Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier: lpN/ipATrdEdsU52GfNRiGSiQ/s6UXSL3fe1ZrSPvOw=
Subject key identifier: FF:7B:B8:B6:E0:82:CD:5D:44:70:FF:54:DA:3A:BE:7F:B0:C9:CF:57
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 0198CC13F67BA887CE46CE437B1D5CB2A7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number: 0E4B
Signing time: Thu 21 Aug 2025 10:01:56 +0000
Manifest this update: Thu 21 Aug 2025 10:01:56 +0000
Manifest next update: Fri 22 Aug 2025 10:01:56 +0000
Files and hashes: 1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=)
2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: lPcWjTfQapVQpGROaX7s/VHaSQAvnJTZdMPCaPdEqWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:13:f6:7b:a8:87:ce:46:ce:43:7b:1d:5c:b2:a7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: Aug 21 10:01:56 2025 GMT
Not After : Aug 22 10:01:56 2025 GMT
Subject: CN=ff7bb8b6e082cd5d4470ff54da3abe7fb0c9cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:63:3f:01:e3:89:48:9e:a2:6f:17:f8:f9:
bf:1d:24:0a:0a:53:29:3b:7b:2a:86:17:f9:ae:57:
ff:08:8b:95:af:31:4a:d5:cb:5b:62:58:95:0d:e9:
9f:41:cd:85:d5:52:da:ee:63:e6:17:fc:f0:e1:89:
63:22:33:3c:71:a7:37:19:4e:ed:85:10:10:a7:58:
74:89:e1:8e:37:f4:3a:43:e3:47:43:a2:5f:14:10:
f9:0e:2e:5e:18:8a:56:c2:9a:c4:2b:99:ac:e4:5a:
b9:18:7c:5e:07:f6:05:8e:8a:86:ff:a8:5b:52:9e:
f1:f6:44:5d:54:6d:63:78:ca:e6:f7:74:04:b9:4e:
6c:0f:ce:a0:5f:7a:96:95:fb:c2:a3:ea:ca:a6:d9:
a8:37:16:9c:0e:3d:40:12:57:5c:c4:d7:f9:44:d1:
c8:4b:33:53:c8:a6:63:09:65:80:21:26:46:cb:36:
85:3c:a1:85:29:fd:a7:d8:e3:83:20:a8:56:9a:c9:
d9:41:80:36:32:a1:cd:8f:ae:5c:1a:c4:39:ce:df:
4f:b6:7d:91:6d:f8:a4:7a:25:6e:1f:0b:64:43:7e:
fb:76:23:c2:41:fc:ce:eb:87:ac:3b:ca:bb:71:0f:
9b:0a:cb:78:7f:ad:20:7c:99:88:2d:b9:bb:ce:18:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:B8:B6:E0:82:CD:5D:44:70:FF:54:DA:3A:BE:7F:B0:C9:CF:57
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2f:3b:dc:81:8d:a6:03:e1:b6:f8:e0:53:0c:e0:56:44:32:
1f:60:04:42:a9:99:85:b8:c6:04:2e:d9:9e:66:6c:c6:3e:76:
0e:de:43:08:3a:74:c5:0b:1a:9c:cf:1f:65:3e:a1:74:1c:1e:
2f:91:5f:30:53:6a:ed:1e:c9:ae:e8:29:d8:63:6a:3a:bd:db:
43:b1:65:c7:6c:d2:76:de:24:94:e2:a2:47:d7:e3:5d:a0:23:
85:b8:36:a6:48:66:cd:87:56:12:17:ba:ee:94:32:56:d8:d3:
83:55:77:a0:af:44:d4:19:d7:a8:e3:93:75:fd:16:8d:40:d3:
bc:1b:48:dd:26:9e:1d:60:ce:5e:2a:29:47:ca:76:28:1d:0e:
b3:9d:3a:92:dd:51:38:72:14:f9:65:d1:74:43:58:ae:95:85:
ee:fe:6d:cf:30:00:36:a9:33:5b:4c:e7:19:44:6e:aa:23:91:
a5:1d:aa:a6:96:13:ea:5c:d3:f8:fa:7e:8d:bd:dc:ea:96:3f:
e1:85:a7:79:6e:91:99:ca:df:3d:3b:12:d6:53:2e:80:96:84:
33:99:71:bf:c8:d9:ef:22:19:a6:a9:f3:f7:82:9c:14:8f:1f:
59:8d:ed:fc:b3:49:98:81:06:6c:5d:20:a3:03:63:13:0c:01:
8a:df:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:41:35 2025 by rpki-client