Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: nII+/JAx82D3kWPATrtvULmJYPOjF+g11852LAxpDxQ=
Subject key identifier: 39:64:BA:37:6F:49:38:03:3F:4D:E8:0B:13:E5:3D:F9:AF:C3:BD:C4
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 0197B77C6D903CF14D80EEC4E1373AF16EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 08E8
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: jMxznzjYJ8XbwAVDld6+OOeofcly4cwVO8PwwcIX3hI=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6d:90:3c:f1:4d:80:ee:c4:e1:37:3a:f1:6e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=3964ba376f4938033f4de80b13e53df9afc3bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:bd:3e:fb:a8:14:81:f6:19:f6:71:41:4d:
f5:77:b9:f8:e7:0e:82:bd:b6:20:18:b2:e5:0d:84:
ef:f3:70:30:5d:23:39:cc:21:6f:e1:c4:22:30:99:
e8:1f:bc:87:a5:69:b8:b2:70:63:94:a6:8e:2b:6f:
83:16:c8:b2:b8:67:f7:91:9c:ff:8f:b6:fb:c9:01:
e3:49:05:83:b7:52:10:d8:5c:4c:71:01:f5:a7:6a:
a1:df:d7:0f:4d:43:0f:73:d8:03:50:b0:f0:e8:9d:
d3:73:f0:e5:7f:22:3d:e7:7f:1b:e9:c5:ff:a2:68:
14:a6:83:88:4b:36:8a:63:22:44:46:5e:49:f3:c7:
e4:8b:3b:6f:33:cb:75:bf:b6:2d:e1:bd:6d:36:ba:
36:4d:97:d0:b1:ee:27:1f:e6:13:02:48:f3:35:2b:
3f:98:e9:76:82:d5:84:a6:d3:da:13:0f:7e:e8:5a:
1b:66:80:6e:02:6c:10:19:da:09:c4:33:5c:c6:75:
fa:d2:df:8f:fb:b8:ef:5f:bf:92:1c:3d:53:7d:04:
ff:a4:cc:bf:34:63:f5:da:fc:ba:fc:8c:35:a1:b4:
6b:14:e4:1f:42:22:50:52:a2:0b:0b:df:80:79:74:
04:d0:ea:ae:0b:ba:7a:16:61:b6:40:23:73:c6:74:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:BA:37:6F:49:38:03:3F:4D:E8:0B:13:E5:3D:F9:AF:C3:BD:C4
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0d:1f:a1:42:27:9c:66:c7:b0:7e:73:28:36:7d:32:26:64:
56:5c:98:2e:97:50:ab:08:6b:36:82:19:eb:ff:ba:33:b9:26:
2a:01:39:dc:4a:ff:d6:9c:7e:90:f9:b2:6f:36:a5:bc:73:fa:
1a:94:91:95:fc:e7:81:c7:1d:21:d7:0f:52:25:76:a2:22:f4:
2a:ab:b8:48:be:05:5a:92:85:f5:a9:91:ac:ef:98:7e:dc:9c:
83:a2:51:26:29:44:62:09:fb:b7:6a:18:b6:62:98:a8:35:63:
67:6e:ad:af:82:45:c7:89:7e:be:12:aa:0d:7b:2a:1e:aa:41:
17:c9:5c:c9:19:b3:25:21:80:c1:f7:ef:c8:db:53:a8:92:be:
fe:a5:c0:c5:70:50:3c:b9:63:86:5f:e8:76:b2:f4:4d:fe:01:
10:96:8c:f6:98:45:35:0d:32:5f:aa:53:66:00:6c:21:84:bd:
2f:87:7b:73:f0:84:e9:bb:28:62:77:03:65:ff:2f:ff:cc:ec:
33:72:18:d1:f5:a8:87:d2:e4:dc:c0:3f:d6:19:3d:4f:c8:a4:
20:c3:cb:78:49:99:70:21:48:65:7f:38:2c:57:21:3b:79:78:
cc:e3:7d:9c:6d:5a:15:c1:40:58:8b:51:4f:6f:03:ca:fd:79:
29:a8:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:24 2025 by rpki-client