Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: glmKj4ozSGfqdYhJkxE33DWo97cIuRcUAV1L/PTXGfo=
Subject key identifier: 6A:85:D2:B8:4E:FE:4A:A1:43:F7:E5:9A:43:D1:6A:1F:6D:0C:55:CB
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 0198D4E077CDCCA9AF1C4567EDD621663DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: sgavdwN27+J6NcQYbGozxHvVvUlK8V8t0rWkUSFdOYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:77:cd:cc:a9:af:1c:45:67:ed:d6:21:66:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=6a85d2b84efe4aa143f7e59a43d16a1f6d0c55cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:ba:a3:9e:a7:2c:87:e5:f2:47:cc:f3:98:
84:7d:db:67:c0:b2:1a:68:b7:01:80:86:5b:d2:8a:
08:83:07:55:2e:e5:ae:a3:9b:2d:39:19:41:d5:63:
09:33:71:7a:90:c3:c3:d6:5c:b3:fe:de:b4:c9:ef:
e7:d5:73:af:a3:1a:ed:1b:fc:d5:9d:2a:46:8e:d5:
1d:59:57:ca:d4:7a:1d:cb:b3:56:a9:23:27:6f:cb:
46:8e:47:57:cd:aa:b6:12:c9:4f:c1:58:b6:30:82:
21:4d:4e:4b:e1:1d:4e:2e:f5:06:6a:e3:e9:45:dd:
22:3f:05:f6:50:2b:ed:22:ae:86:69:63:2c:2d:cb:
d9:42:d3:1a:22:a2:2a:57:08:c2:11:49:9c:8c:4c:
b0:f7:04:be:ef:20:9b:c6:26:30:2b:b3:00:73:ce:
b8:4f:da:01:d9:aa:e0:46:b3:8b:4d:c1:32:47:5f:
3d:d0:60:e0:69:16:cc:29:c8:76:73:13:c8:1e:00:
74:42:c1:71:c1:2a:8b:0d:92:b8:b7:4d:c4:7c:2e:
d3:42:6d:ef:f1:8f:72:0b:f7:44:af:5e:d2:02:00:
00:ff:b1:9a:dd:74:cf:c1:a2:1d:72:e1:08:ef:91:
0e:43:96:57:d0:a4:0f:45:a2:ac:f9:0f:8b:dd:42:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:85:D2:B8:4E:FE:4A:A1:43:F7:E5:9A:43:D1:6A:1F:6D:0C:55:CB
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:29:f4:67:8e:ba:a5:d0:b3:2e:b5:a8:e4:99:9e:7f:32:3b:
f2:cc:b2:27:d3:9f:f0:5c:6e:59:de:1b:77:6f:da:a2:d7:09:
ce:dc:63:7f:6d:53:58:c2:7b:46:03:05:88:5f:f2:66:fc:3b:
7e:2e:74:f3:4a:00:fe:9a:0f:66:e8:0e:0f:05:9a:c4:65:40:
0e:bb:11:7a:98:9c:d7:22:c7:46:5b:56:92:8a:93:8c:b1:bc:
32:30:0a:18:be:ba:36:13:9f:b9:6c:67:d9:81:8d:be:36:46:
96:66:a6:75:75:b9:98:1b:2b:20:e8:1a:80:99:14:94:46:49:
b0:d8:09:61:4c:4d:79:f5:58:e7:f2:75:bf:8f:7a:28:55:0d:
f9:b8:8b:a3:43:0f:ec:46:fc:01:6a:e4:45:cf:7e:a8:8d:31:
c6:c1:4e:bf:79:9c:46:a2:89:cd:dd:c0:3d:7e:57:ae:fe:48:
0f:73:3b:f3:26:c2:04:12:bb:4a:68:8c:aa:c6:d3:7b:c5:0a:
9f:b2:ca:69:9a:60:cf:f8:94:5b:dd:d8:d7:0c:f3:7c:7d:11:
d9:2f:7d:94:bd:ad:5d:dd:01:f2:6e:a4:8c:ce:53:c2:34:05:
f5:9b:96:71:f3:2d:0e:0d:04:b2:06:4b:5b:85:c6:84:f2:ab:
c4:1d:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:27 2025 by rpki-client