Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: lalnSGzkhJ7VOlAj0WZgOqCfbeGwwu0W7Y43K/Rjjc4=
Subject key identifier: 6C:97:5D:D2:2C:13:DE:24:E8:6E:BF:C2:4F:91:A3:BD:DE:F2:5B:B8
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 019874BE1C46715460A229FF3978A2CC784D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 11:01:12 +0000
Manifest this update: Mon 04 Aug 2025 11:01:12 +0000
Manifest next update: Tue 05 Aug 2025 11:01:12 +0000
Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: knHFQgDVQVqFZPXxygGJpniolBdwMIuefKWT8CndeX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:1c:46:71:54:60:a2:29:ff:39:78:a2:cc:78:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Aug 4 11:01:12 2025 GMT
Not After : Aug 5 11:01:12 2025 GMT
Subject: CN=6c975dd22c13de24e86ebfc24f91a3bddef25bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:9e:b5:3c:5a:8d:87:12:d3:9e:97:81:d0:
c1:0b:b9:ea:72:af:3f:09:f8:8c:d7:1e:69:d0:8a:
4a:ad:60:43:24:c5:17:42:6b:b7:6e:cb:ff:f4:2f:
6c:d8:76:02:54:72:6f:dc:ba:c9:45:98:d9:85:db:
e0:8c:7e:5c:b6:72:80:c4:68:fa:b2:18:0e:e1:70:
9a:4f:84:8d:4b:b8:6f:93:c4:1c:bf:2e:b2:de:3d:
a2:5d:1d:27:3f:a7:45:e4:62:22:14:b8:19:33:b4:
db:5b:d2:91:a6:02:f0:ed:90:d6:13:91:be:13:09:
e8:6a:fa:ca:36:59:f6:c8:ac:83:79:54:a4:2f:d0:
48:a2:85:02:40:34:a9:76:0e:47:da:59:83:aa:ba:
a7:cc:cb:19:27:81:8f:ae:6d:77:d1:d5:8f:94:68:
f3:dd:72:dd:05:94:23:09:ac:28:84:fc:e0:a9:eb:
da:68:ae:25:d1:d6:f3:11:b7:d6:02:55:b0:93:03:
cc:b3:a8:e0:a4:fe:22:76:a7:90:76:e1:3e:bf:2c:
f4:f0:e3:4c:9a:0c:36:f5:da:eb:eb:81:ba:7d:f9:
fa:5a:f6:17:7c:d6:12:f4:8e:c3:6b:06:af:3d:b5:
df:a3:de:a0:ab:21:75:e0:77:ab:14:fc:f2:70:dc:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:5D:D2:2C:13:DE:24:E8:6E:BF:C2:4F:91:A3:BD:DE:F2:5B:B8
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6d:2c:aa:17:50:ab:f4:a1:46:cc:a1:18:76:45:c1:8d:5c:
72:df:84:2f:2f:88:86:79:2e:60:e4:dc:2e:8a:5f:ae:ba:25:
ef:ca:9f:91:cc:fd:d1:dd:4d:4f:0e:36:ec:c4:22:d9:ed:11:
d2:bb:0b:a2:30:63:3e:07:e1:c9:53:0d:ab:dd:81:14:9c:6e:
2a:de:dd:e1:cc:99:97:55:2d:45:99:19:6e:05:82:07:cc:bd:
4e:27:89:2c:56:dd:9d:b2:bc:b9:68:ca:8a:dd:9c:dd:69:2a:
5e:28:7c:dc:a9:25:51:19:7d:3b:11:93:18:89:f6:4c:2c:9c:
0f:78:f2:e5:4b:a3:a9:83:c2:cb:a9:61:ad:f8:55:99:7e:43:
b4:08:cc:c5:35:b4:cf:45:b1:25:71:59:6f:af:06:df:cf:52:
fe:13:4f:60:bf:ed:18:58:dc:b5:92:cb:8d:9a:7b:80:69:ed:
10:a7:cc:c1:db:44:79:83:d2:65:2f:e9:23:17:ef:1b:58:1f:
5c:a2:db:71:99:fe:da:cd:67:18:3b:59:28:e4:16:a9:eb:f5:
13:20:b5:24:4e:a5:88:ae:25:89:94:17:7d:03:42:f7:9a:69:
d6:d6:ba:57:34:58:b3:02:68:fd:eb:0c:8d:84:8b:5a:61:e1:
07:4e:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:14 2025 by rpki-client