Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: Wgppv1wm2dKOZeIxuDi+2OrG26qOV+/Aq2MWv+63oBs=
Subject key identifier: 76:BA:1E:06:92:1A:06:FD:F6:A3:99:35:F0:FE:87:AD:BD:2A:A1:F0
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 0198D7E0FBA464E750E803B3E844244980AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 17:01:42 +0000
Manifest this update: Sat 23 Aug 2025 17:01:42 +0000
Manifest next update: Sun 24 Aug 2025 17:01:42 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: Ybb/jRplV+0m1e6fpH7izacE6Hs/6Av4zAZXKwqyIOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:fb:a4:64:e7:50:e8:03:b3:e8:44:24:49:80:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Aug 23 17:01:42 2025 GMT
Not After : Aug 24 17:01:42 2025 GMT
Subject: CN=76ba1e06921a06fdf6a39935f0fe87adbd2aa1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:e1:c4:26:a6:c5:74:62:03:00:64:7c:d0:
20:ae:81:7d:aa:5e:da:f0:1c:a0:8a:00:66:e6:5b:
16:c7:da:ce:38:33:2b:5a:a2:13:f5:8c:ca:51:04:
34:1c:d1:9f:74:f0:56:b7:f0:42:4a:7e:d8:31:94:
72:14:2b:ae:89:fd:5a:96:c8:e7:88:5c:4b:c3:e5:
8e:32:9d:80:68:34:b7:37:98:5b:dd:22:3c:66:af:
37:ed:43:20:1c:45:d8:54:1e:b7:db:db:44:38:5d:
fb:d9:08:b0:68:b3:73:f2:ca:b7:5d:6f:3b:d2:92:
df:c5:58:b0:3e:fd:e4:95:e1:97:3c:b9:d6:0c:24:
2d:ae:8c:ca:1b:c7:4e:f4:32:8f:d3:5e:ff:2b:a7:
80:e0:fd:10:98:29:67:69:37:be:b8:ad:c6:91:c3:
1b:04:83:0d:4a:7a:6b:d1:9c:8d:38:c0:05:8d:1b:
8c:44:48:fc:8d:0f:c8:83:30:41:32:67:0e:45:63:
10:bd:22:92:fe:10:58:79:d3:03:47:95:09:68:42:
27:5a:36:6c:ed:a2:84:0c:77:50:d8:d4:08:07:bf:
af:d2:af:53:00:bd:c9:86:52:09:de:47:75:12:9d:
61:2a:13:45:1c:b5:9f:06:92:a7:8f:f5:53:c1:96:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:1E:06:92:1A:06:FD:F6:A3:99:35:F0:FE:87:AD:BD:2A:A1:F0
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c8:25:6c:c6:04:86:86:c3:8d:11:13:5a:41:fa:00:1f:04:
5b:2d:ec:94:a5:cd:87:b3:ec:33:e6:c6:eb:9b:9d:06:87:c4:
f3:1c:08:e7:09:3f:ff:bd:61:15:68:44:a4:12:04:6e:90:26:
f2:6e:85:3f:05:be:76:d3:bd:f8:6b:64:43:59:5f:b8:a4:f5:
80:87:91:8f:7c:4c:f7:b9:50:10:90:8f:38:4b:03:bc:84:b6:
ef:5a:f4:82:9b:b7:9d:c8:df:60:b6:8e:53:65:f9:cb:13:66:
86:4c:8e:b8:ce:3f:2e:bc:fc:33:e1:ee:f3:64:68:a3:5c:aa:
d2:9c:b7:0c:00:ac:27:af:1e:d3:ed:1e:41:1f:1d:b4:c6:84:
08:97:1a:8a:c4:33:2b:0d:87:3a:08:da:a8:2a:98:21:a0:92:
c3:ff:80:8c:1c:0d:93:92:03:71:5f:e3:1a:78:45:21:e2:89:
5e:39:55:a4:63:c1:63:05:74:7a:ad:8f:73:da:a5:3b:f9:3b:
0b:ac:13:6d:58:2c:1a:b3:e2:29:09:2d:14:dd:11:d2:28:fc:
58:d6:25:27:44:ce:f6:68:64:f0:77:f3:2d:d1:42:f3:f8:eb:
61:85:6d:41:20:52:4d:7b:ea:23:69:39:82:5e:2e:77:e0:61:
fe:af:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:16 2025 by rpki-client