Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: bPZPItCZEH/v7vAlis76j95dxuytGI8ZMASia2cKPs4=
Subject key identifier: 24:E3:1F:80:8D:AE:4D:1D:8A:9C:1D:6B:9D:44:DA:8F:A1:63:E7:5D
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 019784D81ACF6C58FEC0677439645BEBF336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 0290
Signing time: Wed 18 Jun 2025 21:00:44 +0000
Manifest this update: Wed 18 Jun 2025 21:00:44 +0000
Manifest next update: Thu 19 Jun 2025 21:00:44 +0000
Files and hashes: 1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=)
2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: rjDXzxVWNCasVAb7fCt8BsZeR7BrQPi04pD5rR9GZMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:d8:1a:cf:6c:58:fe:c0:67:74:39:64:5b:eb:f3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Jun 18 21:00:44 2025 GMT
Not After : Jun 19 21:00:44 2025 GMT
Subject: CN=24e31f808dae4d1d8a9c1d6b9d44da8fa163e75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:74:cc:74:de:85:75:b9:93:d1:91:cb:40:
4c:78:44:3f:cb:6d:8e:be:0c:93:f2:a8:2b:d9:74:
8a:ab:34:6d:4e:a7:42:88:5d:74:12:df:5d:45:ac:
91:ef:4f:24:29:ab:d3:56:70:3a:c6:6b:1b:e5:cc:
e1:8f:41:ce:53:ad:56:50:37:31:75:47:95:92:6f:
d5:5c:04:88:af:48:e5:6a:e4:d6:45:0f:7c:2d:6e:
5a:8c:9b:21:80:7e:40:aa:f1:de:50:3f:ba:a1:7a:
c6:ae:66:71:24:11:0e:a7:25:c2:81:e0:07:45:4e:
6a:58:33:e0:8b:30:71:7c:e1:92:aa:31:42:f4:b4:
8a:3d:2a:13:43:be:9a:4e:bf:ed:d7:a8:b4:7e:85:
a4:36:a7:6f:8c:56:90:43:db:d8:01:c8:f8:cb:e5:
ed:ba:54:30:02:0c:0c:3a:43:a9:28:77:b7:71:cd:
27:d2:b5:86:82:35:b7:38:9e:d7:68:bd:2a:58:bc:
02:c6:a2:7e:b1:74:49:50:30:9d:bc:02:cc:b9:22:
98:64:10:2e:ae:ac:1b:d2:e7:bd:b0:e3:4b:04:7a:
ee:fd:c7:ac:c0:3a:41:31:1c:81:53:70:a4:32:1c:
39:e5:a0:db:4d:22:21:a5:17:01:3f:b3:a8:ef:cd:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:1F:80:8D:AE:4D:1D:8A:9C:1D:6B:9D:44:DA:8F:A1:63:E7:5D
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:62:e9:a1:e8:80:07:47:98:c0:b2:90:b3:11:04:c5:93:
e8:c4:6f:6f:7f:a5:f7:91:1c:37:78:9f:c8:19:74:fb:66:2a:
26:c3:fc:26:1e:37:40:f7:50:2d:41:d0:2a:62:34:7c:89:d0:
54:84:d1:e4:fd:d1:ae:d9:1b:7e:70:97:11:29:8d:88:81:19:
1a:32:47:04:a4:a1:57:d0:2c:31:35:25:57:a3:79:73:4d:c9:
9d:ea:8a:80:0f:72:c9:d2:23:32:b3:53:75:1c:0c:c1:43:ce:
51:e6:5f:bb:be:ab:f6:ee:5b:54:12:40:9d:66:a1:f3:82:f2:
6a:bd:07:b6:cc:e1:a4:88:67:91:28:d4:f7:b3:7e:a3:a1:9c:
66:23:73:ac:6b:4a:9f:98:05:86:9b:f3:96:f5:81:52:ce:75:
1f:82:d2:46:60:6e:05:26:dd:f2:bd:7a:c6:e4:ec:19:a9:4b:
f2:ad:84:c1:5c:54:c3:1c:2e:22:34:6b:83:00:86:6f:16:fc:
c3:53:aa:67:ca:6f:1c:51:55:31:d5:d0:85:2e:b2:92:67:0e:
51:c2:2c:7b:11:ec:05:1e:22:42:ea:7a:c5:be:9f:43:44:9b:
a3:a7:02:13:71:76:c8:6c:d2:83:84:e6:95:1c:44:f0:0f:c0:
f4:cd:4d:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeE2BrPbFj+wGd0OWRb6/M2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDVlYjZhOTY4NjRkZmEyYzUxYjJlMjU2YzUxODBhYjky
MjI5Y2QwHhcNMjUwNjE4MjEwMDQ0WhcNMjUwNjE5MjEwMDQ0WjAzMTEwLwYDVQQD
EygyNGUzMWY4MDhkYWU0ZDFkOGE5YzFkNmI5ZDQ0ZGE4ZmExNjNlNzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoF0zHTehXW5k9GRy0BMeEQ/y22O
vgyT8qgr2XSKqzRtTqdCiF10Et9dRayR708kKavTVnA6xmsb5czhj0HOU61WUDcx
dUeVkm/VXASIr0jlauTWRQ98LW5ajJshgH5AqvHeUD+6oXrGrmZxJBEOpyXCgeAH
RU5qWDPgizBxfOGSqjFC9LSKPSoTQ76aTr/t16i0foWkNqdvjFaQQ9vYAcj4y+Xt
ulQwAgwMOkOpKHe3cc0n0rWGgjW3OJ7XaL0qWLwCxqJ+sXRJUDCdvALMuSKYZBAu
rqwb0ue9sONLBHru/ceswDpBMRyBU3CkMhw55aDbTSIhpRcBP7Oo780vwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTjH4CNrk0dipwda51E2o+hY+ddMB8GA1UdIwQY
MBaAFAjV62qWhk36LFGy4lbFGAq5IinNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUt
YmI2ODI5MzYwY2VlLzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUtYmI2ODI5MzYwY2Vl
LzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsJi6aHo
gAdHmMCykLMRBMWT6MRvb3+l95EcN3ifyBl0+2YqJsP8Jh43QPdQLUHQKmI0fInQ
VITR5P3RrtkbfnCXESmNiIEZGjJHBKShV9AsMTUlV6N5c03JneqKgA9yydIjMrNT
dRwMwUPOUeZfu76r9u5bVBJAnWah84Lyar0HtszhpIhnkSjU97N+o6GcZiNzrGtK
n5gFhpvzlvWBUs51H4LSRmBuBSbd8r16xuTsGalL8q2EwVxUwxwuIjRrgwCGbxb8
w1OqZ8pvHFFVMdXQhS6ykmcOUcIsexHsBR4iQup6xb6fQ0Sbo6cCE3F2yGzSg4Tm
lRxE8A/A9M1N1w==
-----END CERTIFICATE-----
Generated at Thu Jun 19 04:44:13 2025 by rpki-client