Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: DhRDV0XtsJFKu3/g0BtGn7emqdpp8x8Ly4oqA+ROGSQ=
Subject key identifier: 35:F6:1D:5E:97:84:46:FA:38:03:9A:5C:22:A2:66:EA:8E:83:CE:E6
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 019690035F215506E4B9B6D5B7E1FBDE21D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 1066
Signing time: Fri 02 May 2025 08:01:01 +0000
Manifest this update: Fri 02 May 2025 08:01:01 +0000
Manifest next update: Sat 03 May 2025 08:01:01 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: kyKydO5M4oHDgOLWKuWSj8hVoNBIPUpFRD8HeerXSEg=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:5f:21:55:06:e4:b9:b6:d5:b7:e1:fb:de:21:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: May 2 08:01:01 2025 GMT
Not After : May 3 08:01:01 2025 GMT
Subject: CN=35f61d5e978446fa38039a5c22a266ea8e83cee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:ab:fe:e5:6d:b9:fa:61:f1:70:cd:97:6b:
89:81:29:ab:35:03:e0:45:79:fd:20:95:a4:d8:f8:
38:7f:04:98:b8:b1:68:60:6c:a3:eb:12:7b:f9:07:
73:42:26:20:d2:b0:27:fb:4d:4d:46:cb:47:b6:42:
3c:96:e6:d7:67:7e:d6:59:1e:ef:6a:84:08:68:39:
a3:62:56:fb:25:df:cb:56:c5:53:13:17:b7:c5:13:
fa:4d:75:9c:9b:20:a3:7b:a3:ba:41:02:2f:7b:54:
9f:4f:32:af:69:60:45:a1:40:62:31:16:26:c0:84:
62:10:61:37:e3:c2:9c:70:f8:38:8a:78:19:d5:6b:
7b:4e:ed:4b:6f:c2:be:15:02:27:a9:70:3b:fa:c2:
31:b0:9c:3f:28:a9:39:13:98:85:cf:74:c5:fc:ec:
35:f0:0d:ac:07:fc:55:f5:92:86:ee:ac:9e:56:60:
08:26:11:b9:17:19:af:33:21:b6:06:27:b2:48:0a:
12:84:3b:c5:f0:d6:04:61:31:89:07:65:1f:b0:66:
77:2a:eb:78:fa:6b:3c:45:1f:23:88:b1:7d:a6:9b:
fb:57:37:c5:44:9f:62:23:6a:a9:3d:d3:c9:25:68:
72:c4:1c:80:a0:43:8d:c3:cf:c2:66:8b:71:ad:e5:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F6:1D:5E:97:84:46:FA:38:03:9A:5C:22:A2:66:EA:8E:83:CE:E6
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ed:21:05:b4:7b:0c:61:2e:6b:ed:01:b8:e7:c9:b3:8d:5b:
0d:24:ef:1f:cc:b3:5f:bc:67:01:ea:27:24:f3:c6:bb:0e:f6:
4f:3f:6c:46:58:05:a0:12:6f:4c:9c:8d:a2:b8:32:6c:12:e6:
58:2a:67:ee:e7:a7:8c:c3:2b:d7:4d:d6:72:cc:56:96:f4:0e:
f1:82:d1:c4:f5:84:db:fd:eb:72:35:84:c2:be:ae:ad:c1:be:
4a:8f:a7:db:c6:14:52:27:ad:84:ff:11:63:ba:df:69:66:a2:
39:94:06:be:03:3f:3f:eb:5d:b7:02:29:18:57:93:58:fb:6a:
2b:9f:e7:aa:6d:fb:80:e5:41:42:46:31:50:c9:d5:0d:30:65:
f9:84:3f:ef:d2:d9:f1:6e:fd:d4:70:4a:f0:f1:5a:84:94:70:
99:71:1c:75:b3:ae:02:b4:df:64:1d:33:00:10:ee:44:65:99:
86:eb:81:d3:1f:14:09:95:40:e8:08:88:c6:69:3e:6c:90:7a:
3d:76:c4:0c:62:6b:28:5f:51:e1:7c:be:42:0d:55:07:d3:f4:
ce:fa:ef:3d:a0:84:a1:d0:67:36:47:12:49:3a:70:08:fd:39:
43:22:1b:f1:72:8c:fc:b8:40:07:26:1f:3e:fa:32:ab:1d:d2:
40:85:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:34:59 2025 by rpki-client