Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: 5ZhXWtzOWd1zT7P7+E/eCp1YBfipXkE15ySdEFZCkfE=
Subject key identifier: 1A:C2:AD:27:AF:7C:D1:8D:FE:5B:C8:8E:F3:A3:18:43:C9:36:00:F4
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 0199FD343C660BB70B18A1ED6E0C3C8515B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 0FA3
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: yiQsJOczFGPAECeODaEVHzrZkwDU2y55ygcD4Mf6sFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3c:66:0b:b7:0b:18:a1:ed:6e:0c:3c:85:15:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=1ac2ad27af7cd18dfe5bc88ef3a31843c93600f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:04:89:d8:2c:ed:1e:c4:a8:6b:27:c4:70:
14:3c:b1:07:0f:08:37:dd:39:30:7d:44:9b:39:6e:
9b:30:a0:9f:cb:b7:15:c2:4c:cb:1d:0f:65:72:52:
c0:44:0f:a5:47:8c:f3:ee:5d:3d:27:e1:2a:17:81:
5c:34:d8:25:8a:f7:b9:4a:c5:ca:21:c2:c9:ac:53:
67:1c:cf:c7:cc:a0:83:ff:93:3c:32:cf:0e:3a:5c:
d5:16:9f:71:24:65:4b:5a:8e:fe:8e:d5:dd:05:2f:
f7:f2:c3:9c:c9:fd:9d:4f:ea:4b:3c:d4:8e:22:33:
59:c6:8c:46:17:94:75:93:3e:19:72:b1:60:68:8c:
68:45:ab:d2:29:e2:55:d3:52:8c:e3:b9:c8:8f:fd:
4c:e6:9a:7f:33:68:b3:3f:cf:c3:0a:71:4f:45:6b:
e7:05:05:10:0d:3d:62:aa:42:85:88:8b:6f:41:d2:
0f:d0:3e:08:0a:66:ec:68:06:82:b4:9e:63:dd:39:
80:d2:54:44:df:8b:fe:e7:16:34:6f:a8:ab:e3:19:
4a:65:e6:78:4f:23:6c:77:47:27:ca:6f:8f:32:c9:
3a:e8:c5:1e:3f:ff:12:e0:be:9f:d8:6a:aa:64:63:
6c:17:ae:87:b0:b0:49:78:72:ab:f1:47:e2:37:5f:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:AD:27:AF:7C:D1:8D:FE:5B:C8:8E:F3:A3:18:43:C9:36:00:F4
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cb:f8:36:30:43:b1:93:ec:8a:2e:f5:c5:17:24:f9:4a:66:
6c:d8:93:e4:5a:23:ee:65:40:2b:cd:9f:4e:65:00:0c:46:ce:
0d:6b:4b:69:c6:d8:e3:a1:a0:b2:a2:0b:0a:12:ce:66:0d:b5:
f4:91:40:4b:37:42:f1:ef:4d:21:dc:9e:36:1d:7f:d8:78:7f:
49:1a:2c:92:46:99:13:38:61:d8:15:64:e7:56:f3:86:00:ef:
b9:cd:a2:e5:f9:9a:42:2c:16:a8:28:78:fe:c8:f3:a5:ba:c3:
b7:59:49:b7:d8:3e:ea:b0:ff:f4:eb:57:a5:3e:f4:55:d8:c6:
db:20:c0:a8:16:39:e5:77:67:45:0d:d8:af:61:b8:e7:1e:03:
50:9d:2a:89:fb:f6:99:38:2c:cf:94:17:bd:72:cc:c7:a4:9e:
44:29:a9:82:dd:3d:ec:28:15:c7:66:e5:0b:ae:cd:66:6a:fc:
60:0f:2b:2a:24:f2:99:96:98:d9:01:7d:b3:03:23:e5:04:ac:
a2:90:f6:5c:a3:df:a7:6b:ce:94:f7:eb:94:cf:ff:c2:a7:90:
bb:86:e9:86:5b:f6:3b:16:34:98:87:23:10:a0:bc:d1:d2:9a:
ad:ec:47:54:fa:29:4d:3c:23:1c:f1:79:81:50:0b:3c:a2:e3:
55:1f:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:34 2025 by rpki-client