Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: SZR3xafsH9oCyeT7ZA89nCo+0lazbmVN1Z/6Kwead20=
Subject key identifier: 54:58:0A:21:AE:49:DB:AE:34:23:5A:F2:D6:C2:37:73:11:8D:CD:BB
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 01983E0631518DAD13ED3B2349CF2ACE095F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1347
Signing time: Thu 24 Jul 2025 20:00:49 +0000
Manifest this update: Thu 24 Jul 2025 20:00:49 +0000
Manifest next update: Fri 25 Jul 2025 20:00:49 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: /uqtSpcao+VhJg36tl77oc3bo3xwNuj/jBnLK3+5Kgs=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:06:31:51:8d:ad:13:ed:3b:23:49:cf:2a:ce:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jul 24 20:00:49 2025 GMT
Not After : Jul 25 20:00:49 2025 GMT
Subject: CN=54580a21ae49dbae34235af2d6c23773118dcdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:0c:7d:2f:54:f3:2e:08:39:d7:9c:51:76:
1f:26:b8:88:c2:b1:5c:9f:31:b3:58:80:d1:d6:43:
cd:24:b1:25:ee:57:b6:b9:83:63:97:0a:3b:1d:54:
64:3c:3f:50:04:69:8f:34:a8:c3:8f:a7:38:66:2b:
86:86:c2:b3:22:c2:c7:bc:8a:f4:f1:3d:a9:69:f4:
d8:b4:2b:5e:90:d5:84:d9:39:56:f6:db:9c:16:af:
74:c1:11:d8:59:ab:1c:c4:42:f4:56:95:22:4e:10:
ef:88:56:97:22:fc:36:1e:cb:16:b0:66:48:2e:5d:
9c:aa:e0:3f:8e:b0:56:90:07:7b:32:92:38:fd:0f:
6d:f6:e0:45:15:67:3f:77:a5:df:3b:b7:8f:58:a4:
e3:c0:07:a7:29:d0:08:bd:60:7e:39:5a:71:e2:a6:
e0:ad:bf:fb:53:6a:c0:2e:2d:94:76:08:4d:af:82:
0e:e9:ad:38:e3:a1:7c:58:e3:12:e9:41:48:9e:94:
4d:7d:93:72:e6:92:d6:90:9a:2a:5c:d3:0b:53:b6:
dc:bc:18:d6:56:28:ff:91:27:74:14:d7:3f:f5:e0:
63:93:83:0f:25:90:06:3b:ea:f4:ae:6c:b6:34:52:
f9:47:55:64:76:3c:44:d5:15:21:06:44:42:54:bb:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:0A:21:AE:49:DB:AE:34:23:5A:F2:D6:C2:37:73:11:8D:CD:BB
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:87:bd:0c:69:76:0f:6f:b4:f8:d7:e5:05:8a:89:eb:f3:b4:
36:13:7e:e4:1a:c4:9f:a1:d7:f7:35:b6:69:33:aa:06:19:c2:
91:fa:5a:04:51:19:a7:3b:2a:7b:40:81:ec:80:8d:cb:14:52:
d8:b8:6b:0f:88:61:74:6a:dc:7f:9d:9a:fa:37:63:88:c1:94:
6b:04:ab:d7:04:85:ac:d5:58:9f:64:7b:55:65:5e:92:26:ee:
d1:68:ed:5a:fe:e5:8a:47:39:9a:48:e9:36:51:86:a2:d1:42:
c5:3d:a1:25:34:1b:ef:23:e0:6a:d5:58:a9:73:d9:9e:fd:82:
5a:ea:19:2b:2e:4d:de:26:fd:ac:72:2a:85:4c:bc:13:5a:78:
e4:7b:73:24:eb:63:7b:fc:92:8e:79:d3:f7:c0:0e:71:ed:87:
25:9b:94:50:ca:51:73:0b:fc:92:23:48:06:02:e7:0f:e7:c8:
3e:df:dd:e4:3d:4e:c3:85:d0:c9:30:97:80:70:b7:4d:cf:9b:
21:34:78:d9:a6:e3:c8:58:89:48:4f:99:12:16:3c:be:f0:29:
6f:57:ed:7f:93:7b:5b:8f:e1:2e:64:3f:f8:d1:2a:19:36:50:
a6:06:ee:2e:26:ab:56:88:8e:8b:95:eb:48:fe:0c:2b:4f:03:
d7:58:7d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:07:47 2025 by rpki-client