Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: 6NpozbJncrOHyS81+60E1ALy2HqaIU26n2k/7sfCGas=
Subject key identifier: F5:D7:A9:4E:50:6C:86:4E:61:1B:2A:91:E2:5D:58:B9:9A:19:D2:CA
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 0198D4E0796B97DB84D7CEF74EFF560ADC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0CF3
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: FEZEft80jliOlkGyEwySyBAkmWo.roa (hash: WK/TRHiffo4AU+bk5eHbjtuUsofDcjiz4uFJQmb9AMI=)
2: ish4NG6w0suFxadmLrSJLkxjTIQ.roa (hash: SxPMOYIhwaAgOQuSwCZyhiBxyzhniVTSwZchO8Jy+js=)
3: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: lIqVXfgm2MCJzTpedMMbYnT9dCGl9QDnfZP4pNM1BIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:79:6b:97:db:84:d7:ce:f7:4e:ff:56:0a:dc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=f5d7a94e506c864e611b2a91e25d58b99a19d2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:72:ed:df:56:5f:32:dc:80:2f:7b:52:a7:
e0:22:72:83:a2:94:d4:1d:90:92:6d:9b:73:5d:c3:
f9:f0:d3:30:14:05:1f:33:28:d4:3f:75:9d:11:d7:
0c:9e:6e:28:3b:06:7a:d0:18:15:2f:a0:d3:2a:9c:
08:a7:74:10:e3:d3:cb:30:87:85:86:cb:1f:f9:2d:
0c:c0:2a:e0:82:29:5e:c7:10:14:c6:d9:e8:5e:41:
02:1d:06:91:93:3a:07:11:0f:85:ee:3b:08:2c:6c:
8f:a3:32:18:b0:ef:9a:7d:20:dc:de:7c:ae:b1:b9:
cb:39:be:86:e5:8e:8c:c0:2e:b9:e1:60:9f:e9:15:
17:4e:13:af:66:76:72:aa:ba:50:2d:16:e9:9f:68:
02:48:3a:ae:0a:c6:82:14:00:ec:dc:3c:e7:9a:42:
38:4f:56:17:15:d1:13:75:bd:87:fb:d4:b6:23:f6:
1a:8b:01:30:38:4f:ea:a7:52:74:26:03:3a:a4:19:
0e:fb:50:7a:d4:2d:ed:77:df:3c:c1:88:d8:ec:53:
9e:8c:b5:32:91:ef:23:7e:4e:f2:b0:78:23:5b:46:
94:ec:1f:f9:65:a5:9a:e7:c1:df:08:5b:7a:4c:28:
fb:c3:71:6e:b0:89:0c:c0:49:34:62:a9:d1:6f:5d:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:A9:4E:50:6C:86:4E:61:1B:2A:91:E2:5D:58:B9:9A:19:D2:CA
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5c:a1:30:92:84:1c:ae:2a:df:8f:66:e1:d5:1b:94:97:01:
7b:ae:a5:0d:4b:66:8b:ea:c1:a3:d7:38:f4:7b:8c:d7:a3:08:
63:37:bd:5c:5d:f4:7c:b9:6e:44:bc:94:54:8a:aa:c9:86:be:
35:a7:7c:d4:b3:a2:ab:3a:e1:23:f9:5b:47:dc:0d:14:76:50:
a7:9d:e7:78:43:66:1d:9d:1b:bc:4b:13:53:69:1d:f2:0d:34:
63:eb:01:8d:c9:cf:20:49:2d:65:fe:b6:1f:82:69:cd:2f:68:
75:07:40:af:47:2d:f1:8c:43:89:7b:6a:29:a1:9a:37:7f:c2:
cb:7d:09:0a:8c:d4:46:63:00:77:ca:3f:7e:ee:c4:33:96:6b:
49:0f:86:c4:af:04:5a:f0:9e:cb:be:72:d1:43:9d:09:92:f3:
e3:5d:39:62:46:bc:3e:63:2d:c9:94:0c:4c:e4:d1:a2:a0:07:
f8:6b:07:83:c3:e0:56:cb:9a:21:29:1e:fd:6d:40:01:ae:f6:
02:c1:66:e0:6b:52:d2:28:27:d2:d6:e4:8b:7c:b8:76:c2:12:
28:b5:f9:c8:d6:e1:00:a0:79:47:f2:25:d0:59:55:2b:de:39:
98:d3:5e:f6:aa:ed:18:4e:fa:67:a9:96:a8:9d:7d:71:60:65:
e8:2a:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:39 2025 by rpki-client