Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
File: c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft (raw, json)
Hash identifier: PGSyQfHuZ3Lzg8nJeNmnnE/tK96K1A86mqKXFCr5drA=
Subject key identifier: BA:9B:66:29:8B:98:28:21:5A:33:0B:EF:1F:25:33:A1:0A:4D:9D:A0
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 01993839A9FABE5FD95E79DE4E51ABF4339F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
Manifest number: 1103
Signing time: Thu 11 Sep 2025 10:02:06 +0000
Manifest this update: Thu 11 Sep 2025 10:02:06 +0000
Manifest next update: Fri 12 Sep 2025 10:02:06 +0000
Files and hashes: 1: KP2_oc8mgsgfljoO1nuvZhPkZ0Y.roa (hash: PSZpKzA/dVK4VjiYCM36fNdW8Sa7IO0CzoAwBYd8p8Q=)
2: c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl (hash: whAzMI6UcrNXweU2j3MtA88OihodVrkE7J2+BzwbapM=)
3: jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa (hash: f4DN47+xITITW5Z3XzBvZV99OJ3Lahvtt0rfcMK3ExI=)
4: pgtyHRABE5BH4U--tAeSXYEFuMI.roa (hash: w+QHB6r7lbUuZwSYdh0vhSEsQOOVkbCo0xAow5cZw80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:a9:fa:be:5f:d9:5e:79:de:4e:51:ab:f4:33:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Sep 11 10:02:06 2025 GMT
Not After : Sep 12 10:02:06 2025 GMT
Subject: CN=ba9b66298b9828215a330bef1f2533a10a4d9da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:a3:88:ca:0f:c3:65:da:cd:e5:85:c8:fe:
a5:1a:82:52:dd:0e:09:92:4a:40:9d:a6:22:fc:fc:
e4:4d:0c:c7:44:c6:73:2d:bc:94:14:b6:a7:c9:c8:
05:52:1c:0e:94:2d:5e:6a:04:23:e2:11:34:12:77:
0c:66:0c:ad:0c:c1:aa:9b:62:7a:20:05:72:0e:50:
3d:28:33:a9:d7:ba:b2:a2:6a:95:34:cc:a1:01:a4:
68:59:9c:65:f0:4a:63:a2:34:d1:d6:b0:c1:29:a5:
5c:d3:c6:15:d1:2d:25:b8:5a:f2:9b:c3:6c:2f:44:
77:9a:2b:54:d2:61:e9:1c:3b:4d:54:47:ab:53:47:
c6:fa:ad:bd:52:76:a0:ae:b5:ae:ee:e3:e9:b6:c0:
c7:cd:f9:12:31:b9:98:a9:15:14:38:6b:b0:f6:3f:
53:ac:7e:72:64:d2:f8:c4:b0:68:19:87:ff:f6:a4:
17:01:51:0f:36:89:a9:4c:81:d2:21:34:5d:9e:2b:
84:13:a8:b6:45:90:3e:62:9b:f9:c9:be:ed:66:17:
6c:02:45:4d:72:bf:1a:44:0e:ef:72:49:0c:b3:81:
ab:e0:fd:c1:06:00:53:a0:9e:c8:4c:1b:7e:51:54:
9f:6b:a2:1e:7c:77:96:fb:c6:fb:b4:2d:ff:d6:7c:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:66:29:8B:98:28:21:5A:33:0B:EF:1F:25:33:A1:0A:4D:9D:A0
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:78:81:a9:47:58:9a:fa:9e:b8:fc:d1:2b:b5:f0:53:e4:e1:
bc:18:11:6d:0a:5f:95:a0:78:04:19:0e:8c:48:bb:49:c1:e6:
96:ec:32:56:45:2f:27:be:64:6b:ac:7f:17:2e:0a:10:18:f7:
bf:ab:e7:d7:2c:b9:dd:a3:96:1d:dd:97:75:97:ea:58:2c:cf:
b1:c5:88:e3:12:49:7d:66:94:6c:0d:c8:f4:19:5e:a5:03:10:
26:88:6a:11:4c:db:d9:87:a7:38:c1:dd:a6:b3:1b:18:b3:42:
ea:4f:0d:40:f8:54:c5:76:44:f0:64:1c:4c:b2:70:45:fb:08:
45:22:c0:b9:3c:65:60:16:51:b3:2f:20:6d:a2:4d:c2:67:94:
ed:14:6a:b3:c0:71:b4:3b:62:6d:61:08:0a:92:53:22:ad:db:
72:fe:a1:98:c6:6a:21:7c:9f:a0:41:02:6e:29:52:ab:40:fe:
90:7d:47:f6:4e:3b:6a:bf:32:e7:1f:7f:12:31:88:37:d8:02:
58:2e:45:23:49:73:3d:84:a6:15:f6:da:cc:4c:f6:65:48:d7:
a9:50:b9:89:36:38:df:e7:4a:cb:33:5f:13:f9:9a:bf:a5:fb:
19:f0:cf:a3:10:f3:ab:8b:46:c1:39:55:de:ad:0f:24:4c:1f:
10:12:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:34:49 2025 by rpki-client