Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: 9Pp0la6JJNqbjYE73WgGDn5luS7kg4OVj8+ubfl+i2Y=
Subject key identifier: 8D:54:7D:73:55:3E:65:74:CE:E3:83:CA:33:79:50:16:28:66:15:9E
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 01984AAEA5CA8686A43BFB081C736FE02E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 11EB
Signing time: Sun 27 Jul 2025 07:00:16 +0000
Manifest this update: Sun 27 Jul 2025 07:00:16 +0000
Manifest next update: Mon 28 Jul 2025 07:00:16 +0000
Files and hashes: 1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: Q45nHHVGNTA3PfgxmDfst1zAG/s8ZHEWOsBQJ+WrYa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a5:ca:86:86:a4:3b:fb:08:1c:73:6f:e0:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Jul 27 07:00:16 2025 GMT
Not After : Jul 28 07:00:16 2025 GMT
Subject: CN=8d547d73553e6574cee383ca337950162866159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:c1:66:8f:3e:fe:67:f5:c5:04:f6:66:bc:
5e:01:9e:a7:fd:e0:cf:e4:93:b1:01:ef:0f:48:3b:
35:55:b2:8a:db:7d:f8:f2:84:2a:f4:25:89:8a:e7:
3b:6a:54:29:fb:bf:76:75:4f:3c:a4:42:88:c8:a3:
21:a9:27:d4:f3:0a:00:f7:98:7a:b9:45:94:50:a9:
a7:57:e8:1a:31:b2:f8:fe:aa:5f:ed:d4:2a:97:32:
a9:eb:8a:b2:ab:c5:13:f8:dc:34:5f:2c:7d:17:6c:
48:ac:da:80:e8:44:5d:fb:d5:32:0e:cc:96:7c:41:
f9:83:c2:01:1a:31:18:20:e2:d0:dc:33:53:83:bf:
ec:3c:8e:14:c3:29:03:12:c5:5d:21:0a:91:5e:37:
04:8e:cf:9d:45:61:f6:69:99:89:35:6e:e1:0c:78:
c1:77:b2:28:79:77:a0:50:74:ca:d5:14:99:b3:62:
c2:ee:30:a2:37:92:5b:b3:6e:f3:a7:b1:f0:2c:aa:
c0:a0:b1:37:21:90:98:f2:97:93:df:48:41:ce:01:
30:be:f0:a6:78:2b:f9:cf:9e:fa:84:2e:a3:69:ae:
44:19:04:53:9a:fa:0c:e4:39:96:e0:74:74:18:e0:
43:67:dc:38:6f:9a:5e:33:b7:32:ae:e8:41:8b:7b:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:7D:73:55:3E:65:74:CE:E3:83:CA:33:79:50:16:28:66:15:9E
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a0:2c:17:2f:73:bc:12:e0:a9:03:5e:96:05:88:15:9f:07:
39:b7:81:a5:3c:a6:95:62:21:28:d1:fa:99:88:ba:ff:da:fb:
e6:48:0f:d3:33:c3:4a:f5:2c:10:88:05:6f:f7:bb:d5:c1:b9:
9b:d8:06:72:b9:bc:d5:f3:2d:a1:14:a7:be:21:87:dd:50:18:
45:94:05:1a:92:7e:85:c4:ad:c5:a0:35:8f:e1:df:1a:49:51:
5f:8d:aa:ea:bf:16:97:8b:9d:ed:26:9a:2a:34:84:98:fa:81:
39:6c:af:64:c3:12:da:b8:d5:ea:72:18:b3:01:e1:a1:a6:fc:
6e:ac:83:d9:af:4c:34:bd:de:6d:27:2b:b2:3b:f4:2c:ed:fc:
eb:7a:52:26:09:be:03:d3:db:05:40:78:84:0e:4a:28:c0:48:
5a:a2:df:f3:80:89:54:58:22:ca:e1:91:3a:59:d0:cc:82:b0:
dc:5d:74:cd:c3:3f:63:8f:64:48:fe:36:ed:b8:bd:a5:ce:e7:
56:8e:54:3d:a1:eb:92:c8:e3:ed:4c:af:dd:a7:15:66:be:4c:
d0:85:37:ee:24:27:37:37:8f:eb:24:92:96:62:1f:9e:e6:ca:
fe:55:6b:ea:f9:90:b4:23:c0:6a:5b:95:59:91:af:3a:22:de:
07:40:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:40 2025 by rpki-client