
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: MJNhX/IKx/r3yp4Df7yTkDnmupsCv5b6GgFT4i4rEQY=
Subject key identifier: 80:7B:8E:69:D0:D0:9E:BF:CF:9E:E8:FC:DC:3B:9E:BD:F0:1B:EF:F9
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 019845BF18DA60D3EFD4055656B23DC79B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 136B
Signing time: Sat 26 Jul 2025 08:00:08 +0000
Manifest this update: Sat 26 Jul 2025 08:00:08 +0000
Manifest next update: Sun 27 Jul 2025 08:00:08 +0000
Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: H4WbWq+pWhXe5MhDjJ3djBvbAuFdwGt2dNyuCMoyGlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:18:da:60:d3:ef:d4:05:56:56:b2:3d:c7:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Jul 26 08:00:08 2025 GMT
Not After : Jul 27 08:00:08 2025 GMT
Subject: CN=807b8e69d0d09ebfcf9ee8fcdc3b9ebdf01beff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:80:66:1a:f1:4b:a0:37:2e:43:20:7e:f1:
4b:a8:c6:29:d5:ef:1a:58:82:da:c2:6a:40:ce:3c:
5c:22:15:bb:f5:d1:c5:f2:ee:13:bd:2b:cb:35:8b:
08:f6:4a:f6:19:88:0e:16:47:3e:4e:e2:e0:0c:a5:
17:85:80:16:69:b9:38:e7:42:3e:d2:58:75:b3:1c:
cf:a6:13:73:0f:f6:1a:34:b5:b1:b0:34:f5:16:32:
b7:d1:8d:e5:8a:82:a5:bf:93:8b:f8:8b:5c:c1:6d:
6d:36:19:7e:6f:a2:03:b6:5f:38:60:86:0c:80:ee:
96:7c:4d:38:77:0e:63:e5:3f:8b:a2:f8:4c:f1:6b:
87:c6:01:eb:3f:46:88:99:7b:be:8d:26:08:43:c4:
25:0e:b6:01:18:dc:66:87:14:a2:0e:bb:6e:36:54:
a6:b9:4e:f9:26:75:9d:fd:73:03:ae:c5:3d:16:aa:
aa:06:5b:02:51:7f:bc:0a:9e:f1:75:96:dc:1e:a9:
51:f3:b2:35:50:41:ea:9c:9a:c8:cd:4d:4e:0e:0e:
c4:86:df:8c:27:c1:ce:23:6d:f4:ea:15:44:90:32:
f9:c2:b4:c4:9e:bc:9b:73:7e:76:bf:4f:fa:af:56:
6e:74:56:6a:7c:d1:ff:16:9f:ae:85:65:c8:92:ba:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7B:8E:69:D0:D0:9E:BF:CF:9E:E8:FC:DC:3B:9E:BD:F0:1B:EF:F9
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:d5:8f:c3:c5:c2:5f:1b:e6:13:51:ab:ed:75:96:2a:e0:
8a:e0:ef:21:f9:c1:cd:fe:af:b6:e8:4e:d4:5f:de:31:0e:99:
f4:5b:4a:7a:f4:ab:65:a0:0e:53:cc:e8:46:ce:25:5c:33:eb:
20:1c:3c:9c:38:dc:ce:3f:ca:75:46:b5:b4:e9:fd:81:56:70:
24:5b:06:89:a6:6a:0f:6c:44:67:bf:53:22:5b:2f:32:0c:dc:
22:de:ac:bd:8d:64:d2:ef:5d:dc:03:50:11:f4:d4:c1:ac:c8:
60:3a:87:0f:d3:15:17:d8:e9:6f:83:aa:a4:13:34:47:93:1b:
a2:c4:cc:d7:61:41:9a:05:7d:d7:55:40:23:43:31:d3:86:95:
90:87:ac:72:54:95:39:e1:b7:b8:48:2d:e7:84:fb:dc:57:99:
00:03:11:bb:84:32:80:44:95:38:b9:89:12:20:de:32:9a:8e:
e0:35:22:26:65:a4:3c:24:0b:a2:7d:49:5f:53:c7:ff:ba:6a:
95:53:c0:92:ad:eb:09:dc:20:c5:2f:41:2d:a6:6b:39:36:79:
c8:0f:c1:e1:7e:c3:f5:85:bb:e3:64:70:b4:bb:cc:b3:c6:6b:
66:2e:e2:e9:16:f6:ff:47:32:01:cf:59:99:cf:89:dc:9e:e7:
59:37:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:43:13 2025 by rpki-client