Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: CEuAAJV0Tz/phpygKPxPeowcoTJ5Y85D0aegroSXcdc=
Subject key identifier: 57:51:83:9F:41:0C:7A:A0:F5:B2:65:DA:FE:78:83:FA:70:CA:C5:FC
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 0198D5BC5A16E6F4BBACB55B4C0D4283CBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 0F0A
Signing time: Sat 23 Aug 2025 07:02:27 +0000
Manifest this update: Sat 23 Aug 2025 07:02:27 +0000
Manifest next update: Sun 24 Aug 2025 07:02:27 +0000
Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: pFAQnH3VxDf2P1oozHGTdfSewW9MRAwkf7jwviNxmQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:5a:16:e6:f4:bb:ac:b5:5b:4c:0d:42:83:cb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Aug 23 07:02:27 2025 GMT
Not After : Aug 24 07:02:27 2025 GMT
Subject: CN=5751839f410c7aa0f5b265dafe7883fa70cac5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:21:72:fa:0d:bd:e3:d4:09:dc:8e:88:ee:
f1:55:18:14:79:ea:07:43:db:19:71:b1:db:6e:df:
cf:9f:34:53:e6:ec:3e:24:f6:2d:64:33:c7:27:26:
a8:8f:54:66:89:12:8e:42:7f:60:e6:98:07:be:42:
ed:28:b2:d5:34:3f:4e:97:52:d4:68:26:37:f8:40:
4c:f3:74:17:d6:5f:09:51:72:92:40:7f:67:66:84:
6e:ac:f6:75:cf:06:0b:eb:90:e7:ab:f2:cd:81:7f:
da:36:35:a3:50:65:5c:24:f8:c1:2c:15:71:24:f0:
14:ec:c2:31:71:1f:f7:1c:c7:e6:06:18:d4:ee:27:
d6:a0:29:af:da:f5:45:bd:b8:e5:c6:45:66:80:a8:
f4:fe:c3:b6:6b:ef:ae:42:29:7a:35:1e:dc:1c:7c:
7f:bc:ec:c6:03:43:b1:dd:f4:07:02:ad:dd:af:1f:
59:e8:e1:4f:fc:0d:dc:aa:4d:9a:f0:8f:64:8d:36:
53:8b:ca:e8:e8:bb:1c:d9:4f:0f:8e:bd:56:11:c2:
1d:51:d8:8b:7f:b3:81:ee:6c:f6:46:1d:71:dc:92:
8a:85:6e:ed:71:7a:ee:95:7c:a3:79:5a:31:d0:a8:
46:18:66:30:34:a8:b9:27:b5:4c:70:12:85:e7:80:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:51:83:9F:41:0C:7A:A0:F5:B2:65:DA:FE:78:83:FA:70:CA:C5:FC
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:52:23:60:86:0d:65:c1:7c:8f:15:6b:05:29:b5:f4:d0:b4:
98:ac:72:9d:ac:f1:ae:72:72:07:3d:7a:02:71:92:25:c6:6e:
ed:d2:18:25:3a:24:0a:52:a0:b1:d1:0a:21:d3:44:8e:46:4f:
30:d9:af:c6:6c:80:0a:6a:26:2d:96:09:15:92:d7:10:84:84:
14:ab:14:45:31:75:89:be:7b:5a:ef:2f:44:99:26:4b:32:a3:
9c:b5:0e:48:0c:0c:2e:57:55:b8:71:dd:c6:6f:37:ed:4a:bb:
0a:bb:bb:d9:a5:1c:50:5c:11:aa:ef:f2:62:bc:c2:76:b1:cc:
73:c2:d8:dd:a5:47:12:3d:fc:02:ec:41:6e:98:90:6e:be:de:
03:69:a8:84:e8:4a:ce:30:14:1d:87:78:b8:15:dd:81:38:85:
2e:12:ef:50:89:26:c9:79:84:0b:59:79:a1:c0:36:33:c9:98:
3f:92:13:ab:ac:a6:11:b9:5e:b0:ca:dc:91:c7:86:3a:3c:9d:
71:ff:81:d4:05:d9:33:0c:34:e7:79:bc:d9:cc:aa:92:88:51:
1e:2a:b9:fa:25:71:bd:d2:6f:ed:15:ae:26:0e:41:5d:42:cd:
65:44:59:ca:42:7f:7c:51:4e:7c:2f:42:8a:b6:62:3d:bf:b3:
e5:fc:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:38 2025 by rpki-client