
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier: tWo20XASOnxJdIMws/vg4OagIQkKMU16xhY04I/caeM=
Subject key identifier: 39:B2:F4:02:18:59:8D:B2:74:EE:49:F0:EF:E1:B0:58:72:85:73:CC
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 019832700228A21F821889FF66737F6B1DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number: 14B8
Signing time: Tue 22 Jul 2025 14:00:58 +0000
Manifest this update: Tue 22 Jul 2025 14:00:58 +0000
Manifest next update: Wed 23 Jul 2025 14:00:58 +0000
Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=)
2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=)
3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=)
4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=)
5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=)
6: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=)
7: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=)
8: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: KjU35c1RCfdFWz21SkQYQ8mCXeKIz5Njy+C7asOGpR4=)
9: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:70:02:28:a2:1f:82:18:89:ff:66:73:7f:6b:1d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jul 22 14:00:58 2025 GMT
Not After : Jul 23 14:00:58 2025 GMT
Subject: CN=39b2f40218598db274ee49f0efe1b058728573cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:9b:38:7e:07:ae:01:9f:ca:48:cf:a4:e7:
ca:07:c7:8b:86:41:57:14:3d:ef:f4:23:69:61:30:
7a:b6:1c:ed:db:b4:be:29:c9:6d:3b:2b:df:49:50:
70:a8:07:d3:6d:3e:6c:6d:db:ec:f9:3f:c9:a2:d0:
96:e6:94:c9:65:a1:70:a1:2c:73:64:2d:e9:1d:19:
a0:12:42:29:7d:ac:af:c7:b7:0a:f3:29:f9:73:c4:
ab:ef:70:e7:6f:ad:91:32:f4:c3:4e:f8:bb:84:0f:
29:d6:16:ac:2e:f6:c8:10:fd:86:8b:cf:d7:6d:93:
6d:61:d8:2d:35:09:51:51:99:cb:1a:38:83:8d:67:
bf:40:db:c4:05:eb:23:41:e8:8e:38:91:e7:4c:b5:
99:56:81:8c:1b:37:84:cf:39:f7:c2:08:4b:ce:7d:
17:45:37:ba:52:e7:92:fe:da:3b:9b:5e:c8:8e:6e:
f1:96:d5:ce:2c:f8:1c:75:c3:5c:d5:6a:dc:29:68:
b1:95:ac:ee:07:6c:a8:63:8a:7e:e5:7e:29:58:78:
37:d0:da:3c:ca:25:b0:f1:2a:7b:55:00:ce:d1:30:
72:2d:04:0c:af:a0:ea:5f:cc:68:27:5a:9c:2a:01:
49:0e:94:46:ed:cd:4b:fc:64:16:d0:f2:a3:12:37:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B2:F4:02:18:59:8D:B2:74:EE:49:F0:EF:E1:B0:58:72:85:73:CC
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d1:8c:19:3c:c7:83:0e:dd:ac:1a:db:b3:2e:b8:ea:6a:1d:
39:53:85:c5:9f:81:f3:37:f1:fc:72:41:ab:78:a3:e7:08:de:
bd:72:a0:95:68:7a:7e:12:95:df:78:a7:86:7f:9e:c9:39:42:
62:01:ad:02:a6:9a:b9:c3:ee:bd:d6:be:d7:99:e9:63:78:ca:
a0:9a:4f:b5:65:2f:26:f0:8d:bd:7f:8d:99:09:7d:cb:1e:8e:
cb:5c:1d:bc:5c:20:76:77:8f:8a:88:0e:24:18:4d:ce:35:39:
01:10:56:cb:98:d0:78:1d:94:26:68:55:cc:6d:45:70:cf:f8:
9e:3b:48:57:9d:de:2e:de:4b:9d:56:f3:51:a3:f0:98:ab:72:
e5:09:20:4b:21:25:0d:40:c7:77:fc:5f:6a:6f:59:79:68:b9:
da:d1:7a:1d:49:c6:74:04:8f:1f:42:d5:fb:b3:2a:be:07:a9:
de:c4:65:81:55:ac:d5:94:7f:7b:b8:09:fd:46:5e:7e:62:2d:
19:21:05:7d:81:fe:5f:a5:5d:3e:0f:7a:75:09:67:cf:91:8b:
e2:dd:07:78:b6:71:b0:d0:40:0f:f6:e8:de:0a:f5:67:29:1c:
8f:80:2d:6b:1f:ee:e3:2d:d9:65:2c:9d:7b:7e:6c:01:1b:81:
ce:84:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:31:24 2025 by rpki-client