Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: qjl77N3jOOjijdZo8ItwHuzqx0G6Vn1HOdx3cjTbcxA=
Subject key identifier: E6:19:C9:C4:FA:B9:2E:14:3B:A6:15:09:CC:3C:3A:F7:1A:2F:28:AE
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019929A151C710E9988D8C334AD3F4BD00C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 13C1
Signing time: Mon 08 Sep 2025 14:01:01 +0000
Manifest this update: Mon 08 Sep 2025 14:01:01 +0000
Manifest next update: Tue 09 Sep 2025 14:01:01 +0000
Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: 5JbiPYT0I2+KKAU4s124DV47YFzYO8H2vDaPwezjX84=)
3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=)
4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=)
5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:a1:51:c7:10:e9:98:8d:8c:33:4a:d3:f4:bd:00:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Sep 8 14:01:01 2025 GMT
Not After : Sep 9 14:01:01 2025 GMT
Subject: CN=e619c9c4fab92e143ba61509cc3c3af71a2f28ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:73:fa:3b:7c:e2:5e:0b:54:d2:8d:9e:07:
99:80:ac:70:27:78:10:37:10:df:d4:8a:9e:e9:04:
bb:a2:7c:76:57:fd:70:bb:6b:38:3a:47:5c:42:fd:
74:29:d4:34:56:69:72:76:6b:ff:64:a3:bc:34:43:
c0:10:71:1a:f6:e5:1e:50:b0:81:1a:df:3f:d8:75:
37:d2:23:64:f3:2f:3e:28:bf:4e:0f:f4:cd:14:1f:
ea:a9:72:8e:a9:df:06:29:f1:d1:ec:ae:4f:68:02:
ce:de:41:88:d1:3e:b1:e9:33:00:81:6f:ef:00:65:
68:a2:d6:da:4c:df:5e:52:60:96:4e:a6:cb:43:d1:
33:88:f3:0b:f8:61:e3:75:2e:50:ea:06:8e:26:ce:
2e:22:6b:6d:21:92:5a:7a:f1:b5:40:03:79:8d:40:
7f:8a:92:a5:d1:b3:e4:9c:f5:91:64:bc:2a:b2:2b:
81:31:74:3f:59:b4:47:a1:bd:96:05:79:da:c4:c8:
63:ac:30:a1:ca:49:f6:56:c8:68:b7:41:a6:7e:8b:
d7:1f:7f:b2:5d:8f:fc:81:0b:56:77:e4:cc:b9:a1:
40:d6:ef:f9:65:13:a3:3e:e3:f0:15:b9:82:39:1f:
82:a6:f4:07:e9:f8:3a:c4:bb:ff:7f:9e:b7:2b:4b:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:C9:C4:FA:B9:2E:14:3B:A6:15:09:CC:3C:3A:F7:1A:2F:28:AE
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:39:8f:6d:c1:d8:95:af:38:99:f0:d8:6e:39:cd:60:f7:d4:
4c:6a:7a:aa:74:ab:2c:d2:96:8b:cd:18:f2:07:eb:a9:a4:84:
77:7a:89:06:74:77:d2:03:fd:b6:52:85:61:40:38:66:e6:7c:
bc:fc:d4:46:74:c1:71:27:a4:ac:28:8d:a8:3a:bf:6e:f7:24:
7c:0c:fb:9d:30:ea:57:39:c2:eb:d8:7d:6a:49:d8:2f:04:44:
28:93:7f:59:53:43:cb:5a:19:af:bd:de:24:54:f7:af:de:55:
8e:00:7c:9a:e6:89:eb:3a:cf:25:ec:01:ba:fe:28:e7:5b:c0:
e9:ed:d9:7c:f8:ac:e9:71:8b:e5:22:48:62:3d:d7:dd:2e:d9:
9d:98:14:49:92:82:66:75:49:9a:5b:53:ee:ae:78:d4:5c:d4:
d1:20:52:dc:01:a9:61:26:c5:d7:56:d7:61:41:27:8a:83:b5:
a4:a5:3a:c5:1f:4f:c0:d0:22:ba:d2:24:9c:c5:38:37:54:d2:
88:2b:75:81:09:ed:de:3c:e3:10:cf:11:ab:1f:3b:f8:4d:f0:
d3:bb:a5:a3:48:c0:a6:65:47:da:41:84:96:5b:62:28:da:a1:
bb:7c:07:3b:8f:41:d0:4c:51:09:10:a4:df:3e:10:d9:cc:7a:
7f:2d:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:15:37 2025 by rpki-client