Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: Mo74/6kVcLWlskFY/paPmlQQR+Bn3DqbkJU0mlV8LeQ=
Subject key identifier: 26:7C:B4:26:E2:50:7C:9E:3C:B3:61:F3:A1:D5:53:23:3D:B7:85:25
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01987C77E2989B26A627494B4E0B2CB68225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 23:01:28 +0000
Manifest this update: Tue 05 Aug 2025 23:01:28 +0000
Manifest next update: Wed 06 Aug 2025 23:01:28 +0000
Files and hashes: 1: 1W9zXul869RZscsvs7l5z3KjagI.roa (hash: EcxA9lzR2QkCH8ycmVrRxS2eQO5K8wXyLJAAeSf93c8=)
2: 3NRb9X1EKhOfFj7W1iZuXgUl__c.roa (hash: uat5CyrD021kDb22T/rEGSo6dcpWqYuVdcsqucMCWpU=)
3: AWMfWviNywiou7vcfcntqdl-hKo.roa (hash: a1Kd8HUSNMKFctyJDa6Wjjq1nah5PsW35BpRbQ1fKHY=)
4: D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa (hash: FQWh81XYEPS1XmDh6Irb063J9GhFKg9biAGn32Ht5ds=)
5: LEzl9Qk7MYNbOqPpMlU1Ohh8PNA.roa (hash: UHP2n+X3SSu6vIRko8Q/5h8jCVqX5aAXirgs1zpJmP8=)
6: iT5JpsMQzoMkf4XPO_VvntnOa0w.roa (hash: VTobQYz4A3NOi/P7D09YiSGAxG3/JaBEWHaxO+F1IFg=)
7: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: Fw9wPj3G0Q5guIpkvmdtFNutZt+QTMa+sdE3TX00Fq8=)
8: wNwYQ8mCvTdznk-R9cIS2uXjf8g.roa (hash: K+cjCT9KGnhV7mdPVbb2wa5gxtLw72aubK2ACr6NLQ8=)
9: ykvaDunnWrInYG8JYdl8FUnhb8E.roa (hash: Ow01zePEbOrkUb4yW1o1FSsU+vG0+EPGDtmmuCC0/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:e2:98:9b:26:a6:27:49:4b:4e:0b:2c:b6:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Aug 5 23:01:28 2025 GMT
Not After : Aug 6 23:01:28 2025 GMT
Subject: CN=267cb426e2507c9e3cb361f3a1d553233db78525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:9b:9c:8f:6d:ae:3f:07:c1:f0:ea:09:83:
dc:81:16:bd:20:9a:d9:eb:e9:0f:44:d7:b3:d0:b3:
82:f0:48:36:9e:dc:03:69:e6:5f:31:d9:9c:9c:90:
7c:e1:3c:26:93:3d:5c:bf:57:11:5a:67:c0:57:7d:
77:a5:4c:cb:40:a5:44:09:6f:12:4c:ad:38:2c:ae:
a5:55:eb:c5:b7:59:1b:28:ce:18:28:bd:77:eb:68:
06:40:2c:a2:41:be:68:5a:15:49:77:e9:3b:96:4e:
10:88:71:dc:ad:9a:66:c2:9b:f1:4a:91:90:41:56:
a9:6c:0d:33:98:92:36:b5:d9:48:d7:87:19:7f:29:
12:63:58:4e:a7:fd:d5:9d:25:8b:a7:e5:5d:d4:51:
d5:df:b3:9f:c3:89:f3:63:62:c5:92:d6:ae:b0:7a:
9a:c7:07:b7:1c:87:aa:0e:ae:03:86:ed:a0:91:4c:
a6:2e:78:9a:00:7d:98:76:08:72:6b:92:41:d2:3c:
48:0f:b1:ef:b5:71:80:f2:d1:ea:0e:39:e6:97:32:
a8:37:bd:c4:e2:6c:d8:76:70:8a:0b:53:e5:25:a9:
60:41:3c:34:0f:fa:c0:43:9a:42:eb:80:83:fc:f8:
10:34:43:8c:02:19:90:9a:b5:1b:21:c1:b3:cf:81:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:B4:26:E2:50:7C:9E:3C:B3:61:F3:A1:D5:53:23:3D:B7:85:25
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:33:f0:9a:e2:ca:3b:cd:d4:bd:92:de:92:ea:a6:9e:06:8a:
8c:a5:8c:3a:f9:2a:8d:fb:fa:e9:bb:f9:4d:36:81:0b:46:49:
b6:e1:fa:24:b6:c5:39:aa:1c:32:ba:2c:5d:04:05:e4:c3:97:
0e:8d:4a:e2:7e:4b:80:7e:5e:4d:a2:59:30:32:34:ee:55:71:
b6:ea:f6:7a:c2:48:23:73:8e:e3:a5:8a:26:55:2b:4e:22:e9:
8e:2c:e2:85:8e:d5:cf:69:02:95:68:e7:55:f4:82:ca:4e:ec:
df:f1:a0:de:cc:77:9f:e0:24:5e:8a:8d:82:2f:19:32:44:21:
f9:78:d5:dc:d4:68:fd:ff:a4:91:73:65:b1:10:9b:7a:5e:05:
a6:4d:7c:cb:59:29:bf:74:35:56:68:ab:f1:c0:b4:bf:9b:c0:
8b:b1:b8:ef:61:f6:c6:16:7b:29:d9:2c:8a:ad:88:b0:71:5b:
ac:95:e4:ff:ce:00:2f:d7:39:0e:3b:dd:04:e9:cc:14:01:6a:
59:bd:31:8d:49:9d:a9:8a:aa:1f:cd:86:81:ef:6d:e5:38:75:
9d:ff:fd:8d:2c:88:5f:8f:e8:ff:c1:ce:c4:b5:ab:96:78:8b:
9d:7b:ca:95:d5:a0:ad:6b:8e:81:59:e5:18:12:c9:e9:fa:44:
18:3d:50:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:24 2025 by rpki-client