Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: SC+leX7thN7Aarcx8/PTao9Dz109JPLvUwN77tWPdbo=
Subject key identifier: 29:FF:C4:0D:36:5B:B0:03:C2:BC:70:8C:6A:C2:3E:C2:EE:1E:65:8D
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019880F96DBA262015B901CF8051CF69F380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 20:01:26 +0000
Manifest this update: Wed 06 Aug 2025 20:01:26 +0000
Manifest next update: Thu 07 Aug 2025 20:01:26 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: k9pQLBN3XWdrEFkQ4ZbO0B+BJFpCU9Q3qrfAur3CcKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:6d:ba:26:20:15:b9:01:cf:80:51:cf:69:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Aug 6 20:01:26 2025 GMT
Not After : Aug 7 20:01:26 2025 GMT
Subject: CN=29ffc40d365bb003c2bc708c6ac23ec2ee1e658d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:bb:f8:48:36:c4:49:04:ce:07:f7:1e:9a:
46:b8:fd:b2:7a:a1:6d:b5:0b:fe:73:3a:4c:77:59:
f7:95:7a:0c:d6:fb:2c:3f:0a:43:45:ae:ff:af:91:
87:6d:aa:c2:5a:94:7a:e6:0f:4d:4e:0d:0e:83:10:
d7:d1:09:3b:4d:4d:85:64:c3:3b:99:a7:7f:e4:9f:
ee:8d:dd:e3:21:c4:8f:28:68:5c:30:e3:40:a0:14:
d0:17:ed:8f:44:df:4d:3e:e3:91:8d:9a:72:40:49:
a3:f4:f5:bc:62:ca:37:2e:3d:a8:24:46:dd:a3:b5:
48:78:83:49:63:27:72:3d:87:cb:12:22:d9:76:9f:
e2:64:f9:c7:dd:25:b7:36:99:21:a5:f3:38:f6:20:
0c:10:22:db:6f:d0:20:2c:cd:35:52:ed:8e:25:20:
77:b1:19:c6:d9:03:eb:86:ab:4f:15:97:bb:a6:d1:
38:6e:c8:43:94:5f:9b:df:b9:3c:e7:f3:ed:35:28:
b8:70:e9:94:fd:fe:af:7e:31:85:6d:40:2f:24:fd:
fa:06:d0:7f:c6:b5:1a:33:b3:76:10:1e:89:eb:88:
92:cd:13:6f:82:5c:f3:06:90:9b:d4:25:2a:dc:90:
55:4b:48:d2:5a:e0:ed:4b:06:41:2d:a6:7b:14:71:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:C4:0D:36:5B:B0:03:C2:BC:70:8C:6A:C2:3E:C2:EE:1E:65:8D
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b2:c1:1e:ee:1e:f3:b9:7f:55:db:2f:df:28:1d:63:94:c8:
8a:eb:a4:dc:33:97:82:d9:36:60:96:f7:a7:66:10:71:91:4a:
3a:0c:04:71:60:37:0d:2d:40:b5:aa:28:1b:90:e8:05:32:3f:
e0:48:8c:ad:3e:f1:de:73:de:81:25:ac:66:d9:f9:8a:f6:4d:
e8:ae:90:2b:e6:bb:ef:86:05:b7:9c:8a:37:0b:90:2d:68:da:
bd:14:c2:e9:2a:cb:7d:52:fd:12:cf:c4:d5:8c:bc:b0:02:fa:
ba:b6:11:4a:96:77:4b:48:1f:5a:6e:e1:2b:87:22:e6:17:41:
dc:a0:68:9c:da:f0:4b:45:de:4b:d4:88:f0:d1:91:f1:9e:9d:
66:fb:c9:4f:d4:8b:5d:b6:30:92:c9:e4:ee:88:b7:ce:d6:6d:
ce:8f:ee:b8:f5:7d:8c:2e:61:f0:12:1c:40:4e:ff:17:15:3a:
ee:87:b7:49:a1:54:68:9d:6d:e3:7f:d5:09:eb:6a:a1:96:a5:
54:74:a4:78:32:2a:67:ac:57:60:cb:93:74:d0:55:48:7b:38:
af:5c:f1:31:0c:68:38:a1:6b:68:85:47:2f:3b:40:24:2a:73:
52:9e:8b:28:f2:7d:78:0d:f6:8b:74:ed:08:56:d1:34:4d:cd:
d9:74:a2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:10 2025 by rpki-client