Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier: aSKjoSZyvicqd/xUQM9HtkSzvd6KPAIEFEEbfG1PDa8=
Subject key identifier: C8:05:23:EE:91:2E:97:5D:C0:72:17:BB:79:93:A1:6E:41:72:BE:26
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 01992B8F9D99EB58A9E9C82724562DE965F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number: 1539
Signing time: Mon 08 Sep 2025 23:00:56 +0000
Manifest this update: Mon 08 Sep 2025 23:00:56 +0000
Manifest next update: Tue 09 Sep 2025 23:00:56 +0000
Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=)
2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=)
3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=)
4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=)
5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=)
6: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=)
7: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=)
8: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: Zyo7IZSn4UNn4qC5rVljLGUsEb6K739RKJRDNGdr78g=)
9: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:8f:9d:99:eb:58:a9:e9:c8:27:24:56:2d:e9:65:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Sep 8 23:00:56 2025 GMT
Not After : Sep 9 23:00:56 2025 GMT
Subject: CN=c80523ee912e975dc07217bb7993a16e4172be26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:61:71:28:4d:af:e1:66:1f:f4:f2:3c:0f:
58:0f:d1:c1:83:2c:46:01:9c:44:be:6e:e6:67:06:
a1:6c:a2:8f:83:dc:93:70:49:07:1c:cb:84:10:48:
2c:0a:9b:1b:52:21:10:cf:f8:6d:ea:4d:c6:b8:d6:
e9:74:11:b4:55:e7:8d:95:97:58:71:c4:53:5f:02:
76:e2:be:f0:06:91:38:bc:83:3a:7d:93:14:61:67:
fd:bf:d9:15:54:17:e1:23:6c:75:cf:86:08:ab:9a:
2c:72:88:25:75:25:ce:fe:4c:70:97:dd:cf:9b:bb:
23:de:36:5c:07:b9:9d:a8:e4:87:b2:38:c4:39:6f:
6b:ac:ac:20:ad:38:f0:db:a0:e5:29:8f:fe:a1:91:
56:d8:20:18:df:93:35:f6:04:b6:1c:5c:55:47:d1:
d2:58:2a:de:1c:38:07:18:ab:d4:b1:a5:74:05:fa:
1f:1f:35:53:7e:d3:67:f1:04:cf:38:68:46:e0:bf:
4a:46:b0:f2:10:27:e8:7e:d6:51:99:9d:5d:53:92:
00:69:b0:6a:3c:0c:69:69:8b:06:ef:f6:20:e6:5d:
f8:fa:be:e5:2c:8a:44:da:3b:c1:fa:62:cd:5f:39:
78:ac:2c:e2:cc:91:e0:69:69:14:72:bf:9a:db:1c:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:23:EE:91:2E:97:5D:C0:72:17:BB:79:93:A1:6E:41:72:BE:26
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:54:a9:3c:60:9c:5c:74:22:ac:a9:f2:9d:cb:ef:cc:8e:d6:
4d:15:59:5a:9d:96:ff:84:12:ba:bc:03:8f:62:5b:27:46:f9:
3d:7f:c6:7b:f6:37:ed:a8:03:08:5a:d5:ca:5e:4c:10:ab:88:
25:30:52:39:d1:7a:3a:65:b7:00:44:e2:0d:da:1c:21:a0:a3:
42:e8:17:f9:15:ee:e6:e9:e0:8b:13:8d:0a:6e:ac:87:fd:b7:
3f:8a:84:60:6a:15:27:5f:af:80:33:72:05:8c:d0:8b:4d:09:
cf:e8:e9:21:f5:7a:e2:34:dc:66:d3:e0:b0:c8:bd:6c:68:59:
a2:05:cb:34:79:2f:50:ac:9b:b0:ce:45:85:43:11:97:b7:0d:
50:32:87:84:66:59:27:61:6c:8c:e8:16:db:04:81:b1:88:1b:
3a:31:1f:78:7d:11:e7:cc:6d:8a:63:b1:a1:03:4b:8c:6c:5c:
1d:39:2e:26:51:b1:de:1d:f3:14:28:9d:b8:bc:c6:6f:f0:2c:
8d:24:03:a6:64:da:13:c5:a3:8f:10:7d:39:51:99:78:39:82:
07:b1:bb:23:78:c3:46:b2:8a:6d:b3:15:ea:11:68:e3:95:be:
62:66:79:56:42:99:28:c6:3c:ab:dd:65:f7:5c:0b:ad:3b:cc:
bf:73:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:52:36 2025 by rpki-client