Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: onovnaMiQn6UKORgck7HEz+DzHZc3ITIE7Uau/2Ovuk=
Subject key identifier: 10:92:7B:4D:5C:D5:B5:54:84:D6:24:9D:30:0E:30:95:51:B5:FE:BB
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 0196CBE0C29288D0A8C4BB6269CFD0746001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 1085
Signing time: Tue 13 May 2025 23:00:26 +0000
Manifest this update: Tue 13 May 2025 23:00:26 +0000
Manifest next update: Wed 14 May 2025 23:00:26 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: n1KDwzwPo8/6LjTfpcUkqwywGGbopFnsvS/dEj9Dz6w=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:c2:92:88:d0:a8:c4:bb:62:69:cf:d0:74:60:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: May 13 23:00:26 2025 GMT
Not After : May 14 23:00:26 2025 GMT
Subject: CN=10927b4d5cd5b55484d6249d300e309551b5febb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:f1:5c:72:a0:eb:55:3f:18:ba:24:00:b1:
01:84:1b:26:1a:f4:5f:91:98:06:de:c6:07:4f:18:
25:f0:d9:ce:53:a2:8f:32:8a:33:c2:ad:be:93:97:
77:eb:05:bb:dc:4b:21:1a:1b:74:34:7c:3d:40:4f:
66:36:2e:51:16:0d:e6:02:16:60:4e:7e:5d:77:66:
f2:d5:dc:10:53:a8:a4:d7:ee:eb:f3:9f:9f:08:90:
8e:e3:b1:13:c7:27:39:18:2c:89:ec:22:08:c9:f5:
ea:da:cb:50:1c:23:e0:c0:76:bb:19:b9:32:51:b2:
8a:80:35:85:b1:e6:ae:2a:0a:98:af:a1:47:69:ae:
05:5e:6f:92:2f:b6:57:59:b3:29:d2:67:24:b7:52:
31:88:54:0f:43:1d:19:5f:64:f4:e3:a7:16:2f:e2:
9c:42:b7:e0:8e:11:38:17:2f:6a:94:8d:2a:f7:b1:
2d:ac:2b:0c:ce:13:a0:37:86:bb:cf:88:24:e9:50:
0d:4c:27:f2:01:2b:9e:dc:5e:7e:7f:10:08:2f:c9:
10:bd:cf:bc:15:2d:b5:9b:85:3c:7d:ad:19:08:dc:
ad:8c:a3:4d:76:73:b1:6c:6e:17:70:e8:83:ba:b8:
61:5d:15:4f:07:38:48:98:94:2e:f6:23:e8:1c:05:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:7B:4D:5C:D5:B5:54:84:D6:24:9D:30:0E:30:95:51:B5:FE:BB
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:65:1b:ea:83:60:78:38:50:d5:13:d9:02:4f:45:db:ed:55:
c8:8d:28:25:e8:d7:c9:26:f4:de:00:13:a4:66:ea:b3:79:fe:
bb:c4:7a:94:7c:92:cc:80:3e:5b:8f:fe:2b:21:90:87:b4:41:
ab:d8:78:0b:93:6a:4a:05:fd:35:ec:55:d5:0b:97:2d:91:df:
8d:3d:28:08:27:3d:fa:36:a2:a0:d0:92:72:5e:a0:15:63:90:
34:cb:c4:12:f7:a5:a8:2a:9d:46:eb:98:19:d1:61:50:36:80:
c2:48:e7:e6:d0:9a:bf:a7:da:33:96:e2:4e:ec:a5:62:5c:ad:
30:e5:e7:08:12:af:c3:56:be:28:10:13:6d:2c:b8:11:77:78:
87:60:df:84:88:a3:3c:01:ab:f9:9c:5f:3c:89:8d:12:e8:7e:
04:d3:43:04:7b:5e:5e:77:26:a8:f0:3a:98:f1:0e:f9:66:af:
fe:30:14:0d:65:c8:b2:70:68:08:93:e3:06:de:3d:df:c8:24:
0a:8c:c6:27:a0:d0:1c:4c:b4:d0:f9:52:42:91:4e:28:f7:00:
3d:f2:f4:a3:95:d0:d5:5c:29:dc:75:b4:a1:6b:2e:79:fb:c5:
7b:76:f3:cb:a9:0b:cf:e8:89:1c:ef:4f:f1:62:ae:e1:bb:a6:
13:99:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:02:34 2025 by rpki-client