Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: Wn0qYfTV3QMSZo8mhfWiH6GOARkXDL6tT7qcbe/OfNg=
Subject key identifier: C5:D7:00:C7:AD:21:10:AE:1D:DC:2D:FB:84:5B:87:4B:D5:88:F2:73
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 01993A26D47B8A0AF0BA2344BC17C8274114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 0F3E
Signing time: Thu 11 Sep 2025 19:00:47 +0000
Manifest this update: Thu 11 Sep 2025 19:00:47 +0000
Manifest next update: Fri 12 Sep 2025 19:00:47 +0000
Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: LCal4O9jzFG1efHNybo5yKYEvgk6xhGH1sdeZqsQ0dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:26:d4:7b:8a:0a:f0:ba:23:44:bc:17:c8:27:41:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Sep 11 19:00:47 2025 GMT
Not After : Sep 12 19:00:47 2025 GMT
Subject: CN=c5d700c7ad2110ae1ddc2dfb845b874bd588f273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:59:ea:97:51:95:2f:4e:07:79:4f:b1:ae:
42:8b:bc:41:12:d3:f9:61:ee:5b:5a:db:bd:14:1b:
d9:3a:9a:8e:0c:42:b1:f3:41:f8:ce:c6:b8:a6:fb:
59:11:0f:c5:57:bd:be:47:1f:46:35:03:80:cf:1e:
2f:86:7d:ec:30:86:11:42:99:ac:ad:09:4f:64:cc:
2a:cd:f6:7d:b3:b9:07:1f:f2:d8:22:90:9f:d6:1b:
20:7d:62:24:ba:03:d5:ec:67:ed:3c:84:6d:70:3f:
e3:e8:31:27:7a:ee:5b:60:93:f6:94:96:b7:c4:70:
22:cb:af:f1:93:37:c4:8c:e6:dd:4b:27:9c:f1:71:
2b:ab:c0:9e:59:80:09:9d:45:ee:db:c3:50:a8:6e:
42:84:b6:9c:d6:23:c5:94:0f:53:84:b7:03:10:de:
9c:fc:52:e8:46:9d:86:6f:fd:3e:5b:32:0e:5e:47:
3a:0b:c6:2e:8b:14:65:f6:c3:d4:79:35:54:23:4b:
6d:c9:0e:26:46:3c:d1:53:db:0c:32:27:da:90:c9:
a0:d9:b1:b6:c5:76:d7:15:99:ee:c9:a8:30:f2:a1:
5a:5b:86:b1:54:b9:1a:5e:99:97:1a:67:1d:62:d3:
1a:e9:67:1b:7b:fd:f9:91:b2:3d:4e:35:50:36:e6:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:00:C7:AD:21:10:AE:1D:DC:2D:FB:84:5B:87:4B:D5:88:F2:73
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bf:a6:4d:8c:3c:6b:a2:05:fb:9b:f0:ed:12:66:0b:28:05:
f7:e0:78:98:f4:27:ad:16:34:3f:93:b5:9d:26:61:32:20:86:
fb:74:06:89:02:b8:8f:bf:4d:63:45:dd:16:43:c8:15:f0:4c:
e1:b9:90:52:84:e5:68:dd:74:96:92:dd:27:6f:df:ff:74:c4:
f8:a5:06:8b:73:e3:12:ae:df:bf:d1:32:7d:04:28:dc:0f:a5:
39:99:4f:87:83:89:14:ff:12:7d:5c:27:64:bb:f8:22:3a:fb:
33:b0:f8:ee:99:ed:ea:27:58:1a:78:e9:48:44:8c:44:27:4e:
66:05:f1:09:37:e7:59:c3:e2:96:8b:46:87:10:3c:a4:68:f4:
54:65:d4:9a:ee:eb:de:91:f5:cd:43:d2:a8:ec:f5:3d:89:a8:
72:cd:c8:89:78:6e:5e:56:88:fa:31:67:33:9c:d5:83:29:d7:
18:d5:89:a1:36:f5:2e:af:2f:46:0a:d9:7a:5a:81:3a:59:e4:
fa:ef:0a:2e:98:b5:75:39:59:69:db:ac:9e:66:a1:53:a1:1f:
aa:04:c9:69:aa:ec:5c:97:03:77:2a:64:03:b1:58:19:3b:12:
bf:a8:ce:a6:2f:ee:37:60:5e:64:dd:64:3b:da:06:47:25:8e:
fb:8c:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:08:29 2025 by rpki-client