Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: O9ZWlSjTK9DgCeo4MXyobmNrS/23PBjZjnsHBqn1RoM=
Subject key identifier: 7D:6F:0A:6A:75:86:65:2E:A9:E4:9A:A1:32:51:65:01:0E:6D:A8:E2
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019828FEC83AB09D36F11F40B91AB15594C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 0E
Signing time: Sun 20 Jul 2025 18:00:42 +0000
Manifest this update: Sun 20 Jul 2025 18:00:42 +0000
Manifest next update: Mon 21 Jul 2025 18:00:42 +0000
Files and hashes: 1: B6o2wE6gWawQ2uIluRfTifNoqUE.roa (hash: lR7hCY7gYNPQXdb9GPeTgExNM9M4E71Exsz4LaS2qQc=)
2: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: RPmwntkrkAbwwT2Del2+h1LC35UCpPLTaJgl14z/dys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:fe:c8:3a:b0:9d:36:f1:1f:40:b9:1a:b1:55:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Jul 20 18:00:42 2025 GMT
Not After : Jul 21 18:00:42 2025 GMT
Subject: CN=7d6f0a6a7586652ea9e49aa1325165010e6da8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:9c:db:9c:25:0d:bf:5c:7d:23:31:30:69:
d3:cc:b8:95:dc:98:b1:b9:05:90:22:33:c1:06:a3:
90:3e:33:d4:2e:40:5d:ff:c5:7b:a9:b7:b8:a8:ca:
99:b1:ae:b6:ee:c8:81:e4:2f:05:e7:01:7e:46:a7:
5f:58:56:fd:d7:23:93:9b:ff:4b:eb:f5:60:fd:0c:
34:28:e7:64:54:f3:7c:7d:6e:6d:0b:b6:70:90:16:
42:0a:50:ff:0e:ec:ba:78:24:27:8d:0b:00:6d:01:
a4:3d:20:af:9d:5a:b8:76:ba:6f:52:de:8f:86:b3:
f2:10:8b:c1:76:9c:4e:6e:e0:96:3d:3a:bc:8d:48:
d8:d2:b8:65:ee:e7:dd:ec:6b:70:17:e4:fd:5e:21:
c6:e9:3a:54:52:4a:11:63:90:3c:0d:22:ca:6b:84:
ef:c5:53:5d:2f:a2:76:40:d8:79:0b:64:7b:a5:95:
38:52:07:7b:f8:39:7d:46:5e:72:5f:c9:27:51:f3:
82:0d:61:92:1f:37:52:a3:81:98:39:19:37:12:1d:
bc:e8:6d:40:d0:21:50:52:73:57:66:99:64:6d:7c:
53:d1:5c:dd:c8:0e:1f:91:79:a9:9c:2f:16:48:0e:
d1:74:54:9c:af:f9:50:73:2c:02:9d:27:34:d2:e6:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:0A:6A:75:86:65:2E:A9:E4:9A:A1:32:51:65:01:0E:6D:A8:E2
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:48:30:5d:51:7f:33:a5:f2:87:75:29:32:af:48:fe:db:b5:
d2:20:77:8b:49:58:ae:9a:20:8a:ec:bd:13:5c:be:c0:79:f0:
6b:79:2c:c6:56:3b:78:6d:8c:20:f4:28:7a:fd:64:1d:a8:58:
db:b9:5e:e7:49:49:29:24:c4:7c:4d:b8:c7:74:1c:2f:66:18:
be:18:03:e5:5d:90:1e:30:4a:14:bc:57:12:b7:f8:89:7f:d8:
4b:17:e3:78:2a:af:ed:56:6b:83:bf:dd:16:e7:4e:52:91:db:
69:e0:6c:5e:52:5b:08:ed:95:4f:e7:52:21:0c:3e:7e:2c:64:
ac:24:1c:43:51:c6:fc:8c:55:86:4f:5a:23:1a:cc:f8:66:80:
48:a8:42:c2:8d:dd:9c:21:57:dc:c6:f4:4a:13:e8:93:ad:56:
3d:6c:1c:d4:1a:d3:58:c8:df:d0:99:7b:69:03:7a:9f:fe:ed:
cd:c5:c8:8e:67:7b:30:58:2f:47:45:95:5e:fd:43:33:6e:5d:
27:9b:7f:ff:81:93:22:b8:5c:2f:ad:99:2e:2c:70:0e:14:b1:
b2:1b:47:e7:9b:b8:7c:f5:9b:41:0a:2a:73:98:d5:23:5d:f0:
47:4b:0e:08:19:0f:4b:73:31:d6:62:57:12:22:b4:76:82:19:
e1:7e:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:13:51 2025 by rpki-client