Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: vooCYuE+ZmTChcK27wxyWAWlRfhh2UlVUkOwgZQrNjE=
Subject key identifier: 5A:3B:F9:56:DC:F5:9F:F9:E2:00:46:E0:57:E0:E8:5C:88:F9:55:E6
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 0198849EF9D3238A41EA151DFE1F0A2673A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0CF0
Signing time: Thu 07 Aug 2025 13:01:07 +0000
Manifest this update: Thu 07 Aug 2025 13:01:07 +0000
Manifest next update: Fri 08 Aug 2025 13:01:07 +0000
Files and hashes: 1: MxLcAgXC0vRpPyT-3NXtB6NlTcM.roa (hash: glwD9i/+OFABXNduZaHp2v7di44Ewcx6kWVCmGzy8h8=)
2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: OWa8O6EqAE0Mei+5m03pvuc85Jh9pAMQJRib3u0acBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:9e:f9:d3:23:8a:41:ea:15:1d:fe:1f:0a:26:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Aug 7 13:01:07 2025 GMT
Not After : Aug 8 13:01:07 2025 GMT
Subject: CN=5a3bf956dcf59ff9e20046e057e0e85c88f955e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:c0:4e:50:c7:2d:d8:93:bb:36:00:67:dc:
e2:60:8a:00:43:76:62:26:e1:16:d0:c4:65:20:65:
08:70:48:af:ca:c1:a6:3b:c6:e6:ae:9a:6f:77:e8:
cb:62:b9:92:d4:f7:0f:17:37:a6:4f:50:bf:5d:a7:
57:99:21:ae:a4:f1:b8:79:25:61:99:a4:54:9c:a0:
27:43:21:9b:bb:69:23:f5:d6:d7:d5:b2:6e:10:a0:
34:4a:1b:a4:36:c9:da:97:d0:2e:74:f2:99:fb:bb:
e7:94:66:bc:14:64:55:f8:ce:b0:2c:8c:d5:95:e6:
0f:3d:d0:b1:4d:88:1c:4f:70:0c:4a:e0:99:19:2d:
83:28:e6:ba:86:55:f4:af:00:b8:d8:fb:b1:81:c4:
4a:6a:57:aa:f9:b1:58:e1:f6:09:3e:48:53:2e:a7:
e1:9e:38:89:e1:ef:c2:f0:ec:f2:10:83:82:a4:72:
8a:7a:4a:ee:27:7a:29:66:11:ff:a0:0a:dc:b0:75:
49:8e:87:05:51:e1:78:b6:19:26:41:a5:30:9b:ca:
6d:b2:31:bb:25:cc:cc:66:f4:d2:00:d1:8d:b5:50:
b2:fb:26:41:ec:01:c3:5b:7e:10:83:63:ed:2f:76:
1a:70:ee:da:cc:8c:06:33:a1:ee:81:79:3b:11:49:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:F9:56:DC:F5:9F:F9:E2:00:46:E0:57:E0:E8:5C:88:F9:55:E6
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:62:45:14:da:0d:d4:0a:49:bb:bb:9a:63:74:df:28:4b:38:
ca:57:9f:91:b6:44:e3:8c:c3:c5:cf:d9:ae:f1:8d:e4:e0:63:
25:c7:fe:cd:2a:fb:4e:8e:10:6d:4b:46:77:47:78:6a:65:87:
85:ac:6b:55:72:4c:bc:5f:b5:04:0a:e7:93:4a:77:68:e8:ad:
b1:7d:c8:40:eb:40:e9:87:88:3f:4b:96:17:31:e0:7e:bd:fb:
13:67:0c:8d:a6:e7:c6:1a:f2:a1:ba:91:b2:9a:d6:f5:23:1f:
95:8a:59:41:f4:5b:b2:50:6b:cb:e0:bf:f3:d4:ea:10:02:4f:
10:93:d7:fb:15:15:38:63:a3:44:1d:d7:20:aa:bd:9a:9f:12:
eb:44:f0:79:a2:29:df:d2:76:7c:05:29:72:de:96:0a:06:71:
98:08:e6:e8:2e:a5:ab:3f:a2:19:29:ae:f0:88:24:2a:04:4a:
01:5a:e8:22:4a:44:20:44:d3:69:b2:f5:fc:f0:f8:a6:42:78:
2c:14:73:ff:27:92:ec:03:21:07:e5:ec:9f:a6:2a:ab:b9:28:
48:cb:25:0c:6f:6e:9a:07:61:78:c6:7f:c1:aa:89:03:1c:84:
b1:1f:f2:9a:23:0e:15:78:e9:38:4f:9b:8f:d0:48:8d:1e:15:
41:46:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:45:56 2025 by rpki-client