Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: UbyL1LMwuOcw2G/gxDYb3FKWho+LpMb9/Jwbf3bZplY=
Subject key identifier: 8A:AD:50:D0:14:F5:63:D3:0C:AC:69:5B:85:75:57:1C:98:CE:2B:0A
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 019787345377E9C1C06BE6223172557AAD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 10E6
Signing time: Thu 19 Jun 2025 08:00:42 +0000
Manifest this update: Thu 19 Jun 2025 08:00:42 +0000
Manifest next update: Fri 20 Jun 2025 08:00:42 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: M75+TJxZyVnYlEIXBoIqYPn7NVa859ZbaLlJPX0blWA=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:53:77:e9:c1:c0:6b:e6:22:31:72:55:7a:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jun 19 08:00:42 2025 GMT
Not After : Jun 20 08:00:42 2025 GMT
Subject: CN=8aad50d014f563d30cac695b8575571c98ce2b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:3b:53:d6:b0:04:79:a5:5a:f1:fa:ea:23:
56:a0:02:0d:31:cd:eb:46:0d:e6:cd:a5:d3:80:77:
3b:00:f1:62:9f:8f:2a:15:f8:9f:14:16:97:6d:53:
a3:1b:70:e3:00:dd:0d:5a:de:41:cc:5a:de:36:38:
3b:5a:05:87:20:c8:07:a4:97:2f:18:db:50:c1:31:
4a:13:a9:4c:4b:f7:8d:10:df:a5:1f:21:03:0d:da:
18:41:88:40:a8:b8:a8:87:38:b4:0e:7d:eb:c7:dc:
0c:1c:28:7d:bb:47:1f:18:67:59:6c:7a:dc:92:0e:
fe:63:d6:c3:04:64:0a:48:26:3f:a1:69:e0:3c:47:
03:28:45:05:fd:1e:f1:9a:b6:cc:0f:0b:b7:3e:bb:
da:dd:b5:c7:f4:9a:63:cd:60:7c:8a:c8:9a:d1:88:
c1:2a:6b:5d:15:4f:98:73:b9:f7:9e:e7:71:da:d9:
83:53:ae:70:d9:50:8f:71:b7:8e:3f:b8:74:e8:3c:
3c:8c:d7:bd:4f:ff:d2:52:ec:0a:8b:e9:fd:2e:37:
e5:1e:08:95:50:80:75:f5:bd:7c:48:22:90:23:02:
7b:db:f1:4a:0d:5c:7e:23:8b:37:86:90:48:cd:6f:
70:82:20:52:b0:49:d1:cf:b9:e2:e3:09:8f:3b:9f:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AD:50:D0:14:F5:63:D3:0C:AC:69:5B:85:75:57:1C:98:CE:2B:0A
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:38:93:b0:22:49:92:84:7c:f5:d8:45:fc:fd:1b:b1:c4:
54:0a:d3:27:90:18:de:d3:13:46:ab:d7:ff:af:dd:11:09:5e:
63:a4:07:9c:a8:6d:1c:88:ff:2a:2a:01:ad:63:9e:90:5e:72:
64:51:7a:5a:ed:56:85:3c:bb:a7:49:ca:7b:0d:87:23:3e:7c:
1e:f2:0a:61:cb:a0:b9:c9:d0:27:46:07:52:4c:74:b5:ca:d3:
79:7a:2a:54:51:be:3d:3d:9c:ac:d9:c1:95:4e:30:d5:c8:71:
74:44:42:63:ac:74:6b:92:4b:85:2f:c6:e6:9f:28:db:c2:7f:
af:5c:2b:42:78:3f:ec:ce:56:76:45:cf:7e:55:6a:02:32:64:
73:75:04:a1:fd:00:65:c7:af:33:27:46:65:7a:6c:32:0a:c9:
e8:9e:0d:43:a5:bf:ef:fb:1d:7d:63:bd:26:95:ab:05:35:53:
ca:a9:3a:05:d0:94:36:27:6f:53:82:2b:02:70:2b:0d:b2:a9:
f2:94:3a:64:32:fe:e2:7b:56:0b:38:ca:02:c0:0f:cc:58:41:
2f:22:b6:c8:f1:aa:b5:40:dd:21:4b:52:67:27:28:88:de:24:
6a:2a:08:eb:1f:f3:9e:62:a8:c8:24:bc:a3:d3:71:6f:f3:dc:
e0:f4:40:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:59:45 2025 by rpki-client