Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: JeIjYRzhG8ElZqO0mfQujR7QsroZu+xUcpeRK+Ju9wI=
Subject key identifier: F2:80:47:26:B9:B7:72:D5:8E:3F:12:E3:37:EB:65:40:04:EE:F1:8A
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 0198D54E0957664D76C6A839A9C6460F5C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 024F
Signing time: Sat 23 Aug 2025 05:01:57 +0000
Manifest this update: Sat 23 Aug 2025 05:01:57 +0000
Manifest next update: Sun 24 Aug 2025 05:01:57 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: +tGMNRBwuScyPkFmx2hYzmmed9jae0dTVA6cf8Keo9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:09:57:66:4d:76:c6:a8:39:a9:c6:46:0f:5c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Aug 23 05:01:57 2025 GMT
Not After : Aug 24 05:01:57 2025 GMT
Subject: CN=f2804726b9b772d58e3f12e337eb654004eef18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:d9:68:e4:4f:e2:af:94:4c:5e:52:02:62:
71:ec:52:26:c7:d9:56:ea:9f:2b:76:b6:e2:5b:68:
4b:b1:4f:ab:97:9b:45:16:52:67:7a:d8:72:62:ef:
19:0e:02:62:d6:84:36:0d:e0:6d:9a:76:c2:a9:ad:
c7:64:63:4d:a9:d6:01:c6:2d:f5:fd:b6:c6:3e:f1:
ab:18:22:f0:b7:93:89:ec:3d:7f:a4:bc:c4:7e:aa:
85:03:1b:ef:ec:b5:c7:86:a0:43:4a:01:e9:f0:72:
5a:38:34:59:3f:ed:bb:62:92:7b:23:e4:5d:0e:a5:
a1:88:d5:74:45:09:9a:26:85:39:c7:2a:75:0e:97:
5b:2b:c8:68:65:e2:b5:34:3d:34:f7:f3:99:77:f9:
eb:3b:15:f7:0a:18:13:fb:57:63:5c:3c:7b:86:f4:
9d:7d:3a:24:5b:24:33:b2:4c:6d:bf:ca:78:86:a7:
81:59:75:7a:25:e4:c8:8a:96:6c:fa:1f:14:c3:2c:
8f:17:1d:61:c5:13:58:df:bf:ff:db:1a:0c:dc:88:
2c:cc:51:91:bf:9d:33:55:04:bd:d6:49:50:68:44:
3a:a5:40:71:42:af:3d:1b:84:f2:b6:f3:25:e3:6c:
bb:6a:9c:c2:1b:35:84:40:6c:6d:ae:86:a9:62:d3:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:47:26:B9:B7:72:D5:8E:3F:12:E3:37:EB:65:40:04:EE:F1:8A
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b5:9a:ef:e5:f3:ec:76:4e:a5:44:a8:a5:49:31:0f:20:62:
df:cf:fc:f4:a3:46:b7:b8:a6:bb:9d:ce:ed:a4:9a:97:5e:b7:
66:cb:2e:d8:02:4f:47:7e:e7:dc:64:34:0d:0f:4d:9e:f1:c1:
b1:ce:8a:2d:b8:f5:71:ea:b7:36:37:37:52:7e:c5:a3:55:eb:
10:88:00:5d:3a:cd:ca:fc:ca:c6:06:01:7a:31:08:ec:b7:1f:
00:25:78:61:52:ab:07:c7:df:46:12:10:b5:91:76:fb:d8:71:
ba:51:b0:fa:a6:9a:49:52:a8:92:9e:27:b4:d2:81:1c:31:12:
3e:e4:46:6c:c4:b4:25:ce:e0:c0:0c:bf:6c:c7:c1:c9:40:ce:
22:5f:ff:3e:87:65:12:12:da:ff:18:98:f8:e3:2a:27:cd:af:
93:9e:e8:6a:7c:b4:ce:c2:2f:1b:d3:51:b5:56:f4:3f:10:5a:
8c:54:c3:10:36:53:c2:6b:20:87:e8:e0:e2:8c:05:86:19:d4:
89:d4:d4:bd:b1:06:36:13:6e:86:d4:5f:20:7d:ee:56:ef:a0:
ac:fb:ce:41:d2:32:29:ed:89:50:71:e6:fe:a9:bb:4f:12:53:
7f:fa:90:34:3c:57:5c:21:b6:33:2d:90:80:ec:50:b1:d3:bf:
33:34:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:49 2025 by rpki-client