Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: XaFHB8BuClfCY9IgXgOByg4EEDGsUFj+Pp3zuFntmyI=
Subject key identifier: A9:92:59:B9:B2:D0:EA:31:A8:48:49:DE:6E:AB:E9:7D:5A:F6:FE:34
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 0199FCC69188DB83578F43C0D0543BAA22AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 122C
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: dvJV3ZUCvNTuuVY4usuRrqUE+BH2xmuL5w5NTqC9lnU=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:91:88:db:83:57:8f:43:c0:d0:54:3b:aa:22:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=a99259b9b2d0ea31a84849de6eabe97d5af6fe34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:68:65:fe:2a:95:cf:20:16:71:76:b9:18:
2e:21:ae:a4:db:4e:4c:ea:b6:c2:30:cd:9c:b9:5c:
0b:81:f8:a0:33:de:68:d2:80:c9:0e:7b:4d:e1:52:
ab:87:5b:0b:74:20:3a:59:5c:e8:fe:e0:1f:46:49:
1c:ed:8d:30:b8:73:9b:7c:c2:eb:4b:d2:97:73:d9:
30:b3:13:ec:33:23:db:e2:ec:2d:33:7e:1f:9b:a8:
3a:83:37:c1:8b:35:6b:bc:7e:6c:db:90:45:f6:33:
5d:bd:3b:9a:50:2e:df:77:46:dd:2b:01:57:07:5c:
8a:44:f1:4b:f2:59:65:72:10:0e:b3:90:09:89:ab:
2a:50:db:ac:8b:81:8f:84:62:51:2a:fd:7e:16:38:
96:54:d4:f0:6f:92:12:cf:a8:91:c3:96:0e:73:0d:
19:65:07:32:a1:68:11:95:51:3a:6a:7f:47:61:5e:
1a:d5:3a:1e:09:ce:41:2b:3e:c8:f2:b4:ed:39:45:
b9:6e:ec:c8:ac:71:4f:f3:f8:9b:99:74:43:2f:9f:
1a:d9:d6:6e:d5:5b:65:9f:98:85:f1:0c:a2:e6:3c:
0e:41:d3:1c:fe:bd:1f:45:92:53:dd:18:6b:11:fd:
d7:da:99:f0:3a:a5:1a:b5:20:73:79:2e:56:1a:62:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:92:59:B9:B2:D0:EA:31:A8:48:49:DE:6E:AB:E9:7D:5A:F6:FE:34
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ee:e3:81:1a:7d:c5:e7:02:cf:c7:8e:02:ea:ec:dc:7b:2d:
60:53:eb:8e:14:7f:51:2c:be:96:08:be:e9:c1:cf:92:d1:4f:
3d:78:ad:cf:63:ea:06:22:54:e2:30:14:48:6f:3e:9e:b8:8c:
e8:eb:88:46:9a:10:43:64:8d:82:6b:63:20:8e:17:2d:a0:fc:
38:78:c2:0f:db:be:a9:08:f2:84:41:5f:b6:d2:cc:4c:5f:3f:
02:de:01:af:d0:9a:9d:11:6d:47:8d:1b:e6:eb:9c:d9:ed:2d:
d2:45:d4:35:98:ea:4f:a3:45:7a:e7:b0:61:bd:99:17:f5:5a:
0d:d1:fd:e2:29:14:81:7b:90:8e:69:c6:f6:47:bb:cc:09:03:
bd:61:3f:48:b0:25:de:e6:8f:e5:30:c5:e5:97:12:d0:f3:05:
3f:74:f6:da:56:e1:43:d3:a4:51:de:4a:a2:b4:23:7f:8d:ce:
f5:83:8f:88:0e:e2:e5:57:fd:75:61:35:5c:e1:79:48:d6:ea:
91:cc:6e:86:30:cf:f9:f5:d8:e4:9f:fb:9c:68:b5:22:e2:93:
13:40:3d:db:9d:64:22:60:48:4a:dc:6b:13:73:ee:2c:19:5d:
00:3a:37:73:93:50:5d:6c:5e:cb:05:2a:3b:3b:75:d1:cd:4e:
f0:9b:f8:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpGI24NXj0PA0FQ7qiKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5
ODNmNWMwHhcNMjUxMDE5MTQwMTM1WhcNMjUxMDIwMTQwMTM1WjAzMTEwLwYDVQQD
EyhhOTkyNTliOWIyZDBlYTMxYTg0ODQ5ZGU2ZWFiZTk3ZDVhZjZmZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotpoZf4qlc8gFnF2uRguIa6k205M
6rbCMM2cuVwLgfigM95o0oDJDntN4VKrh1sLdCA6WVzo/uAfRkkc7Y0wuHObfMLr
S9KXc9kwsxPsMyPb4uwtM34fm6g6gzfBizVrvH5s25BF9jNdvTuaUC7fd0bdKwFX
B1yKRPFL8lllchAOs5AJiasqUNusi4GPhGJRKv1+FjiWVNTwb5ISz6iRw5YOcw0Z
ZQcyoWgRlVE6an9HYV4a1ToeCc5BKz7I8rTtOUW5buzIrHFP8/ibmXRDL58a2dZu
1Vtln5iF8Qyi5jwOQdMc/r0fRZJT3RhrEf3X2pnwOqUatSBzeS5WGmIaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmSWbmy0OoxqEhJ3m6r6X1a9v40MB8GA1UdIwQY
MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt
MzFhZGY2NDM5NjQzLzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz
LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+7jgRp9
xecCz8eOAurs3HstYFPrjhR/USy+lgi+6cHPktFPPXitz2PqBiJU4jAUSG8+nriM
6OuIRpoQQ2SNgmtjII4XLaD8OHjCD9u+qQjyhEFfttLMTF8/At4Br9CanRFtR40b
5uuc2e0t0kXUNZjqT6NFeuewYb2ZF/VaDdH94ikUgXuQjmnG9ke7zAkDvWE/SLAl
3uaP5TDF5ZcS0PMFP3T22lbhQ9OkUd5KorQjf43O9YOPiA7i5Vf9dWE1XOF5SNbq
kcxuhjDP+fXY5J/7nGi1IuKTE0A9251kImBIStxrE3PuLBldADo3c5NQXWxeywUq
Ozt10c1O8Jv4bg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:45 2025 by rpki-client