Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: qZsZGYzZlKvqlIZehuHQN5R7q4Jr42VnwGMNnW9+qag=
Subject key identifier: EE:4A:7C:D8:05:A9:7C:12:C8:B8:95:53:FD:27:97:64:22:C0:56:99
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01987E6628A77AEBEB0912FE257727809B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 094F
Signing time: Wed 06 Aug 2025 08:01:20 +0000
Manifest this update: Wed 06 Aug 2025 08:01:20 +0000
Manifest next update: Thu 07 Aug 2025 08:01:20 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: dWMz3xHW+hSqfSDcnwURW2tavhFU5FmXF5yRQRPrLcg=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:28:a7:7a:eb:eb:09:12:fe:25:77:27:80:9b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Aug 6 08:01:20 2025 GMT
Not After : Aug 7 08:01:20 2025 GMT
Subject: CN=ee4a7cd805a97c12c8b89553fd27976422c05699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:59:9d:2e:ec:ca:da:3b:68:bf:78:2d:a4:
38:1f:35:3a:c0:cf:17:91:c7:38:c2:61:cb:d3:bc:
37:a3:3c:fd:db:99:26:4e:d4:39:e9:83:4e:3e:7c:
ca:b5:cd:67:8e:99:68:0b:be:fe:39:b7:f8:53:6e:
da:77:56:06:83:30:8c:6f:7f:92:90:78:e6:c4:52:
32:2f:f3:82:f9:07:f1:fa:05:d8:f6:43:ac:aa:90:
fb:7b:ba:10:87:13:25:74:52:b9:2f:63:e6:46:90:
43:50:70:b2:3a:98:ef:7b:29:9a:d6:01:18:be:d5:
75:d9:89:e5:7e:ea:59:2b:97:84:01:8c:5b:c2:72:
16:fb:2b:56:16:9b:90:1c:63:7a:49:d1:0f:0c:3a:
99:f6:c2:a7:1d:38:14:72:b2:8a:b7:63:dd:dd:0b:
2a:3d:da:4f:a8:6b:94:de:95:e8:94:66:3a:6f:44:
d6:2f:2f:44:0f:5a:f7:1c:c2:d2:93:e4:91:d3:22:
d0:a6:4c:2b:18:3f:93:79:fd:21:6b:02:19:bc:91:
71:11:8b:36:a2:d8:6b:2a:52:ce:6d:cd:f5:2f:1e:
d9:58:40:55:92:71:3d:14:c6:58:09:b3:78:df:d2:
06:86:df:91:44:44:21:21:4c:ef:7b:f7:b5:b3:e3:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:7C:D8:05:A9:7C:12:C8:B8:95:53:FD:27:97:64:22:C0:56:99
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b2:33:02:6b:b0:fe:f4:ea:15:74:34:47:da:c2:a6:6d:72:
85:8d:a1:e0:b9:9f:40:24:50:7a:95:ad:50:bd:25:51:f5:62:
3e:a9:52:4b:4d:5a:25:3a:ac:a1:ff:28:b4:8e:77:07:6d:22:
4a:3a:91:aa:f0:0f:a1:88:0c:f1:e2:62:ba:18:f5:41:78:0e:
71:e8:de:98:4f:a0:90:09:84:84:ff:6d:14:d7:7b:6b:08:c1:
23:e9:ac:67:99:41:2d:f7:db:96:c7:fb:92:9e:6e:f6:d8:22:
49:29:ef:7a:a5:17:49:71:e0:73:11:8d:47:4f:e9:01:92:b9:
6d:da:8a:c7:53:1e:81:6a:a4:81:a0:90:4f:09:4d:f6:18:63:
53:d7:a3:c8:de:b5:32:96:33:e0:c2:b7:a2:de:c2:33:32:03:
ef:69:01:25:5a:51:d4:41:99:ca:23:84:fd:73:94:ce:ed:6b:
49:ce:b1:da:08:59:4c:f6:57:00:51:74:3b:fd:ef:72:dd:69:
46:9c:f7:f8:a1:f1:40:01:03:3e:fa:40:5a:34:4c:52:e7:9d:
b7:95:7e:8a:39:0d:d3:a1:ed:1b:a7:73:9c:64:27:3f:a5:2a:
9a:8b:fc:5a:c5:19:92:e9:59:02:0a:a1:26:c9:77:0e:1d:2e:
52:be:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:29 2025 by rpki-client