Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: zTuk8O/w2YEBlKrS676/BHNRLcH4Shdra6hK2a/NWJM=
Subject key identifier: A4:BD:80:3B:63:97:20:E5:3D:9A:88:F6:FC:44:BF:7B:84:64:BC:6F
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 0197B7EA48F305DDDB6E3D5D4B18F13C3FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 0E76
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: tFYE+ntlVaSWjiQs10dANbfPAKybVBnVZ6yWWD4SsNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:48:f3:05:dd:db:6e:3d:5d:4b:18:f1:3c:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=a4bd803b639720e53d9a88f6fc44bf7b8464bc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:65:95:b9:e3:0a:99:1b:24:ad:e7:41:21:
77:a8:b1:e2:12:2b:81:92:af:e3:c6:6e:a5:6c:ca:
e4:5b:e4:cc:ef:1e:62:0f:22:8a:a2:c5:72:2c:a8:
63:90:c9:64:00:5c:b4:4e:e1:26:7b:b6:f7:f5:23:
75:fe:ee:fd:d9:d4:bc:cd:3e:11:28:b3:c9:ac:a6:
0d:0d:f2:cb:a4:03:2a:26:5b:df:a7:80:bb:b8:54:
09:95:9c:d4:f6:91:84:28:fb:ec:9b:69:86:d0:27:
f9:9b:72:a2:5a:2e:d0:cb:99:06:fd:d6:44:21:a1:
d7:46:69:b7:38:0d:0e:29:ac:fb:38:65:19:ef:55:
40:43:e3:34:c3:25:03:40:54:dc:b6:42:af:0e:53:
d5:b3:4a:53:89:e2:71:bc:d5:37:ac:f1:3a:6d:5d:
95:00:87:d5:de:f5:e3:a5:8f:7d:b5:a5:fd:60:be:
99:eb:fd:1c:2f:24:e0:58:c9:a9:df:1a:ee:3b:3b:
f2:e5:a0:49:93:f2:c3:ad:36:91:ef:0b:f9:49:1d:
bf:16:89:ba:4c:49:0a:d0:91:cb:e2:b8:9f:d6:8c:
df:2d:a4:f0:a5:60:d6:e6:a4:1b:4b:22:7b:35:72:
b2:7f:40:bb:f2:f2:76:f8:18:16:fb:a8:74:34:12:
6c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:80:3B:63:97:20:E5:3D:9A:88:F6:FC:44:BF:7B:84:64:BC:6F
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:aa:3f:28:f8:c8:f9:df:e6:fd:25:60:3a:a0:db:4b:ce:d5:
87:83:7f:96:bd:40:c0:e0:51:e3:f6:32:14:9b:05:3f:45:9b:
c7:03:23:54:ad:b8:22:ef:f4:01:34:a4:6a:2b:ce:50:02:2d:
f4:1c:30:8c:c9:15:8d:e5:f9:32:c4:47:41:36:9c:34:63:ba:
60:bf:eb:59:a3:6d:3f:b5:1e:7a:4b:a3:37:b9:f7:40:5c:25:
4d:67:89:14:37:f5:62:b3:25:65:52:d8:51:3a:5a:5e:84:ce:
06:82:b9:c8:d8:1e:37:8f:7b:38:b1:48:7e:99:ba:cc:f2:31:
35:29:f3:28:fd:9d:b1:5e:14:d8:67:c3:28:58:cb:51:e9:20:
69:d8:d9:16:97:7a:f9:24:4a:fd:f6:c2:7a:46:23:d5:ff:38:
44:25:b3:bd:47:23:a6:9b:80:1a:a9:eb:fb:7d:d8:42:0e:35:
5c:94:2f:46:aa:a6:dd:e7:d6:39:fc:1b:15:76:34:33:fa:07:
88:d5:22:8e:0f:c0:b2:fc:a6:a1:f3:50:65:8a:a4:b5:4d:6e:
77:4d:f3:17:a8:54:82:63:c1:87:c1:eb:7e:42:88:84:4b:89:
07:b4:42:a4:44:04:d1:05:b3:bc:a9:7d:59:ff:96:10:72:d5:
4f:65:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:13 2025 by rpki-client