Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: ylrShOF5Jtzgx5Ig5yZnftgCPtXqHE/lWzd2Gz7jrnE=
Subject key identifier: 00:D9:B8:9B:ED:68:13:BA:2E:F0:08:FA:ED:D1:87:9F:BD:CF:F7:4F
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 01988F597383B3AD1413286DFCC20BF361EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 031A
Signing time: Sat 09 Aug 2025 15:01:00 +0000
Manifest this update: Sat 09 Aug 2025 15:01:00 +0000
Manifest next update: Sun 10 Aug 2025 15:01:00 +0000
Files and hashes: 1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=)
2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: bRpscrVmGArWwWZsOmcXcRmuSlghWFpNuwW5pqs6eUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:73:83:b3:ad:14:13:28:6d:fc:c2:0b:f3:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Aug 9 15:01:00 2025 GMT
Not After : Aug 10 15:01:00 2025 GMT
Subject: CN=00d9b89bed6813ba2ef008faedd1879fbdcff74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:a0:f4:eb:9a:28:6f:ef:08:a5:25:45:43:
76:83:c6:f7:51:fe:b7:b7:70:78:4f:a2:0e:ff:ed:
b8:bd:d3:2e:87:b0:53:ee:f6:27:1d:49:ce:0f:28:
a6:97:4e:49:38:c5:be:0b:07:32:da:dd:2c:74:56:
a3:30:d6:ec:1b:8a:ec:92:a9:a5:06:1b:88:71:e5:
76:ef:8d:7a:0b:bb:d8:80:d7:ae:d5:c0:8f:bd:1b:
36:ab:ff:36:6b:4f:5f:6b:3f:9c:67:52:f3:1c:47:
65:5f:d5:c2:28:94:e6:ba:80:b4:64:10:19:be:86:
58:2f:6e:79:c6:94:28:b9:ec:50:90:07:6c:b1:e8:
d8:a6:3d:79:c6:b8:50:e9:9f:c6:7f:ed:fc:0b:63:
64:a3:84:5c:e9:6f:81:05:a7:46:56:b1:90:fe:bd:
42:6d:f0:7c:8e:6a:95:85:0d:00:ce:29:f9:b0:00:
77:ab:3e:ce:16:d7:df:a9:39:bd:d0:ee:7c:ae:4a:
c1:57:c2:57:06:c7:fd:f8:9b:0a:ac:b3:29:10:88:
1b:5c:3c:df:e4:db:c8:d0:88:c3:c1:d3:a9:8c:7b:
e8:e4:53:1c:f2:b8:a7:d6:ef:43:3a:b2:73:ba:33:
08:e4:78:74:ef:21:27:26:f0:d3:a7:6c:dd:69:80:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:B8:9B:ED:68:13:BA:2E:F0:08:FA:ED:D1:87:9F:BD:CF:F7:4F
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6b:9d:51:81:57:94:17:7f:d7:04:8f:ae:77:d8:2d:2b:86:
70:9d:47:9d:70:f2:7b:e1:3c:b3:35:5e:a2:45:11:6d:0a:28:
f7:6c:c3:58:f0:f6:16:fb:8b:4a:27:e9:59:b2:ac:c8:fe:43:
f2:4b:d1:24:9c:13:6e:b5:26:9c:03:06:b9:5a:07:1b:34:ea:
09:27:29:ca:f7:c0:52:9b:60:03:c4:9c:d4:8f:d9:ce:a0:47:
68:86:9e:59:f6:81:3a:71:cc:98:77:fe:e9:d1:76:de:59:7f:
78:14:35:58:0f:5d:10:17:7c:c1:6f:71:45:08:5c:f0:f5:9a:
00:67:cc:3e:ce:6b:31:19:ed:09:11:60:52:af:5d:28:d9:c4:
a2:98:d1:57:59:a8:69:01:30:c3:02:26:fc:23:1e:23:ba:4f:
59:e1:65:40:ea:5c:6a:c6:26:f1:c5:e4:88:4a:19:be:e8:43:
82:f9:88:a5:ec:78:5b:2b:11:f4:40:3a:66:81:05:ea:91:8e:
71:91:df:c4:f0:f5:11:ab:d3:b0:04:75:14:c2:52:fe:83:bc:
ad:d4:21:94:65:05:c0:55:d6:ca:52:2b:18:8b:6a:3e:84:f9:
65:d9:58:af:6b:af:e2:01:4a:f7:06:20:fe:12:19:1b:d8:21:
16:ef:25:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPWXODs60UEyht/MIL82HvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDVlYjZhOTY4NjRkZmEyYzUxYjJlMjU2YzUxODBhYjky
MjI5Y2QwHhcNMjUwODA5MTUwMTAwWhcNMjUwODEwMTUwMTAwWjAzMTEwLwYDVQQD
EygwMGQ5Yjg5YmVkNjgxM2JhMmVmMDA4ZmFlZGQxODc5ZmJkY2ZmNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt2g9OuaKG/vCKUlRUN2g8b3Uf63
t3B4T6IO/+24vdMuh7BT7vYnHUnODyiml05JOMW+Cwcy2t0sdFajMNbsG4rskqml
BhuIceV27416C7vYgNeu1cCPvRs2q/82a09faz+cZ1LzHEdlX9XCKJTmuoC0ZBAZ
voZYL255xpQouexQkAdssejYpj15xrhQ6Z/Gf+38C2Nko4Rc6W+BBadGVrGQ/r1C
bfB8jmqVhQ0Azin5sAB3qz7OFtffqTm90O58rkrBV8JXBsf9+JsKrLMpEIgbXDzf
5NvI0IjDwdOpjHvo5FMc8rin1u9DOrJzujMI5Hh07yEnJvDTp2zdaYBuVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADZuJvtaBO6LvAI+u3Rh5+9z/dPMB8GA1UdIwQY
MBaAFAjV62qWhk36LFGy4lbFGAq5IinNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUt
YmI2ODI5MzYwY2VlLzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUtYmI2ODI5MzYwY2Vl
LzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGudUYFX
lBd/1wSPrnfYLSuGcJ1HnXDye+E8szVeokURbQoo92zDWPD2FvuLSifpWbKsyP5D
8kvRJJwTbrUmnAMGuVoHGzTqCScpyvfAUptgA8Sc1I/ZzqBHaIaeWfaBOnHMmHf+
6dF23ll/eBQ1WA9dEBd8wW9xRQhc8PWaAGfMPs5rMRntCRFgUq9dKNnEopjRV1mo
aQEwwwIm/CMeI7pPWeFlQOpcasYm8cXkiEoZvuhDgvmIpex4WysR9EA6ZoEF6pGO
cZHfxPD1EavTsAR1FMJS/oO8rdQhlGUFwFXWylIrGItqPoT5ZdlYr2uv4gFK9wYg
/hIZG9ghFu8lVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:21 2025 by rpki-client