Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
File: c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft (raw, json)
Hash identifier: QB7gisgDG6RJFzIYAUsM6it7aC3gsS4wO4liHm7B8JA=
Subject key identifier: 40:EC:2B:90:7B:23:16:E5:1D:5F:96:53:B0:A0:73:E9:51:90:B6:B2
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 01984AAE8B5B4454C1261E6D4E355F88DD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
Manifest number: 1088
Signing time: Sun 27 Jul 2025 07:00:09 +0000
Manifest this update: Sun 27 Jul 2025 07:00:09 +0000
Manifest next update: Mon 28 Jul 2025 07:00:09 +0000
Files and hashes: 1: KP2_oc8mgsgfljoO1nuvZhPkZ0Y.roa (hash: PSZpKzA/dVK4VjiYCM36fNdW8Sa7IO0CzoAwBYd8p8Q=)
2: c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl (hash: ZNcjgjuMLkdOmIEpqE1iN4w/M/lxxlKWnDpc5ZvC5xE=)
3: jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa (hash: f4DN47+xITITW5Z3XzBvZV99OJ3Lahvtt0rfcMK3ExI=)
4: pgtyHRABE5BH4U--tAeSXYEFuMI.roa (hash: w+QHB6r7lbUuZwSYdh0vhSEsQOOVkbCo0xAow5cZw80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:8b:5b:44:54:c1:26:1e:6d:4e:35:5f:88:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Jul 27 07:00:09 2025 GMT
Not After : Jul 28 07:00:09 2025 GMT
Subject: CN=40ec2b907b2316e51d5f9653b0a073e95190b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:81:15:30:cb:70:10:c7:72:c8:09:e1:9a:
91:93:75:15:8b:81:57:75:b6:53:c7:9a:69:21:b6:
e9:e0:31:3d:f6:ee:fa:15:01:4e:f6:53:18:9f:bb:
d7:bf:6e:0f:a5:15:ff:f0:ca:67:ee:20:da:b6:5d:
83:91:0c:85:8c:98:33:0b:32:54:bb:36:2b:2f:53:
e5:b4:1d:02:eb:fc:4f:74:00:2c:a7:8c:2b:d5:73:
0b:c2:d7:78:c4:e5:65:64:dc:72:bc:63:0e:13:c5:
c1:b9:86:c3:35:1f:a5:f7:cd:c8:bd:ad:e4:90:70:
5b:ba:4c:ef:c5:3f:45:86:ed:07:d8:40:64:b9:fc:
fa:d9:6b:bf:a2:40:97:bc:76:25:45:e9:f5:06:4c:
36:79:4b:a1:32:45:10:20:f7:61:55:62:96:08:d4:
f3:68:8a:d6:bf:03:f9:ba:bf:16:7d:45:3b:91:99:
de:59:8d:13:a1:b3:e5:61:73:7e:ab:8a:5e:39:85:
1f:d8:21:e0:74:bd:66:19:fe:fa:51:23:e4:74:98:
dd:5f:a5:c9:e2:0c:0c:7a:56:d5:3f:26:c9:27:58:
80:db:84:5d:d9:1d:21:d1:74:56:5b:13:0e:0d:74:
e0:83:d2:1b:39:f0:86:83:55:c6:42:47:f4:87:2b:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:2B:90:7B:23:16:E5:1D:5F:96:53:B0:A0:73:E9:51:90:B6:B2
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:21:48:72:92:96:56:39:b1:f5:49:d7:3e:7b:5f:e3:20:9a:
de:b3:66:a0:db:f5:6a:77:31:d6:5e:1c:b4:37:16:16:27:e7:
ce:c6:cb:7e:9a:ea:1e:a6:3f:61:4e:56:2d:3e:1b:0c:60:c9:
88:fe:17:58:c8:c0:35:ac:59:ea:aa:4c:1f:36:27:97:45:3d:
fe:b7:68:4a:6e:f2:9c:c9:7b:f9:74:9f:f4:e9:b7:da:a1:d7:
8d:4f:62:5f:ec:6a:82:0e:05:dc:6b:18:07:25:ea:12:40:59:
f8:bc:65:81:10:eb:1a:c3:be:b3:a8:12:29:da:30:ae:2d:88:
de:ac:94:5d:39:06:3e:89:4a:0a:2a:48:97:fe:71:b3:c9:f4:
6b:7f:77:8c:c9:f1:d9:4e:f0:82:b4:27:ca:27:25:dd:9f:6a:
9a:91:dd:46:8b:77:26:6e:50:54:c3:87:c1:d1:59:78:7e:dd:
c1:a2:c9:62:fe:db:a0:c7:e9:3b:4e:21:35:7f:08:59:97:90:
89:2d:a6:c5:5e:89:7f:7e:06:ab:b5:45:74:a1:9b:c4:21:95:
81:96:94:61:f1:40:cc:e7:97:9f:9d:96:b7:1f:68:b8:75:d1:
c5:0f:2e:b5:a8:e0:8c:2d:d2:1a:0e:8e:c8:ce:0d:f2:0a:c8:
c2:8d:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:11:25 2025 by rpki-client