:
44:e2:e2:52:77:ce:f1:d1:82:71:b7:5e:6e:ac:fc:
94:81:59:71:92:1b:90:67:2e:1b:ee:33:84:dd:4f:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:7C:81:23:65:06:65:1D:C4:13:86:A1:DC:B3:AC:DB:59:EF:C2
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f3:03:60:dc:df:b1:76:22:af:34:28:bb:9a:fa:82:8a:5e:
d9:c1:b2:3e:bb:18:78:ff:31:a5:26:33:b6:27:e9:2e:7f:7f:
28:c2:75:00:06:b3:7e:52:c2:08:c5:42:7a:f4:9e:2d:9a:f5:
d6:25:6c:87:20:1f:ee:c6:9c:67:2e:25:ed:f1:bc:c7:f6:54:
f0:49:2a:ab:bc:ed:43:72:f7:d7:6f:77:b0:c0:b3:3a:d6:ed:
26:89:bf:b8:c6:86:09:02:87:5a:fe:f9:9f:de:6e:18:51:74:
e9:2a:ce:f7:f8:69:c6:97:15:71:2f:47:00:94:7f:8e:84:6e:
40:8a:0f:dd:5a:b2:eb:12:88:3d:d6:a2:c2:6d:fe:6f:0c:fb:
c8:60:4b:93:b4:f6:8e:8b:c2:5e:fd:d5:6f:ae:db:0f:b0:0b:
4c:80:0e:bb:65:44:3c:ba:e2:04:34:27:66:8c:3c:70:2a:79:
04:36:dd:3d:20:7c:8f:e1:34:e1:fe:6a:18:fb:8f:9d:96:e9:
cb:0e:e3:d0:93:c0:92:b6:99:e2:31:5d:de:fc:45:34:86:ab:
07:a3:02:06:39:c1:da:7a:51:87:23:b8:7c:10:7e:f7:3f:f2:
de:b2:83:39:a7:27:f3:4e:04:99:c8:3d:86:e6:9c:75:c7:19:
5f:04:e8:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DpVJdD2XXlq8MPJ6UKoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDVlYjZhOTY4NjRkZmEyYzUxYjJlMjU2YzUxODBhYjky
MjI5Y2QwHhcNMjUwNjI4MTUwMTE1WhcNMjUwNjI5MTUwMTE1WjAzMTEwLwYDVQQD
EyhjNmEwN2M4MTIzNjUwNjY1MWRjNDEzODZhMWRjYjNhY2RiNTllZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonOoHTmF8Guh/u4qdpC42EdrlY+r
gW9XoE0+758VbTFHRTglh743LxmIA3LuGonRKFMVynSMKEo28wdT0RbLcaQgSfzU
w/zUGovsTTXxifys9Zh4B975E5RtU29K2jZGcsMpNCK9E/arSVXEq2txYxDLDK+C
fXMUia+kBiIKyIndiSZRnwSnCWqNd3jCLUTwWM7wVws563+oOWWLquh39vgifEaZ
X5Jm7AI/jGBh5ZxeSpuqJLhuW/idqe4hxarwH9jDf/jUQk+Vo3hmweMLks2X4Fy6
TMnZ6GMlihZrimBE4uJSd87x0YJxt15urPyUgVlxkhuQZy4b7jOE3U9NlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMagfIEjZQZlHcQThqHcs6zbWe/CMB8GA1UdIwQY
MBaAFAjV62qWhk36LFGy4lbFGAq5IinNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUt
YmI2ODI5MzYwY2VlLzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUtYmI2ODI5MzYwY2Vl
LzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPMDYNzf
sXYirzQou5r6gope2cGyPrsYeP8xpSYztifpLn9/KMJ1AAazflLCCMVCevSeLZr1
1iVshyAf7sacZy4l7fG8x/ZU8Ekqq7ztQ3L31293sMCzOtbtJom/uMaGCQKHWv75
n95uGFF06SrO9/hpxpcVcS9HAJR/joRuQIoP3Vqy6xKIPdaiwm3+bwz7yGBLk7T2
jovCXv3Vb67bD7ALTIAOu2VEPLriBDQnZow8cCp5BDbdPSB8j+E04f5qGPuPnZbp
yw7j0JPAkraZ4jFd3vxFNIarB6MCBjnB2npRhyO4fBB+9z/y3rKDOacn804Emcg9
huacdccZXwToaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:13 2025 by rpki-client