Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
File: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft (raw, json)
Hash identifier: MsZcf4zdCWYuxJ0V2aXCHaDhBOeKdG73AcgU2MfEL6U=
Subject key identifier: DA:6E:E6:CC:E2:7A:C8:17:75:F1:B4:B5:45:0D:BF:83:F0:F4:14:B0
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial: 0198D5BBB2EADE0C3BE5B20B69DFBF2AC11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
Manifest number: 0D1C
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: aRmXLbWgvqCrB_ieixDwg5bWHH4.roa (hash: NkuU0nUuwUULqqtGwJsRiK14f6VjdQm0HvAAtBo3GJQ=)
2: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl (hash: Gz3pTPkdcmEg62ayr/BCAGxXJD1E1LSKSkQ2Osp6npo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b2:ea:de:0c:3b:e5:b2:0b:69:df:bf:2a:c1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=da6ee6cce27ac81775f1b4b5450dbf83f0f414b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:ab:7c:70:46:a6:ad:89:ff:18:f9:0f:5e:
4b:81:f6:7e:ef:0c:98:37:d3:7a:fb:80:68:8f:c1:
4b:56:cb:5d:ce:2e:d7:a1:47:b4:e1:b5:93:e2:16:
bf:2b:36:0d:0f:66:78:82:a4:78:ee:3b:39:0a:da:
02:77:ae:03:e3:06:dc:20:ee:d2:f6:02:c0:44:5a:
29:92:e7:94:6f:d8:37:2f:57:06:9e:4d:a5:81:2d:
e3:b5:3e:ff:c7:e2:5f:c4:60:fc:b5:27:18:05:17:
fd:57:22:1b:04:d9:d7:38:04:58:60:c1:17:ff:14:
0f:de:a0:fc:79:94:a9:2b:f7:13:8c:49:35:b8:b3:
6d:02:61:03:a5:d5:6a:04:c2:8c:09:c0:50:10:d9:
23:dd:be:02:4e:3e:4b:78:58:53:c4:ae:f5:7b:ff:
99:dd:af:11:93:42:5d:42:11:b1:09:01:85:a1:d2:
f1:4b:1a:77:f2:d1:a2:20:1a:57:67:0b:ed:ca:94:
2c:74:80:df:cb:75:52:6a:12:83:c6:94:fa:61:6a:
00:57:98:82:6d:a8:f7:e7:27:9a:e2:66:40:5f:5d:
71:13:7e:de:eb:ef:af:1a:1e:68:0b:3b:2c:8b:ae:
95:b3:05:58:34:55:6d:47:b2:1e:87:80:eb:e6:07:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6E:E6:CC:E2:7A:C8:17:75:F1:B4:B5:45:0D:BF:83:F0:F4:14:B0
X509v3 Authority Key Identifier:
keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a8:15:76:16:6e:18:ac:78:05:36:9e:99:b2:80:ec:4e:89:
ff:f4:ba:46:dd:7c:96:b6:09:7f:a0:9e:31:8a:fe:f6:70:e9:
fc:f9:38:2f:17:8d:b4:d5:24:0c:b7:b0:9c:0b:e4:3c:8b:86:
17:57:fc:51:3f:ee:2e:e3:9f:50:7b:34:a4:10:fe:4f:76:2d:
9c:8b:9d:46:81:87:b9:ea:38:e8:f6:db:4f:9e:82:f3:78:38:
03:4b:46:5b:95:8c:1f:7d:47:3a:fe:5d:4c:21:2b:49:ff:96:
4d:73:c1:b1:a0:3d:bf:20:6d:8b:bb:73:1d:27:c6:e5:73:b3:
41:7c:03:46:70:ab:96:61:50:fd:18:16:9f:6f:4d:89:ba:3f:
63:c2:26:9a:52:86:90:be:01:7e:03:81:8a:c4:0b:9c:ed:30:
c2:32:2b:54:65:ea:1b:9e:47:10:c5:44:88:93:41:a4:fb:25:
11:2d:d3:c1:ad:a5:c8:73:82:81:08:1f:6a:0a:b7:ab:cd:c4:
24:40:ef:b6:eb:29:39:92:be:58:52:b6:51:94:56:c6:34:41:
1e:f1:5d:9a:78:22:c7:d9:82:42:10:6c:f2:6a:e2:24:f7:b0:
8a:45:68:da:6f:f0:25:0c:64:01:41:b2:2a:23:d3:0f:96:4c:
3c:b8:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:04 2025 by rpki-client