Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: tlh0IhiCWgKjr9dOTHrp5oNp86xFpfsslIE7qkKtFJU=
Subject key identifier: EA:0A:E9:33:C4:19:3D:7D:A2:F8:94:5B:A4:E7:7F:96:DC:33:DD:ED
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019880C269E0C2480151176C7E6FF99F4318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 162E
Signing time: Wed 06 Aug 2025 19:01:21 +0000
Manifest this update: Wed 06 Aug 2025 19:01:21 +0000
Manifest next update: Thu 07 Aug 2025 19:01:21 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: UCXijJ046jqqyIUOB1LB2af5aBw5hiFdxAw5WvJiiwA=)
3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:69:e0:c2:48:01:51:17:6c:7e:6f:f9:9f:43:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Aug 6 19:01:21 2025 GMT
Not After : Aug 7 19:01:21 2025 GMT
Subject: CN=ea0ae933c4193d7da2f8945ba4e77f96dc33dded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:ff:bd:bd:d4:b9:b0:a4:fd:f3:2c:7f:51:
1b:85:8e:b4:c8:f5:e5:5c:7e:83:d1:09:61:07:50:
47:0f:cf:ff:da:cd:89:3d:22:ee:7e:b7:d1:6a:a8:
c4:78:52:82:6e:8b:29:5a:aa:f2:31:4c:0d:05:e5:
9d:c6:50:11:d0:91:6c:27:8d:e4:ae:0a:14:0d:cc:
80:5d:8a:88:a1:2d:84:69:a1:e3:1a:6e:3c:49:18:
9d:e9:48:29:9b:63:9d:c0:9d:09:70:18:d9:b6:cc:
c4:2d:2d:24:10:c6:84:bd:5c:fb:34:c9:f5:61:d7:
b9:a1:8b:6a:2e:6c:96:f2:94:55:63:25:1a:c8:9c:
2b:4c:39:83:96:c3:1a:07:ef:b8:05:41:aa:73:cc:
04:62:17:04:5a:9f:85:f0:63:65:23:5b:c0:21:5b:
27:90:45:20:6f:e5:28:a9:dc:c1:f1:82:d2:25:68:
a6:a5:9b:97:74:40:3f:0a:72:23:9a:83:26:03:61:
b5:93:1c:99:71:cd:0f:c1:66:a3:df:c2:e9:2b:7d:
c9:17:49:54:db:59:67:78:f5:a1:7b:f8:7e:d6:c6:
4d:5b:45:c8:9a:ac:96:27:0d:e6:d2:44:8b:e7:11:
c7:3d:e8:1d:f0:d2:7a:dc:39:e5:2b:c9:fa:1f:ff:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:E9:33:C4:19:3D:7D:A2:F8:94:5B:A4:E7:7F:96:DC:33:DD:ED
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b3:1b:05:9a:ef:c2:6f:97:c9:3b:a0:77:89:83:dd:4c:99:
c6:23:66:f5:95:89:a8:e5:e2:3d:70:b4:06:b5:c1:62:89:db:
ac:e2:1c:f9:af:77:98:60:99:06:78:59:34:80:b9:0a:53:87:
79:dd:8d:78:b3:0c:1c:1e:ab:4f:2b:be:3b:8a:5e:2a:c0:a3:
24:82:55:e4:a1:47:f8:a1:00:dc:67:16:d6:07:20:a9:87:00:
a4:55:b5:5e:c7:cb:5a:8b:5a:f6:c8:ec:63:df:50:13:72:23:
56:fb:58:f6:f9:3a:ee:2a:a4:fb:8c:78:22:7d:35:b3:27:d4:
19:bf:38:13:94:16:d4:e4:33:d2:8e:90:bb:de:fc:f2:7f:73:
9f:c7:f4:c6:ce:93:74:81:c2:80:80:b5:10:84:3f:41:f7:d1:
28:dd:08:16:02:8b:c1:e9:5f:0b:62:92:14:d2:39:c8:09:89:
84:46:13:c4:bc:42:f0:6c:0d:01:df:48:8b:5f:c3:f9:61:04:
52:84:83:a3:fc:9a:d8:48:41:57:ea:2a:9c:b2:59:07:57:ce:
9a:d3:4d:cb:c4:66:65:36:69:20:5f:1b:45:af:8e:53:0d:03:
fe:dd:3d:73:79:85:7c:ff:dd:93:da:ff:ad:e5:e1:62:7e:2b:
7b:b2:74:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:02 2025 by rpki-client