Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
File: nEswhmFPR4OKPoCj5uBR09imkvk.mft (raw, json)
Hash identifier: aZvbe2r08p3dCdVma7nwYirn5+xGS5fmoktq0zg+kXo=
Subject key identifier: 98:DE:A0:32:E0:55:B2:D0:66:DC:10:3B:87:A3:0B:85:BB:97:0B:6B
Authority key identifier: 9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
Certificate issuer: /CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Certificate serial: 01987B9D056958F2B0D7FFCAE65FB45601F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
Manifest number: 0667
Signing time: Tue 05 Aug 2025 19:02:24 +0000
Manifest this update: Tue 05 Aug 2025 19:02:24 +0000
Manifest next update: Wed 06 Aug 2025 19:02:24 +0000
Files and hashes: 1: a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa (hash: ix5ZmIac7PSSZ8cbH+U6PyHdhcxmOIX450xPjZ8S6o0=)
2: nEswhmFPR4OKPoCj5uBR09imkvk.crl (hash: jh2fuPXYshpp+Ioq4kdhDyBPM8fiFvR0wEZ6MaKHq1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:05:69:58:f2:b0:d7:ff:ca:e6:5f:b4:56:01:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Validity
Not Before: Aug 5 19:02:24 2025 GMT
Not After : Aug 6 19:02:24 2025 GMT
Subject: CN=98dea032e055b2d066dc103b87a30b85bb970b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:1c:17:49:75:44:b2:13:39:4e:0e:2c:7a:
ac:7c:12:2f:b4:48:54:6f:af:d2:db:42:89:8b:a1:
e1:69:78:24:6e:6c:09:95:d6:7c:8d:31:7c:56:52:
f0:98:55:00:ca:f1:e0:30:9e:cd:8f:8e:1d:58:6a:
73:b6:d1:5d:71:3a:a9:56:b5:9c:f7:a2:da:cc:f0:
97:fd:c2:dc:70:ee:ff:76:83:4b:42:ff:83:b0:2e:
03:16:4e:85:ab:f6:73:70:b2:ff:31:b7:50:9c:c9:
73:c9:47:b0:f0:13:83:e7:8a:34:09:e3:56:99:ac:
05:35:96:c5:bf:81:d6:0e:76:98:4f:78:93:24:47:
50:e8:eb:8a:87:72:c9:a3:4b:bf:63:7b:3f:3b:9d:
b6:e4:92:17:da:74:5f:5f:ca:a3:ee:5f:4b:13:7b:
c0:47:7a:85:bc:0d:a9:5a:3c:db:ac:68:b0:bc:93:
85:0e:0e:49:ab:0e:0d:a2:aa:ed:a3:cf:db:03:40:
7d:5f:fa:f3:21:e5:49:24:ab:fc:ea:d6:66:d4:3b:
fb:74:df:68:2c:11:de:c7:ff:55:be:d6:58:fd:13:
11:cd:c6:d1:83:ba:a2:f2:fc:10:a7:7f:ad:b7:93:
d2:20:ac:59:7e:f5:7f:a0:f4:11:80:84:bb:c1:5f:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:A0:32:E0:55:B2:D0:66:DC:10:3B:87:A3:0B:85:BB:97:0B:6B
X509v3 Authority Key Identifier:
keyid:9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3c:3d:57:49:04:30:58:60:7e:32:76:ed:89:9a:66:24:7d:
26:b8:e7:29:f3:84:bb:1b:21:b2:c4:c5:be:fb:8c:c8:ea:d0:
a9:11:f3:50:63:03:eb:81:9f:3f:24:e7:74:16:1c:c0:23:9f:
e1:dc:15:fa:9e:ce:96:0f:dd:aa:96:b8:3b:25:a5:07:48:b6:
59:3c:e2:60:9c:cf:86:32:f9:d3:53:69:19:69:7a:55:91:8d:
e4:4d:27:db:40:f5:cd:81:0b:ce:2a:77:49:14:82:4f:4c:40:
97:c2:9a:d0:7a:01:50:01:65:9e:73:73:4a:9f:82:9a:d4:7b:
cc:e3:bc:b9:f0:a3:cb:6c:78:cc:04:1c:ae:db:e1:9e:60:1f:
ba:7d:d6:ec:34:59:7c:85:92:db:7f:a9:f4:2a:e1:63:02:0d:
fd:2c:cf:58:a0:55:34:77:d9:1d:17:26:55:01:41:f7:a9:51:
1f:27:c7:55:49:ed:8f:dc:8d:22:5e:99:bb:a6:e8:59:1c:0a:
9d:bf:ff:cc:ca:15:11:0c:b2:7b:09:89:0a:50:18:6a:0f:dc:
32:5f:cf:04:4f:74:43:1f:8f:6c:c3:14:9f:26:52:e9:21:36:
b9:47:7f:10:6c:e8:30:ad:b8:ea:b2:c1:15:b3:e8:ab:85:4e:
ac:0b:4f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:42 2025 by rpki-client