Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: Rg19dSD5pgII2blFTA4b75DyMVfx2kQMuugd3OQAMYM=
Subject key identifier: C1:85:9E:B0:9E:4B:EF:BE:CF:52:1C:8A:F0:FC:F8:D0:48:60:03:10
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 0197B77C9727C6A43C33AA854B8F146BD6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 10FF
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: YHXrkVkl/PMsRC+kdEdlpy3T3WPRxY5OTIHudvD4dZ4=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:97:27:c6:a4:3c:33:aa:85:4b:8f:14:6b:d6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=c1859eb09e4befbecf521c8af0fcf8d048600310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:04:6f:68:b0:52:fc:02:93:9f:30:54:1b:
99:23:c9:2b:f1:e9:68:32:ea:81:08:a2:5c:31:16:
40:8a:e4:c8:8f:51:89:46:41:d0:25:a0:d2:22:57:
8c:44:29:69:c2:b9:66:ee:b8:3c:61:28:bc:01:6b:
da:50:5f:86:4a:6c:ef:cc:91:0d:82:81:cc:da:23:
3f:72:a1:39:84:76:f2:9b:02:82:bb:2a:67:95:02:
e6:75:ae:06:79:86:16:36:d2:19:0a:84:ab:10:d3:
ee:7a:fd:29:66:19:a7:2d:2b:10:e1:a7:0e:79:8f:
e2:72:38:33:fb:f8:b7:b5:8f:19:eb:8d:50:55:45:
d6:b7:cf:04:88:e7:b2:f4:76:d8:a7:cb:1c:0d:ee:
f6:5f:5a:34:cd:38:22:40:b9:7b:42:b5:61:5d:83:
03:07:9d:ab:88:76:ec:cc:1b:b8:d5:a1:f1:23:b5:
a3:5b:e7:4e:2d:72:b3:80:f9:2c:54:45:b6:a9:8e:
94:b3:a9:70:ae:8c:2a:18:44:1b:b3:d3:04:fe:36:
31:15:45:6c:3c:15:9b:e7:66:36:65:a2:f1:d8:32:
95:30:af:74:06:f5:f8:19:32:fb:1c:2d:9f:58:cd:
c7:49:1d:07:d5:4a:72:25:cb:40:6a:73:7c:a9:28:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:85:9E:B0:9E:4B:EF:BE:CF:52:1C:8A:F0:FC:F8:D0:48:60:03:10
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:94:43:e3:c3:8c:d0:04:c3:91:58:6b:b7:fb:23:e3:d2:d4:
ab:d5:8c:d0:80:92:cc:51:61:75:f2:79:f9:d7:6e:b0:ec:8f:
b1:6e:c3:c3:e7:ba:c6:e0:64:ba:4d:16:39:45:44:1e:2f:d2:
96:5e:cb:67:f6:96:34:e5:48:cd:cf:f4:73:4e:2c:e0:ea:28:
91:f5:f9:0f:b6:f0:a3:a3:74:9c:8b:da:af:68:0a:1b:c3:62:
a7:23:fc:41:ed:c8:2e:bf:43:7e:1f:90:9c:5b:a0:3c:04:cd:
27:85:d3:6a:d7:7f:67:80:f1:a5:e7:82:b2:61:d5:d7:47:8d:
66:67:fc:94:24:87:e6:5d:44:1b:f6:30:e5:26:1f:30:48:ef:
ce:b1:19:95:99:d5:8c:f4:30:f3:b5:57:0c:bb:08:5e:ab:fa:
3f:d6:bf:d3:52:ba:a9:23:3e:fb:79:bb:4d:fc:08:9c:d4:72:
f6:fb:d8:3c:98:c2:cd:a2:d1:38:ab:86:28:d9:51:8d:bf:81:
d3:32:65:3e:1d:68:b6:ae:50:fe:36:91:61:4b:33:05:7e:d3:
90:8f:b1:20:4a:9b:31:b5:2b:e8:3e:24:9b:dc:4c:da:e9:a6:
76:cd:20:2a:b8:16:e6:8e:99:ce:69:c7:74:e4:bf:84:80:06:
0f:cc:04:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:00 2025 by rpki-client