Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: Z3v5C6wZxUVXQO0axaFbSA9A5Z1ulT9J4KF/iLI5Bi8=
Subject key identifier: EE:16:EA:DC:29:EC:12:27:3F:8A:68:BD:23:F5:88:F1:0B:C6:B2:B4
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 0198A0BA9BE7B0B7BBCDBC3157092733D2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0B20
Signing time: Wed 13 Aug 2025 00:00:40 +0000
Manifest this update: Wed 13 Aug 2025 00:00:40 +0000
Manifest next update: Thu 14 Aug 2025 00:00:40 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: 1XVB1o+9K0LRfuGyS4QlD2y2cm/UY690g5wzqi18dbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:9b:e7:b0:b7:bb:cd:bc:31:57:09:27:33:d2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Aug 13 00:00:40 2025 GMT
Not After : Aug 14 00:00:40 2025 GMT
Subject: CN=ee16eadc29ec12273f8a68bd23f588f10bc6b2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:ec:bf:b4:01:da:c5:09:86:aa:a5:0e:c6:
c8:2d:36:c9:ba:ad:d0:49:0c:f1:e4:1c:74:73:3d:
f1:66:10:18:b2:0d:25:72:e4:78:93:df:94:b9:af:
2b:ca:2c:95:ad:1b:38:ed:b5:cf:4d:dd:d4:35:36:
c8:af:70:46:db:5b:2e:a1:2f:aa:ce:da:19:fd:73:
4b:c5:aa:b9:14:41:89:1c:80:81:2a:74:36:54:a9:
3d:ca:9a:97:00:7c:7d:4f:88:54:23:ba:b3:49:d1:
bb:49:bc:ec:c6:71:97:4c:9d:f1:c3:5e:7e:87:ab:
71:5d:14:df:28:6d:87:ab:cc:3d:50:ab:51:f6:ea:
c5:24:ab:2a:d4:f6:04:a3:21:9a:1a:37:2c:3c:e7:
e2:8e:f8:b2:5f:cf:68:7c:3d:19:4a:11:ca:83:d0:
db:4e:7d:57:ea:17:12:b7:3a:2c:2d:49:6c:74:c8:
ea:56:d9:b8:1b:22:8e:21:d4:ed:ad:cd:05:16:14:
f0:4a:ee:ba:f0:37:1f:fa:0c:a0:d1:ed:0b:26:21:
98:ca:d0:3a:df:58:cf:6f:fe:22:d0:d2:0d:58:ba:
bb:d7:13:49:fd:0a:d9:05:dd:ec:49:cb:9a:72:0a:
bc:b9:ce:bb:b7:b2:c8:cf:64:52:05:54:fb:02:6f:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:EA:DC:29:EC:12:27:3F:8A:68:BD:23:F5:88:F1:0B:C6:B2:B4
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:90:2e:e0:cd:c8:44:30:1f:a4:61:0f:e0:12:20:a6:80:d8:
e1:23:72:1f:1e:b8:a6:2a:68:bf:cb:86:6f:9c:07:26:f4:e8:
b6:91:25:55:8a:1b:29:51:26:5a:33:33:86:a9:84:74:a7:dd:
2d:04:48:74:30:09:c1:d5:c9:24:1e:69:da:9e:f3:12:2e:4e:
9d:cb:d4:2e:30:d3:6a:c1:d9:f1:28:e5:66:44:c2:c1:33:9b:
a0:5e:50:93:b2:b6:e8:d1:ba:c8:1c:a3:2b:87:20:b9:fe:29:
90:a6:9a:d3:be:54:e8:88:a6:4c:72:c1:46:57:f0:9f:2a:e4:
f8:10:9f:d7:e8:3d:d6:a6:4a:d9:07:18:82:80:b0:14:57:c4:
45:19:14:bf:3c:ca:98:5c:3e:18:23:c2:52:3d:34:32:8e:57:
02:91:97:1d:5a:a9:ad:29:d1:65:70:97:ca:07:68:e3:ab:20:
ed:4c:86:66:dc:3e:ba:92:69:16:2e:7d:a4:13:04:4f:00:d3:
99:e9:9e:b6:4f:59:96:8d:ce:2a:c5:16:61:cc:9e:39:ca:71:
6a:e5:b3:8e:0c:0d:79:eb:e4:db:d3:4d:30:cd:fd:64:2e:29:
9e:51:d1:c7:5a:b0:d8:1f:df:20:f5:01:9b:2d:15:d5:d4:83:
89:7e:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:28 2025 by rpki-client