Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: 8GkMKUb3A7XeCSPy4hkaioJNZegtZBkK3f/qT/uUrLQ=
Subject key identifier: 98:7C:BE:BA:A5:FB:BB:14:0E:4E:DE:11:AE:10:DB:4A:6F:4F:C0:DC
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 0198556977BBEBA36B201B5EBFE11146CB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 02FC
Signing time: Tue 29 Jul 2025 09:00:31 +0000
Manifest this update: Tue 29 Jul 2025 09:00:31 +0000
Manifest next update: Wed 30 Jul 2025 09:00:31 +0000
Files and hashes: 1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=)
2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: 1aG7KnQpxRWqn4KTBce7Rdkbep3tmqbN7J6bNBxJ7Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:77:bb:eb:a3:6b:20:1b:5e:bf:e1:11:46:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Jul 29 09:00:31 2025 GMT
Not After : Jul 30 09:00:31 2025 GMT
Subject: CN=987cbebaa5fbbb140e4ede11ae10db4a6f4fc0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:74:7d:cc:e3:d6:ff:82:1e:16:5d:95:98:
87:29:65:36:56:c9:46:cd:46:2d:19:2d:43:fa:2b:
8d:df:33:3b:64:87:db:13:86:d7:5e:51:e4:d2:5a:
bb:1c:31:43:cd:85:34:c1:3f:76:66:cf:22:e3:82:
79:43:b7:64:b2:93:45:25:f5:b5:c9:91:6a:6b:b5:
08:66:da:8a:d9:ed:eb:10:40:8d:96:e0:e9:01:39:
8c:f6:3a:07:45:04:81:59:c8:ec:d9:ff:90:1b:cd:
da:a3:b3:ba:99:aa:5e:1c:bd:c0:67:12:f1:5c:48:
a5:67:6d:ff:69:ae:6e:e8:41:de:b8:69:7f:86:62:
d2:87:6b:71:4c:1a:1d:62:b6:fd:e2:5f:8a:f5:18:
3e:2b:ee:e3:ea:3f:49:1a:3c:61:a1:f4:ac:58:cf:
31:18:b6:01:0d:2c:7d:5c:12:ff:71:4d:b0:87:95:
4c:58:bd:f3:b8:62:36:93:ac:ee:b1:24:d2:db:3c:
36:eb:8d:50:ca:81:d0:57:cf:16:c8:bd:4e:0c:52:
77:04:bf:0c:8f:95:99:59:4a:50:bb:e4:75:95:41:
a8:f7:82:c1:ff:23:53:28:fd:da:1d:40:7e:67:c4:
c5:d2:77:a6:79:fe:c1:36:f3:1d:c3:89:83:60:e4:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:BE:BA:A5:FB:BB:14:0E:4E:DE:11:AE:10:DB:4A:6F:4F:C0:DC
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:c0:ff:d5:41:04:94:2b:18:4c:2e:a4:58:12:e3:db:56:
37:dc:20:2c:ac:ae:00:ed:8c:d6:af:4a:01:4b:e7:9c:b6:7f:
da:a6:cf:bf:fb:13:44:7c:8d:7b:ad:84:32:e7:4b:f2:a1:12:
79:d8:69:ad:2e:a3:a9:14:e3:1c:ec:3e:b0:42:47:d1:e3:ce:
bb:76:a1:10:4e:4b:2f:87:5b:5e:53:4e:bc:3a:36:d0:da:d6:
89:33:ea:ee:67:c1:f7:36:25:76:56:b4:54:9f:50:f8:a9:ab:
97:e8:68:66:4b:67:ce:1e:70:54:89:a2:a1:18:d0:f1:ce:e1:
90:a2:f6:f0:d9:3f:20:f0:34:3a:01:20:5d:27:c1:ee:7f:55:
41:0c:04:32:79:da:8c:6d:2d:52:14:f6:2f:b1:08:e2:ce:ba:
50:59:15:e4:e1:e4:0f:d1:c2:ef:89:66:f7:61:80:03:17:56:
67:59:b8:7d:b1:41:c4:8d:7b:e7:6b:d0:de:92:3e:f0:fd:da:
aa:fd:7e:83:c0:f3:c7:f6:e7:bf:56:4e:7c:7c:62:72:1c:33:
0e:29:c7:ff:cc:58:8e:78:1c:7a:15:b3:4e:50:f2:8f:de:00:
bf:04:17:eb:88:e8:f1:01:f8:a9:32:3a:cb:21:a8:ce:d3:fa:
3d:1b:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 15:14:49 2025 by rpki-client