Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: 561NzaX2GxkM3BR0bHlD2B5bdtTZEdQmykUu+YHjmzo=
Subject key identifier: 7A:C4:16:7F:43:5C:A5:E5:7B:38:07:6C:49:1F:7C:D1:B1:EC:60:16
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0198D473D66395C8031B0F1FA1C07C52754F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0CE2
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: 7cyq2TkWiLokF7e5HcrX3qkYubGiMcJxGp6qTfzE50c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d6:63:95:c8:03:1b:0f:1f:a1:c0:7c:52:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=7ac4167f435ca5e57b38076c491f7cd1b1ec6016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:4d:fe:ee:20:03:ce:cc:26:18:a1:93:81:
41:33:3c:c8:1c:15:0e:ce:31:c7:5e:ed:f9:6b:48:
ce:05:28:fe:dc:00:b5:0e:29:02:50:f9:0f:62:a3:
9c:5d:7c:82:23:bc:ca:46:57:27:82:89:82:2d:03:
cb:9a:db:4e:61:3d:66:26:bc:d9:4d:af:e8:ca:f8:
95:4c:6f:ca:bb:44:77:37:5c:f4:11:2b:2c:bf:99:
4e:e7:7d:e6:25:03:f1:33:d7:53:6a:be:44:cf:e8:
0d:07:d5:03:26:61:d0:34:14:da:50:df:52:2c:0e:
89:9a:7a:a4:3a:51:42:de:d9:08:78:46:3c:38:8b:
7d:f3:6f:22:b6:be:0b:21:df:13:06:62:42:9c:1e:
85:9c:eb:95:f9:88:bf:b8:6b:91:a8:07:fb:f0:c6:
15:59:83:92:a0:6c:11:2e:55:96:93:aa:20:27:a4:
1c:92:5f:5d:87:82:d9:cb:d4:ac:66:50:7b:80:c0:
e7:8b:f7:f0:0a:05:ff:f7:ee:7b:38:65:ac:7f:b0:
0b:2b:88:ff:5e:74:01:23:7c:af:7b:a5:74:23:bb:
e0:7f:da:9f:9a:20:94:fd:61:a3:58:2e:f6:f0:6f:
45:1c:bf:c5:76:bc:fb:17:4d:e0:85:74:66:0a:1b:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:16:7F:43:5C:A5:E5:7B:38:07:6C:49:1F:7C:D1:B1:EC:60:16
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:72:80:bf:55:d0:b7:e3:81:d7:82:8a:f0:d8:9f:87:62:54:
ba:59:a9:8f:74:54:57:b2:18:e2:2d:fa:72:b4:83:32:ff:bd:
f3:ab:15:58:fb:9e:14:8a:02:0f:a8:40:eb:3e:57:78:0c:32:
7b:de:a7:a4:04:fa:4f:4e:ee:41:f0:ba:28:50:7c:58:50:46:
f8:d5:3a:29:0e:e9:79:5a:37:b8:96:d8:95:c3:68:7d:50:14:
c7:ab:37:da:d0:58:3c:c6:08:70:63:82:4a:49:d2:c3:51:88:
1d:0b:85:38:8c:91:4f:52:fc:d8:0b:d1:e6:47:74:e1:90:7b:
c4:0f:8d:bf:d3:16:80:32:17:ad:47:e9:06:86:04:ac:26:35:
da:c1:37:6d:0d:62:06:83:db:a2:f5:8c:e5:57:bd:33:f2:54:
9c:48:1d:fd:66:45:63:87:89:ba:83:4e:bc:90:14:26:3d:fb:
16:bb:72:b9:aa:11:4b:fe:15:92:a3:bc:68:d0:88:e3:04:b8:
40:44:6f:d8:bd:b0:3a:bc:80:e3:4d:e3:b6:b9:9c:4f:1b:c3:
0b:c2:c1:c9:e5:e9:f2:b8:5f:99:93:93:e9:48:7f:13:89:c2:
3a:f0:e9:b8:9f:1f:a0:a6:4d:53:4e:c4:8c:b3:41:56:f1:69:
7b:8d:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:03 2025 by rpki-client