Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json)
Hash identifier: PsV7CYqZT0cdjAhZ7tVnLx4cZ47l2Qgov6k5aQ6PExY=
Subject key identifier: CC:18:32:55:A3:20:B6:11:44:5F:F4:63:49:B3:08:D1:F9:A5:A0:84
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial: 019923A0C6E05094CE70E97EA9C73CE594AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
Manifest number: 0646
Signing time: Sun 07 Sep 2025 10:02:43 +0000
Manifest this update: Sun 07 Sep 2025 10:02:43 +0000
Manifest next update: Mon 08 Sep 2025 10:02:43 +0000
Files and hashes: 1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=)
2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: 3TEl43gTrH6ykCee3Y8zBYScTKDWpAw8NLCqL3k/1jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:c6:e0:50:94:ce:70:e9:7e:a9:c7:3c:e5:94:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Validity
Not Before: Sep 7 10:02:43 2025 GMT
Not After : Sep 8 10:02:43 2025 GMT
Subject: CN=cc183255a320b611445ff46349b308d1f9a5a084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:1b:4e:31:e2:1c:5f:ca:d7:5e:90:60:b2:
66:b8:f7:58:ad:d5:2b:9d:22:78:60:ae:73:a0:e0:
26:41:cc:b2:a9:9b:c6:2e:32:b5:73:38:c5:fb:9b:
d1:ed:cc:a3:82:93:95:05:14:9c:c5:63:bb:b4:ae:
5d:87:03:f9:70:50:b8:76:25:f0:1d:4f:70:38:8b:
08:53:02:5a:a8:e3:3b:53:2b:3b:f5:03:29:00:79:
9a:0e:fd:0a:f0:f7:7e:4b:07:56:2c:e1:26:0c:51:
48:84:ad:04:8a:bc:6a:1a:ee:c3:c3:ca:be:da:fe:
ab:b8:fd:ca:54:56:6d:e0:d8:47:d3:e8:9b:e7:8a:
79:e0:cc:b6:38:16:7b:a3:ad:f8:cc:e7:f1:a1:66:
79:9e:a0:7f:99:d2:a7:67:91:d3:ae:09:41:14:a9:
48:37:66:1a:c6:52:50:95:94:09:35:34:f3:17:d5:
84:fb:a3:a9:5f:4c:70:2f:b4:a1:3e:09:5a:e6:1b:
03:a8:1e:cc:22:8f:53:d2:1e:69:6c:0e:56:75:0d:
06:e3:73:44:da:c1:16:2d:21:b8:41:16:fe:6f:73:
cd:11:aa:aa:39:ec:ac:77:b7:cb:7d:b5:2b:7b:8a:
28:5d:2e:0e:a7:82:b5:9d:5d:cb:31:3d:2e:6d:27:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:32:55:A3:20:B6:11:44:5F:F4:63:49:B3:08:D1:F9:A5:A0:84
X509v3 Authority Key Identifier:
keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:75:7c:b6:19:6c:e8:52:c2:b9:93:2a:2e:9f:60:18:4a:4f:
e9:13:15:03:e1:2f:71:aa:c8:be:c2:84:c9:74:ea:76:df:75:
43:f4:92:1e:6f:83:a6:f4:f1:ce:59:40:1d:e3:68:d9:c3:56:
69:5f:d2:6d:77:93:15:32:c4:d9:60:04:8a:d9:39:b3:8d:0b:
71:d4:34:78:05:98:00:b3:e3:be:1d:e7:b9:9c:8d:f7:28:82:
fd:08:12:27:bf:28:37:21:71:ad:9b:40:8a:f2:35:28:92:30:
45:b4:d3:e6:68:a6:8b:33:9b:78:45:02:7d:76:02:a4:d8:d4:
68:ac:0f:34:bd:51:07:88:e5:d5:4e:b8:41:b9:39:56:90:46:
a3:4c:d6:f0:75:03:42:2b:f5:30:f0:75:d0:67:d3:e2:64:0c:
0e:7b:d6:c7:41:b6:8f:ea:da:4e:62:a9:c9:e1:8d:1f:fb:1f:
16:18:ce:d1:e1:12:ea:0d:b3:0e:47:0a:f4:1f:2f:0d:a1:2e:
d2:b8:6f:ee:b0:8b:f8:e0:2a:7a:c5:7b:1d:68:fe:63:1f:9b:
f0:ec:7c:18:b5:4c:fb:9f:43:6d:aa:7e:36:5b:64:30:26:8e:
89:79:3b:ba:23:1c:a3:6c:2c:30:1f:7d:36:34:10:4f:66:88:
3a:a0:5f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:21 2025 by rpki-client