Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: XvinmhRIM3Z7QKsUUZFnHi4gkh6rtck8Q39iRdNexgA=
Subject key identifier: CD:0A:4B:D3:4A:24:43:BA:FE:84:C8:29:EF:F6:68:34:0B:C1:D1:33
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 01988FC721E3C6DF0B88E2A60F3DDF75F12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 116F
Signing time: Sat 09 Aug 2025 17:00:48 +0000
Manifest this update: Sat 09 Aug 2025 17:00:48 +0000
Manifest next update: Sun 10 Aug 2025 17:00:48 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: CkE+eWJf9xqysGMnv+tMxv1DWfKMquwLWN5b9IBL3bE=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:21:e3:c6:df:0b:88:e2:a6:0f:3d:df:75:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Aug 9 17:00:48 2025 GMT
Not After : Aug 10 17:00:48 2025 GMT
Subject: CN=cd0a4bd34a2443bafe84c829eff668340bc1d133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:3d:0e:27:86:67:51:a6:f0:0d:50:21:bf:
f0:5b:53:b8:b2:5d:f9:84:b1:c0:00:8a:3f:c5:74:
1e:5f:9c:89:1f:af:66:4d:3f:2c:f6:43:94:30:33:
78:db:57:cc:97:17:b8:1d:70:57:84:c4:76:82:a3:
7f:32:d7:5c:c7:92:90:2e:f7:eb:fb:a4:64:86:5d:
5c:fa:2d:5b:e2:11:8b:77:3d:ec:5b:a9:23:ac:f1:
b2:76:1b:54:bb:5f:c1:e1:7d:3b:7e:70:a8:ed:e5:
fe:57:c7:6d:d1:8d:6a:bb:53:35:53:57:37:68:b3:
76:27:ba:93:87:ff:15:36:56:a1:00:e5:b3:f0:a2:
bb:a5:1a:da:e8:17:f8:4e:90:77:37:5c:1f:31:2f:
0e:26:3c:57:e3:5e:d8:b7:9a:a3:e8:c2:6a:94:23:
9b:f4:2b:36:b2:59:97:e2:67:79:5b:ba:9d:79:79:
1b:ef:fc:d6:bb:b6:ca:4d:d3:12:fe:cc:f3:c6:5e:
b5:a4:2d:68:b9:af:f3:f0:3c:66:29:58:7f:e1:9b:
f6:2c:ce:f0:4d:66:e7:fd:25:62:a4:34:b0:ae:71:
a5:7a:3b:ae:c8:a2:18:5e:69:32:eb:45:74:fc:c2:
fb:55:bb:58:64:0f:32:03:6d:3a:26:a6:10:fd:f4:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0A:4B:D3:4A:24:43:BA:FE:84:C8:29:EF:F6:68:34:0B:C1:D1:33
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bf:18:66:12:5c:76:be:1d:6e:49:e6:5a:ee:89:3c:29:52:
44:00:9f:e3:b5:71:76:85:ef:a8:8e:1a:bb:d5:71:7c:8d:d8:
a7:c2:f3:ac:62:df:de:45:1b:b8:95:01:04:3e:0f:a6:84:cd:
53:60:3a:56:fa:12:0f:25:80:dc:aa:fc:47:30:5e:76:e4:a4:
25:c1:c8:1d:86:ef:f6:4f:4d:01:2b:a7:2e:56:98:89:00:0f:
2b:1d:71:f9:ff:b7:3a:50:13:a7:69:c1:1e:65:17:ac:9a:24:
f0:38:c5:2c:c1:24:56:5a:ae:5f:55:f0:f0:87:19:e7:f4:4d:
e2:ea:a3:58:26:55:1a:ac:de:c0:6a:fe:db:19:08:ad:08:bb:
ba:5c:30:6f:92:cb:60:30:88:fa:05:47:f2:d6:e2:9b:54:6c:
67:ec:1b:8a:40:a0:93:50:4f:8a:5e:01:ea:39:61:54:82:20:
cd:90:eb:6e:38:97:4c:03:8c:f5:0d:96:e3:1f:1a:a3:32:96:
5b:65:41:74:be:49:b2:74:c9:c1:7f:1d:a9:fc:ca:86:72:51:
20:d4:26:31:28:a6:20:8b:f5:2e:28:5b:2e:96:33:57:51:7c:
84:ae:4b:ce:ea:bb:c6:70:01:b2:95:70:84:12:d2:f7:6e:46:
6b:76:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:28 2025 by rpki-client