Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: ZdcNI/QLJMKiRmgtEHjwJ6BzbGicnHRBPFhff+DnnIY=
Subject key identifier: 81:4A:84:94:1F:AB:76:74:A4:B5:0A:3A:82:26:15:31:A5:D6:B3:8C
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 01989825C5EF81D4CC23B6C34A0B33D0CCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 0F28
Signing time: Mon 11 Aug 2025 08:01:08 +0000
Manifest this update: Mon 11 Aug 2025 08:01:08 +0000
Manifest next update: Tue 12 Aug 2025 08:01:08 +0000
Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: dOuc0XeNRe9m9LMDUMacqMBGm0YyOr2bDGLuQ5Ey/JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:c5:ef:81:d4:cc:23:b6:c3:4a:0b:33:d0:cc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Aug 11 08:01:08 2025 GMT
Not After : Aug 12 08:01:08 2025 GMT
Subject: CN=814a84941fab7674a4b50a3a82261531a5d6b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:49:08:f3:9c:1e:d0:21:b7:39:a6:3c:4a:
40:30:99:1d:b1:14:10:81:bc:13:f5:cb:d6:d5:dd:
53:37:b2:45:6f:f6:65:27:4e:89:a7:8a:84:24:f3:
e7:ee:21:4f:56:6d:68:09:50:f5:a3:be:28:62:65:
16:17:a4:3d:4e:34:63:dd:8a:4a:b9:5e:39:42:61:
fd:f1:49:60:ca:85:57:84:be:ac:76:64:51:6a:4d:
4d:3b:30:19:9b:7e:ad:29:4e:c6:63:bf:24:f4:c4:
4b:a7:3d:c7:1e:ce:12:40:ed:15:06:28:23:a5:4d:
f8:4b:57:0c:67:be:6f:c5:54:6e:ab:8d:52:6b:08:
6d:28:60:5a:74:0c:85:15:51:a8:61:e5:c3:0e:a7:
d7:d2:6a:d4:4d:db:5f:e6:72:a3:71:d4:82:65:b1:
d4:33:dd:d5:e3:1a:6d:41:f5:f7:88:ca:0b:7b:ea:
28:79:5d:88:cf:5f:dc:19:2a:60:86:3e:86:3d:75:
b1:81:17:86:98:22:53:60:2b:19:bd:50:43:30:f3:
e2:a0:3e:7b:dc:66:f6:fd:0e:a0:f4:c7:6e:df:c2:
2a:42:d7:35:93:53:01:0b:74:90:82:63:3f:ce:cb:
b9:4c:da:ad:47:60:15:35:53:13:0c:48:e3:c7:56:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4A:84:94:1F:AB:76:74:A4:B5:0A:3A:82:26:15:31:A5:D6:B3:8C
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:ef:f9:4b:99:99:cb:c0:eb:8c:6e:ca:2a:f4:8d:44:35:
bd:63:9c:49:16:ea:6c:a0:13:02:a2:d7:54:76:c2:2b:ef:c2:
e9:9a:dd:bb:61:a1:c0:5c:c4:9e:2e:9c:29:34:a4:a8:3c:18:
2d:14:05:80:5d:fd:78:09:56:c1:75:74:1f:78:46:1b:9f:d0:
21:56:a9:fc:97:90:35:cb:a9:ff:3a:d1:f6:ce:3c:96:72:01:
9c:5e:7d:f8:c4:16:9a:fd:ce:85:ea:57:f4:1d:de:1d:32:15:
a8:49:98:d9:82:e0:a8:e7:66:39:06:8c:25:23:13:13:7e:8e:
39:48:5f:63:c0:45:15:f8:19:b1:1c:52:74:d9:c5:12:68:2a:
e8:e7:37:82:f8:b1:c7:d7:60:28:21:93:cc:1e:5a:9b:3c:a9:
31:3a:80:4b:26:43:31:c7:0f:e1:b4:ae:c4:3b:08:76:e4:ab:
32:27:19:39:fb:1a:d5:3c:bc:ba:ed:4a:31:80:31:fe:18:7f:
b5:2c:aa:d5:3a:ed:a9:22:3d:e9:92:6a:6d:bc:06:64:a4:f2:
71:95:f2:8a:07:42:53:a6:8b:63:d2:2f:f0:64:95:fc:b0:c7:
94:50:62:04:65:96:fc:87:eb:0a:e2:a2:87:90:f9:e4:af:07:
b9:b7:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:43:24 2025 by rpki-client