Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: wVBSiX25uK29VOCz8B/leDvih89/RVlQTc+rMDVif8g=
Subject key identifier: 25:20:18:FF:A8:CA:2F:4E:E5:DC:F7:10:38:98:E7:24:23:1E:9B:14
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019883C385C102F08258FBC4BD15C5B124BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 3D
Signing time: Thu 07 Aug 2025 09:01:25 +0000
Manifest this update: Thu 07 Aug 2025 09:01:25 +0000
Manifest next update: Fri 08 Aug 2025 09:01:25 +0000
Files and hashes: 1: B6o2wE6gWawQ2uIluRfTifNoqUE.roa (hash: lR7hCY7gYNPQXdb9GPeTgExNM9M4E71Exsz4LaS2qQc=)
2: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: Q2rdcovxqD5gzuzsPdgR/UhatTPUkNqWP5U8jTvwHwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:85:c1:02:f0:82:58:fb:c4:bd:15:c5:b1:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Aug 7 09:01:25 2025 GMT
Not After : Aug 8 09:01:25 2025 GMT
Subject: CN=252018ffa8ca2f4ee5dcf7103898e724231e9b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:25:77:75:31:c9:42:24:79:1e:34:1a:7b:
b9:12:c4:42:44:5f:2f:58:9f:6b:c9:c1:58:3a:45:
bc:26:ad:4b:17:0b:c2:d9:7c:9a:0a:12:d8:9c:eb:
24:71:31:ee:54:f7:b1:bf:21:1b:29:23:50:ec:56:
f1:11:ce:89:d7:a0:31:7d:e0:c3:39:49:8e:7f:83:
00:67:07:76:ed:f4:9d:5f:c5:f3:a2:a0:93:12:f8:
b6:33:f9:ac:2e:1e:a9:21:4e:67:9c:6b:b1:3d:b8:
d6:0b:28:0d:4d:66:7d:9e:4c:f0:ca:a3:1f:a5:77:
77:fa:cf:d7:a1:09:1d:b8:63:98:1b:df:e4:b9:c5:
71:9b:d9:9e:b8:dd:98:2c:80:e1:d7:ee:8e:fa:de:
dd:82:0f:f5:9c:61:1a:34:23:72:17:98:b0:1f:c0:
f2:a5:e8:a2:df:9e:69:bb:5a:7e:b7:0b:fb:1b:69:
cc:da:63:ba:31:a3:5b:40:05:37:dd:b5:6a:cf:73:
53:23:87:3a:a7:3e:3b:4f:ca:f2:a2:a8:da:e0:fa:
0f:5d:94:cc:ca:a5:cb:60:7d:42:7e:0d:13:f3:c1:
df:53:16:af:93:f7:c5:e7:87:b4:11:6c:5e:52:e5:
87:f7:e8:8b:f2:5c:aa:54:cd:8e:26:44:3e:b2:ae:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:20:18:FF:A8:CA:2F:4E:E5:DC:F7:10:38:98:E7:24:23:1E:9B:14
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7c:d1:d0:d0:78:c6:26:97:9e:78:77:27:4e:aa:24:e5:dc:
74:e4:1e:8e:25:92:2a:04:76:a7:10:3d:35:72:00:fe:6a:c3:
c9:d2:f5:a4:18:8a:7d:5b:b4:78:3b:35:11:02:61:7a:94:77:
64:59:c8:36:18:53:3a:1a:6b:e9:ca:5c:23:77:01:8e:fe:2f:
78:9c:38:61:e2:84:d4:1e:02:ec:ad:c5:e6:65:e5:b9:20:92:
a1:4a:aa:57:37:78:58:ed:42:9c:73:1b:27:c3:9e:02:69:14:
28:46:c0:ad:c4:6c:8e:87:04:d0:10:46:6a:1b:1f:af:e9:a9:
28:fb:86:84:0f:5f:10:31:2b:f2:96:73:51:09:6f:92:d6:e3:
c1:2e:4c:48:2d:30:7e:72:08:b3:d3:f6:86:d9:80:8a:c1:1d:
29:2d:1f:9e:75:28:7a:f9:37:07:78:60:b8:6b:62:02:4e:af:
2e:c2:e1:ce:9b:2c:1c:07:75:85:4a:03:d5:32:21:66:89:b6:
26:7c:9a:8e:90:6c:fe:ed:74:e7:6c:dd:dc:b6:29:8a:2b:98:
b9:f8:d3:d2:10:72:1f:b0:d4:e6:58:ea:8d:85:3d:48:30:77:
fe:88:21:9d:7e:00:1a:7a:ee:56:32:03:04:ef:2d:00:c6:27:
20:81:33:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:52 2025 by rpki-client