Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: cT6GvlbjQ1n7QFYC9gkDH21VXh3RtzRQvO3WoGjFUpo=
Subject key identifier: 7A:E3:9E:7B:A1:DE:AD:E6:69:CC:0D:D1:40:31:A2:55:43:E4:57:EF
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 01975AC9661752078D49A3DAD7807492A6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 10CF
Signing time: Tue 10 Jun 2025 17:00:37 +0000
Manifest this update: Tue 10 Jun 2025 17:00:37 +0000
Manifest next update: Wed 11 Jun 2025 17:00:37 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: OTZMS/8vJbPgCSoIHm728Q6Ez2lo5fihe2S2nvGXcKw=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:66:17:52:07:8d:49:a3:da:d7:80:74:92:a6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jun 10 17:00:37 2025 GMT
Not After : Jun 11 17:00:37 2025 GMT
Subject: CN=7ae39e7ba1deade669cc0dd14031a25543e457ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3e:5c:59:29:85:91:77:6d:73:b5:f3:fb:31:
d1:4a:10:53:fc:a2:6d:fc:b8:ea:85:8d:e3:b2:8c:
dd:e4:ba:76:cc:5b:45:2f:29:6c:16:8d:65:90:73:
9b:9a:47:7c:ab:52:ae:74:c9:61:78:dd:c0:d3:d8:
15:cf:17:34:3c:96:aa:0a:3c:4b:a3:80:57:86:04:
84:c6:6d:5c:2d:46:d7:4c:1c:23:fd:7c:06:a1:bd:
b2:f6:e5:69:c6:5f:6a:5e:f9:38:33:81:ef:e5:6c:
f7:99:a3:7e:24:ba:fb:10:91:d0:4a:74:13:f9:85:
e9:6a:85:06:b7:21:38:99:51:95:60:e0:03:da:6c:
b9:a8:ff:da:dc:d8:01:62:de:72:73:c8:a4:53:c4:
6f:c2:6d:0c:d3:41:00:2a:46:22:26:e5:f9:30:a0:
1e:0c:4c:90:38:de:c4:60:43:dd:7e:3e:67:30:81:
13:57:9a:1d:5b:c3:1c:5a:a9:75:eb:8d:ae:2d:ac:
54:17:14:6c:a6:c2:14:dd:64:5e:86:32:11:9a:7c:
97:8a:d1:36:5a:c9:69:80:a2:c6:c4:fc:c4:36:9b:
9d:36:0d:cf:55:f0:cd:20:ef:ef:08:78:5d:e4:6e:
c5:66:ad:9d:30:c8:d6:82:b2:e2:4c:f9:04:95:df:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:9E:7B:A1:DE:AD:E6:69:CC:0D:D1:40:31:A2:55:43:E4:57:EF
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ae:46:e1:0c:e2:ba:78:ef:d9:9b:7b:3b:64:10:5a:01:93:
32:36:98:e6:f7:cb:66:75:a8:b6:51:d8:9b:b8:f8:66:7f:6f:
37:5e:d2:59:64:49:02:1e:e9:5c:c2:2e:01:c6:44:0c:f2:73:
d3:91:0e:ea:86:6d:d6:5b:bd:c7:fd:1b:f9:06:a0:3b:ae:99:
27:7e:1e:e6:fc:be:e7:ed:07:6d:40:f8:ea:6e:34:11:d1:33:
14:20:b0:40:67:e0:97:47:5d:a8:f8:c2:b5:88:29:62:b0:ab:
01:53:35:be:11:64:df:26:da:1a:59:e2:58:15:80:8e:e6:c0:
5b:41:9b:ef:35:45:56:3e:e3:13:dc:61:09:28:1c:82:2e:fd:
d2:6f:c5:72:ba:ed:24:6e:1d:9d:9f:0f:0c:68:ec:69:bb:f5:
0f:de:3f:9f:59:b8:b7:69:99:b4:b1:b6:0e:2f:76:fe:c4:11:
79:6d:26:e3:dc:9c:e4:b9:61:34:e0:d1:06:ae:3d:59:b9:1f:
c0:16:f0:6d:5a:06:7c:b8:bd:3d:cc:a6:2d:38:1b:d7:c1:f7:
81:b0:93:90:f5:e9:41:58:06:f8:9c:ff:67:44:79:07:2d:16:
8d:6d:ea:d2:fc:e0:9e:94:60:c1:54:6c:50:66:35:d9:ec:43:
27:79:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:19:22 2025 by rpki-client