Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: O2YGXbsbyo0E2c6JmRxTHfsZwyY9Rdx4i55dang8eN4=
Subject key identifier: 0E:04:2E:80:3E:C7:FA:F4:8E:94:C2:99:C8:9C:9A:70:93:61:85:DE
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019844082845674D7C2101D9114DD841B9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0CA8
Signing time: Sat 26 Jul 2025 00:00:41 +0000
Manifest this update: Sat 26 Jul 2025 00:00:41 +0000
Manifest next update: Sun 27 Jul 2025 00:00:41 +0000
Files and hashes: 1: FEZEft80jliOlkGyEwySyBAkmWo.roa (hash: WK/TRHiffo4AU+bk5eHbjtuUsofDcjiz4uFJQmb9AMI=)
2: ish4NG6w0suFxadmLrSJLkxjTIQ.roa (hash: SxPMOYIhwaAgOQuSwCZyhiBxyzhniVTSwZchO8Jy+js=)
3: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: 9E9SyBp74WCMZcE5MMkic1occjhv5Uc6POFKgbkYvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:28:45:67:4d:7c:21:01:d9:11:4d:d8:41:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Jul 26 00:00:41 2025 GMT
Not After : Jul 27 00:00:41 2025 GMT
Subject: CN=0e042e803ec7faf48e94c299c89c9a70936185de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:ed:e3:e9:88:23:90:dc:22:2a:a3:52:af:
70:14:e6:ce:b7:52:e3:cc:a2:cb:73:c0:bc:0c:03:
65:c9:b0:95:72:73:39:36:f6:e7:59:d8:7b:dc:07:
6c:79:87:97:bf:99:5c:ac:51:43:30:61:29:1d:d9:
b0:7f:9f:dd:c9:14:79:e7:7a:6a:2f:73:27:b2:48:
55:be:ba:91:f9:7a:11:0b:0e:43:d6:8f:ec:74:50:
ef:77:25:ed:0e:47:3a:03:e1:37:3b:4f:6e:e6:d4:
eb:a0:3a:4b:ed:65:a0:3a:11:6f:83:9a:20:4c:f5:
61:f5:26:2d:9e:1d:23:c9:3b:2b:d9:55:a3:0d:e1:
4c:08:e7:e7:51:81:7a:31:d5:14:78:73:f8:da:30:
c4:01:53:6d:3e:e0:c7:51:9d:e7:dd:20:cb:50:b6:
dd:5a:46:e0:e9:42:02:13:06:d9:c7:91:6a:f4:6c:
ca:a8:04:c4:4b:00:82:45:2e:6a:08:50:55:56:7e:
ef:39:2a:ac:f3:75:2b:99:82:9b:03:56:c3:85:e5:
5f:ca:90:04:eb:57:0b:a7:c6:df:2c:b8:0d:7b:1d:
6d:d3:0c:5d:9b:a1:5f:c1:84:0e:c2:44:2d:d4:99:
06:46:45:be:29:a3:44:a8:81:d9:74:3f:50:b1:93:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:2E:80:3E:C7:FA:F4:8E:94:C2:99:C8:9C:9A:70:93:61:85:DE
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:93:08:9e:97:1b:a2:34:3f:33:65:49:0c:f9:66:89:ef:32:
cc:e4:93:32:ff:75:21:c2:a4:e2:5f:42:fe:08:89:8b:53:d2:
82:1e:fc:36:bc:6c:3e:19:4f:9b:78:8a:bb:24:e1:c7:fd:d1:
59:ea:fd:18:43:28:41:b6:4c:03:45:d6:ee:df:5a:a2:b3:0f:
9f:b1:f1:83:fc:a6:cd:4e:df:85:0f:29:e3:61:07:18:6b:84:
cd:f1:20:8d:76:41:c4:79:33:6a:ed:e0:ba:b9:78:57:de:da:
db:6c:1f:a4:41:37:84:b3:ba:cc:81:a5:bf:ba:bb:64:4f:0c:
80:21:e9:b6:bb:a0:c0:27:23:f6:b4:71:e1:eb:4d:6b:af:50:
c7:5e:72:22:1b:a6:fa:36:b7:02:cd:a6:25:6b:f0:f1:37:fc:
16:7b:e3:ed:d3:06:62:4b:b1:64:95:e2:59:3c:63:47:87:f4:
26:d3:5e:9c:b7:0c:3b:ed:db:6f:38:1c:55:0a:ac:5b:ff:47:
62:91:d9:5d:2c:b3:4b:0c:69:95:a3:cc:5d:1f:73:2b:e2:a6:
c5:c5:77:cd:7a:d0:f5:f3:eb:55:ef:12:61:10:d2:6d:c2:c7:
88:7b:5a:d8:b9:b3:69:2b:9b:77:5b:52:15:55:83:95:6a:6f:
46:65:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:34:10 2025 by rpki-client