Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: ycS+ocLCl/476ZCTBPLiRxpREAbf57zHh6QOZbpurus=
Subject key identifier: 20:0B:03:A0:47:A5:09:56:6D:22:B3:82:F3:7C:8B:45:5B:21:1E:EA
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 019935DC98EEE54CA170314A799237FF3EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 11C5
Signing time: Wed 10 Sep 2025 23:01:13 +0000
Manifest this update: Wed 10 Sep 2025 23:01:13 +0000
Manifest next update: Thu 11 Sep 2025 23:01:13 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: eeS4GoCEGcFdSlhDk6FLssj8D6NSTaKA8uAaAXW56NM=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:98:ee:e5:4c:a1:70:31:4a:79:92:37:ff:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Sep 10 23:01:13 2025 GMT
Not After : Sep 11 23:01:13 2025 GMT
Subject: CN=200b03a047a509566d22b382f37c8b455b211eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:5a:00:49:71:ad:c2:0c:a3:eb:42:e6:ef:
5e:f9:0a:7f:b4:f1:f9:66:3f:3c:86:af:dc:54:f5:
92:a6:c2:73:67:c7:d2:d1:e6:e1:df:a8:58:ef:9a:
22:1b:ee:a0:e8:6b:6b:d8:33:15:21:38:8c:83:ae:
17:ea:e3:0f:cc:0e:ce:7a:80:2b:93:37:cf:1f:73:
48:e3:ee:3c:a4:7e:67:3f:eb:2a:cf:7c:9f:d6:b3:
3d:42:06:19:1b:28:5d:f9:a2:47:42:99:10:1a:87:
e1:f4:58:11:dc:7a:a5:b2:f5:a5:f9:e8:8d:1e:2a:
ec:6d:cb:bc:eb:26:67:f5:3b:50:46:b0:ac:7b:aa:
e4:dd:21:db:a0:bd:25:37:45:76:67:3e:c6:37:7d:
60:64:a1:42:32:96:fe:1f:b1:f3:d9:ba:e2:69:d7:
54:f2:91:35:51:2a:96:3a:73:ed:52:f3:32:08:fd:
4f:45:99:10:1b:47:4b:41:d6:a1:39:75:9c:6d:de:
65:78:52:2a:ba:fd:f6:14:ce:24:65:97:97:04:b5:
84:a1:0f:fa:f2:f5:d9:bb:59:cc:b5:60:2d:4f:fd:
89:6f:b2:b9:7c:9e:1d:a4:b5:f8:0c:0a:ac:45:0d:
a4:37:34:5c:60:64:ee:f4:6d:58:69:25:b4:83:18:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:03:A0:47:A5:09:56:6D:22:B3:82:F3:7C:8B:45:5B:21:1E:EA
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:65:08:3d:09:51:6c:1c:37:e2:01:eb:80:02:84:2e:35:eb:
e5:ab:bd:20:75:03:01:60:9f:f5:68:1a:e8:b9:d4:f9:49:8e:
fe:05:1e:84:4b:2f:f5:44:7c:7a:dc:ce:f7:f4:5c:74:6f:a1:
a5:63:62:01:07:86:d2:53:94:8d:08:b0:fe:da:ca:39:e6:07:
50:ba:17:63:a4:81:6a:70:68:1a:da:86:f3:1e:52:a7:66:22:
e1:e2:cc:af:20:c8:95:74:cd:c9:6a:e2:2f:b3:e5:ae:b5:3a:
60:8f:55:54:77:ff:a2:1d:e1:cc:9c:fd:d3:fc:05:f2:31:e4:
02:32:9f:8a:6c:b4:bb:15:aa:28:2f:9f:68:3e:6e:f1:e2:7d:
2f:80:cd:60:80:fc:79:2e:46:3c:7a:a6:86:f0:68:c5:68:52:
f5:3c:7f:d0:a5:33:b3:d2:f7:8e:0a:06:73:6d:a7:41:80:91:
14:fc:6c:ce:27:d8:5c:95:52:2f:60:48:2e:7f:5e:fe:91:fc:
ed:a1:30:cd:1d:de:41:c6:fe:87:93:b4:d9:6c:b9:e0:ba:8f:
75:29:3a:27:1d:b6:93:fd:8a:e6:1a:5e:36:4c:48:af:c1:c1:
ca:15:45:af:bf:97:54:6d:c2:84:83:95:18:f4:8a:0c:bf:47:
b2:43:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:10:30 2025 by rpki-client