Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: uX6C0gYkXtH6QVcprVgdq7HS+A4LjbcHCKQmK0H1jBo=
Subject key identifier: 7A:28:87:23:BF:20:A1:10:37:BF:53:66:26:10:99:4F:2A:34:82:D7
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 01987ED41FAFF801C15138336E802003B9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 0EDD
Signing time: Wed 06 Aug 2025 10:01:27 +0000
Manifest this update: Wed 06 Aug 2025 10:01:27 +0000
Manifest next update: Thu 07 Aug 2025 10:01:27 +0000
Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: Ag+MZDS12sMlK79g5Bh+pC8qoMf4VUmhbUrKpmZaik0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d4:1f:af:f8:01:c1:51:38:33:6e:80:20:03:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Aug 6 10:01:27 2025 GMT
Not After : Aug 7 10:01:27 2025 GMT
Subject: CN=7a288723bf20a11037bf53662610994f2a3482d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:42:f9:53:d7:53:7d:cc:a4:44:2b:09:bc:
1f:48:00:9a:51:0e:36:cc:5a:2d:70:9e:38:9a:1e:
41:8d:59:5b:0f:58:01:68:b7:81:bf:1a:35:1d:e5:
89:26:17:12:a9:ce:db:98:de:37:7e:9f:9f:bb:98:
bd:1e:88:c0:5f:06:9c:05:5c:53:c9:ae:49:4e:21:
1d:87:ed:67:99:b3:21:8c:6b:70:a1:7f:90:08:54:
c7:97:c4:1f:3f:ca:e1:b0:da:cc:0a:9f:64:2a:3d:
76:25:2f:28:ba:e6:5d:c1:06:42:4f:b6:c1:3f:50:
48:4b:9c:d2:81:00:20:a3:c3:9d:b0:87:4a:ab:da:
0b:4c:f6:aa:5f:ea:11:65:8c:35:a5:11:17:45:4d:
22:36:a1:2f:80:b1:b1:4a:9f:bf:c4:4b:71:79:65:
cf:5a:dc:e3:7f:0c:a0:22:4a:8d:2b:7e:b2:27:21:
74:d5:76:f4:25:40:fd:0c:ee:46:c5:e8:d5:11:08:
fb:aa:b2:21:ec:66:a5:9a:48:7f:fc:34:0e:93:30:
32:ab:ba:98:de:c2:1b:57:d3:64:72:5f:01:74:a3:
c8:db:ed:44:ce:8c:e2:8c:ef:99:c2:2c:2c:92:a3:
26:0e:12:41:52:c1:40:4f:ad:be:de:9c:e1:30:58:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:87:23:BF:20:A1:10:37:BF:53:66:26:10:99:4F:2A:34:82:D7
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:65:18:62:18:da:ef:cf:8f:a4:64:ba:77:cb:41:8d:67:38:
70:56:ed:ab:ce:fe:06:a8:ed:c7:79:94:40:59:75:7b:f9:9d:
57:68:29:1f:63:95:cc:a1:31:0d:89:23:84:12:14:81:49:22:
3a:de:b4:48:28:3a:59:91:d7:88:93:28:e9:f6:4e:4a:df:6a:
8e:8e:82:ee:7c:25:aa:1e:7c:ae:94:bb:55:0f:ad:34:cd:7f:
22:b9:11:c2:9a:cc:06:2c:ff:45:0d:65:e7:4f:84:aa:03:f1:
71:3c:15:8e:b9:a3:f6:26:bf:b6:89:95:b4:6f:1b:b3:cb:df:
e7:85:06:fc:58:69:cc:d8:ff:82:27:33:1f:23:10:51:02:df:
b4:f4:b9:d4:5a:55:67:3c:78:ab:cd:d4:54:ca:c8:f2:0e:27:
b9:08:5e:56:6a:11:66:d2:2f:f0:2d:38:99:52:29:48:38:1b:
14:09:b9:07:91:52:17:1b:73:fd:01:90:e7:e2:1f:3e:4a:af:
1d:69:e8:22:5b:6c:dc:8d:f4:c2:d8:70:e2:80:ef:77:a4:be:
d5:81:1f:2f:79:a2:dd:bd:16:47:cf:3d:c7:b3:7b:31:1e:05:
bd:a6:bb:94:c1:92:de:b8:5e:e8:d2:9b:fd:83:10:ce:2d:82:
fd:1c:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:30 2025 by rpki-client