Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: gfBUqndUUirq3t1Udiqy6etZ/nJ1QADIwgL5kxQ6nbM=
Subject key identifier: E8:3D:54:57:29:BC:3E:65:01:B1:E2:BE:22:0A:6D:18:E0:81:56:91
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 0198D73BCDD04D18870C9B5BBC1CB4CBCCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 1194
Signing time: Sat 23 Aug 2025 14:01:17 +0000
Manifest this update: Sat 23 Aug 2025 14:01:17 +0000
Manifest next update: Sun 24 Aug 2025 14:01:17 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: 6lazxI7J+vX2yBdc1D/y0+ueeHXrsOuoN3OyS8iTim8=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:cd:d0:4d:18:87:0c:9b:5b:bc:1c:b4:cb:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Aug 23 14:01:17 2025 GMT
Not After : Aug 24 14:01:17 2025 GMT
Subject: CN=e83d545729bc3e6501b1e2be220a6d18e0815691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:c4:bc:78:68:fc:03:28:63:52:e1:ba:1c:
71:44:9f:5d:5f:c9:63:36:95:8e:c3:67:48:c2:4f:
c5:c3:87:48:04:2f:16:af:2d:a9:b5:c1:98:0b:df:
ae:87:cb:ee:ee:0c:35:bc:5a:05:52:53:a7:a2:a5:
c7:08:5c:53:96:80:74:1a:01:62:1b:cf:d4:83:73:
80:ec:ce:29:45:0c:60:06:54:de:40:d2:81:58:da:
2f:5a:62:b3:3b:15:43:61:ea:1a:d6:c4:05:69:3d:
43:b6:da:0e:b3:23:94:87:5b:ee:c3:ee:0f:23:7e:
60:cc:2a:bc:81:1c:db:af:83:c4:6a:ef:60:8a:0d:
23:5f:0a:32:6f:ea:0a:14:b6:4b:8e:b3:de:1a:68:
17:46:0b:09:5a:23:33:10:b4:b6:8b:01:4b:35:88:
d1:21:d4:2f:be:47:04:07:f2:84:fb:82:aa:fd:e9:
17:c5:36:17:95:01:56:d0:d0:b9:09:fa:89:39:8d:
11:03:c6:fb:95:0b:2f:d4:46:32:8c:12:bc:25:f6:
8c:42:95:2d:67:7e:c0:21:0e:09:ce:e9:75:6a:b0:
b9:01:0d:ad:3a:69:82:49:57:15:21:57:ec:88:65:
36:89:bf:b0:f9:65:7f:c6:6b:0d:91:43:c2:3f:e5:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3D:54:57:29:BC:3E:65:01:B1:E2:BE:22:0A:6D:18:E0:81:56:91
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:67:cf:3b:bd:a7:5d:8a:27:10:2c:d0:4d:ee:7e:29:fa:53:
0c:14:81:e8:3f:e0:e3:d6:13:1f:71:1b:9b:75:69:b9:21:7c:
36:28:5b:68:dc:78:ea:5f:f1:bb:85:59:9d:03:92:91:21:4e:
04:ac:0e:bc:82:95:da:7f:78:e5:dd:90:11:8c:48:a9:bf:8d:
f0:fd:46:a2:97:e4:d8:ec:28:6c:91:61:d1:d4:ed:06:a6:84:
e9:cf:2c:d0:22:5d:15:81:37:a8:92:22:04:9f:76:02:a4:6a:
3a:48:9b:54:6b:95:85:39:7b:79:c0:50:fe:b5:dc:f2:1b:91:
17:ab:8a:9a:e9:cc:1e:0f:52:ea:cd:4e:f4:c4:50:a4:a1:12:
38:75:d2:00:6b:b6:6f:04:a9:b1:25:ab:7c:f6:d7:a6:a3:7d:
25:64:ad:6c:d7:fb:42:af:96:80:e4:2f:b9:33:3e:be:a7:d0:
be:a7:23:b5:ba:22:aa:43:17:b1:40:37:4b:42:e8:64:cf:7f:
84:9b:d2:ca:bf:19:97:2a:cc:b6:b5:3f:83:13:91:ba:28:eb:
f7:ea:f8:f5:cf:b6:47:7c:b4:8e:e6:36:14:e6:4a:76:71:33:
83:e0:da:16:dd:b9:6a:0f:cd:59:97:eb:9a:b9:3a:91:78:cb:
71:80:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:57 2025 by rpki-client