Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File: nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier: DnHG+IAayM7y/EBq8H1LAx9rK1jZb+YXAt5ijI22+L0=
Subject key identifier: 5C:3D:CA:E1:26:1C:F8:59:DD:4A:4E:C1:F4:06:08:8F:9E:BC:86:ED
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer: /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial: 01985457192410B1D14FEA8AA8010371C37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number: 05ED
Signing time: Tue 29 Jul 2025 04:00:50 +0000
Manifest this update: Tue 29 Jul 2025 04:00:50 +0000
Manifest next update: Wed 30 Jul 2025 04:00:50 +0000
Files and hashes: 1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: fiQRh5EefSEcn+629UXUj2uRd7UyDVMfUdCo1y7oljA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:57:19:24:10:b1:d1:4f:ea:8a:a8:01:03:71:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Validity
Not Before: Jul 29 04:00:50 2025 GMT
Not After : Jul 30 04:00:50 2025 GMT
Subject: CN=5c3dcae1261cf859dd4a4ec1f406088f9ebc86ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:7c:94:a4:f5:28:50:fa:e6:cb:72:55:92:
b1:d2:ce:c9:06:fd:33:85:39:26:6b:c7:6c:26:fd:
f3:74:5e:b2:8a:b1:59:43:14:19:38:4b:b3:c6:f3:
48:d3:e2:3d:d1:86:88:9a:0d:2f:68:e9:9a:c5:90:
01:db:15:96:ae:53:ff:1b:24:97:f2:2e:18:25:d7:
78:40:f0:c3:27:82:e4:f3:ad:56:ed:3a:aa:64:53:
42:a7:58:e5:90:88:a7:8a:3f:cf:b2:50:5a:60:ee:
03:6c:19:70:d8:3b:8d:b0:47:56:bc:66:77:23:e5:
99:17:c8:3b:60:3c:99:44:88:77:1d:27:5c:09:b2:
29:3b:25:2e:f3:68:f0:d6:36:6c:67:3e:52:bf:17:
bf:a0:b9:a0:63:53:c7:e9:ed:25:99:b1:ef:ad:55:
67:12:cb:3d:d4:12:99:70:4a:38:c0:66:b7:08:3b:
39:92:79:30:c8:c6:b3:f1:93:fd:42:d1:29:f0:50:
e5:56:02:5e:e9:d9:0c:e0:4f:e1:1b:88:c9:05:06:
46:42:39:b2:02:36:22:60:ef:12:75:bc:b1:d6:0c:
34:56:b4:ae:13:30:db:e4:85:c2:55:9a:aa:e3:b2:
17:84:e5:a0:b4:3a:f9:9c:5c:df:27:e9:56:c6:ff:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:CA:E1:26:1C:F8:59:DD:4A:4E:C1:F4:06:08:8F:9E:BC:86:ED
X509v3 Authority Key Identifier:
keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7a:8c:7d:16:08:33:74:ef:11:29:3e:c4:9b:29:96:21:0d:
45:9d:97:b1:a6:a8:f1:0d:bd:04:ba:4d:60:df:fd:8b:7e:87:
bb:58:c4:5b:a1:a5:ca:fd:7d:25:fa:a5:6a:6d:a1:cf:7c:f8:
bb:e9:80:0d:2e:34:36:de:e9:a7:28:c1:41:81:05:3e:6c:db:
13:9a:69:da:a6:59:56:27:24:f1:8c:8d:fc:10:bb:ad:4b:0c:
2d:82:a9:bb:b6:bb:dc:07:6f:b9:77:4e:19:aa:bc:19:18:cb:
a9:f2:87:79:27:00:e5:2d:23:ed:f9:47:75:69:68:17:7e:2f:
d5:8c:93:14:03:53:a9:47:b3:55:ca:1c:b6:6e:a4:09:14:91:
3b:8c:74:0c:cc:50:9e:10:c9:d4:e3:96:be:bd:6d:0a:27:b5:
59:42:40:c9:1f:87:62:c3:bd:24:21:09:a3:48:4e:3a:16:ac:
fc:7c:97:13:9a:6a:fc:b4:f1:fc:e3:3e:c0:6d:3c:8f:96:76:
5b:cd:71:86:21:b0:62:26:dc:b1:7f:b4:f2:ac:9d:54:6d:55:
5c:c1:99:28:09:c1:db:9c:1f:bb:ae:47:d0:2f:4f:1a:ab:e6:
fb:b0:89:e2:5f:d5:e8:a1:93:cd:e2:56:df:87:bf:d0:53:a2:
6e:d3:65:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUVxkkELHRT+qKqAEDccN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGZiMTA4MGJjZjAwYjZmZGQ3NmJhZmQ5ZDUxMzNjNWUx
YzNkMzIwHhcNMjUwNzI5MDQwMDUwWhcNMjUwNzMwMDQwMDUwWjAzMTEwLwYDVQQD
Eyg1YzNkY2FlMTI2MWNmODU5ZGQ0YTRlYzFmNDA2MDg4ZjllYmM4NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTN8lKT1KFD65styVZKx0s7JBv0z
hTkma8dsJv3zdF6yirFZQxQZOEuzxvNI0+I90YaImg0vaOmaxZAB2xWWrlP/GySX
8i4YJdd4QPDDJ4Lk861W7TqqZFNCp1jlkIinij/PslBaYO4DbBlw2DuNsEdWvGZ3
I+WZF8g7YDyZRIh3HSdcCbIpOyUu82jw1jZsZz5Svxe/oLmgY1PH6e0lmbHvrVVn
Ess91BKZcEo4wGa3CDs5knkwyMaz8ZP9QtEp8FDlVgJe6dkM4E/hG4jJBQZGQjmy
AjYiYO8Sdbyx1gw0VrSuEzDb5IXCVZqq47IXhOWgtDr5nFzfJ+lWxv/TTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw9yuEmHPhZ3UpOwfQGCI+evIbtMB8GA1UdIwQY
MBaAFJxPsQgLzwC2/ddrr9nVEzxeHD0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYt
MjNiN2NlMzRlYmFjLzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYtMjNiN2NlMzRlYmFj
LzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXqMfRYI
M3TvESk+xJspliENRZ2Xsaao8Q29BLpNYN/9i36Hu1jEW6Glyv19Jfqlam2hz3z4
u+mADS40Nt7ppyjBQYEFPmzbE5pp2qZZVick8YyN/BC7rUsMLYKpu7a73AdvuXdO
Gaq8GRjLqfKHeScA5S0j7flHdWloF34v1YyTFANTqUezVcoctm6kCRSRO4x0DMxQ
nhDJ1OOWvr1tCie1WUJAyR+HYsO9JCEJo0hOOhas/HyXE5pq/LTx/OM+wG08j5Z2
W81xhiGwYibcsX+08qydVG1VXMGZKAnB25wfu65H0C9PGqvm+7CJ4l/V6KGTzeJW
34e/0FOibtNlAw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:31 2025 by rpki-client