Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
File: CNUcrod99ApdOUEmBQcIQb0QLFQ.mft (raw, json)
Hash identifier: TyMeVgfZfSeQ9GudGIq//FAhnMG9RiESiierplcpXEQ=
Subject key identifier: 63:D4:F6:FF:33:8E:F6:65:0D:DA:42:CA:C6:A9:CC:8F:19:F9:1C:94
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019916888F42E212D308AAAF38A316168CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
Manifest number: 89
Signing time: Thu 04 Sep 2025 21:01:12 +0000
Manifest this update: Thu 04 Sep 2025 21:01:12 +0000
Manifest next update: Fri 05 Sep 2025 21:01:12 +0000
Files and hashes: 1: B6o2wE6gWawQ2uIluRfTifNoqUE.roa (hash: lR7hCY7gYNPQXdb9GPeTgExNM9M4E71Exsz4LaS2qQc=)
2: CNUcrod99ApdOUEmBQcIQb0QLFQ.crl (hash: D3xqH+lzaj1WU9y0AnvQGPSatwlSJWJnivR/qoF4zNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:8f:42:e2:12:d3:08:aa:af:38:a3:16:16:8c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Sep 4 21:01:12 2025 GMT
Not After : Sep 5 21:01:12 2025 GMT
Subject: CN=63d4f6ff338ef6650dda42cac6a9cc8f19f91c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:15:31:8b:8b:9a:7c:12:8c:83:0d:30:f4:
29:6d:cc:27:83:a4:1d:60:af:d2:4f:15:af:ab:3f:
8b:55:ea:f3:9c:9e:90:26:70:ee:ba:fb:17:c1:cc:
d3:9a:b6:a6:cf:2d:88:3d:1f:8e:31:95:ea:18:7b:
10:bb:66:13:b6:29:47:94:17:4e:8c:bf:dc:78:4d:
90:0e:cc:a8:e3:b3:9e:c1:1c:34:95:0a:ab:f7:c4:
9b:55:92:3f:30:39:b7:55:31:44:8c:2c:06:36:f1:
bd:a0:42:9e:0f:35:1a:56:74:0e:f7:86:e7:b6:0f:
50:87:52:a4:bb:9c:4d:47:34:a5:fc:f0:45:47:45:
05:95:81:46:ea:ed:41:39:39:c7:81:60:2c:39:23:
2b:98:25:9b:95:ed:a0:8b:c5:4f:1f:75:1c:2c:d2:
67:e7:84:87:02:ed:d1:e9:85:9b:f9:37:c0:bb:ff:
2b:4e:94:07:52:c3:1f:67:3e:52:a4:fe:3d:7f:4d:
a0:6d:e4:61:20:e4:45:c5:17:58:1c:23:62:12:99:
1f:58:87:fe:ef:5b:db:b7:2c:d6:30:7e:1f:25:78:
84:f9:b4:29:a3:c6:59:b2:74:19:0c:56:df:03:93:
4d:8c:87:c0:68:86:9e:d4:cf:37:47:c9:a6:1b:9e:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:F6:FF:33:8E:F6:65:0D:DA:42:CA:C6:A9:CC:8F:19:F9:1C:94
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:12:d6:90:59:4c:32:91:d0:4d:ad:c9:06:57:29:50:c8:ea:
fe:97:b2:31:dc:dd:4d:59:d9:c0:d3:b1:1b:00:b7:76:31:ab:
b8:f4:2a:01:e7:9a:78:bf:88:20:9b:3e:02:bd:0d:f9:63:54:
75:b9:38:24:81:41:50:82:72:4c:63:52:96:38:8e:49:57:b6:
e6:53:6d:81:6e:a7:d1:14:2f:25:ed:97:74:f3:59:06:f1:57:
ba:74:3d:f4:c8:0e:b9:1c:f9:0e:66:e7:4b:59:b2:df:96:62:
10:40:e7:33:05:32:f0:ba:8e:28:aa:69:1b:22:ef:3b:f7:45:
85:e3:af:0f:2c:36:8a:22:0c:ea:a7:38:63:d8:ad:fc:bb:c4:
ae:b4:00:e3:4f:10:9e:a9:d1:7e:3c:28:f8:38:bf:33:64:e7:
92:2b:da:eb:ac:ae:ed:08:57:90:64:16:c3:e5:c7:5d:ad:fa:
1a:18:67:76:d4:cb:cf:30:08:1d:72:f9:92:da:92:9a:09:1c:
aa:28:e5:7d:2f:ec:2b:f5:69:4f:ea:5c:44:d3:d5:50:be:7a:
0f:98:33:2f:2e:12:b5:21:d6:31:10:83:a7:1a:49:74:c1:13:
d0:d7:6e:b9:bd:3d:44:c5:ae:17:45:7e:15:c2:bf:5e:8e:a2:
50:6e:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:23 2025 by rpki-client