Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json)
Hash identifier: didChHpEO1Qp3K1qFUGapQOhp7UHLUGQf3zj2ozoF7A=
Subject key identifier: 19:2A:9A:EB:83:BC:27:D0:EF:20:39:50:2A:E8:25:BF:0D:99:46:88
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 019873E309CFFE9E2F5DE638930ED02A79D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
Manifest number: 0602
Signing time: Mon 04 Aug 2025 07:01:55 +0000
Manifest this update: Mon 04 Aug 2025 07:01:55 +0000
Manifest next update: Tue 05 Aug 2025 07:01:55 +0000
Files and hashes: 1: MJgreWjojTG3TWAm0IOsT3PX7yE.roa (hash: QQOCbVX4ydh8RHwVZnu9QI+n2Ns0Q1CadZGcMjFSReI=)
2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: R7qZG+yf7rMsXad3u1itNIyahtMp3MxD2Td6jG6nMJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:09:cf:fe:9e:2f:5d:e6:38:93:0e:d0:2a:79:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Aug 4 07:01:55 2025 GMT
Not After : Aug 5 07:01:55 2025 GMT
Subject: CN=192a9aeb83bc27d0ef2039502ae825bf0d994688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:8e:80:7c:8e:b3:61:9c:f7:0a:14:65:c7:
0e:ac:b4:72:2f:2b:e1:00:c8:52:40:57:ab:49:c1:
50:b4:42:e6:ac:da:25:2f:7e:bd:b4:b1:bb:01:0a:
42:41:b0:0d:7c:18:67:e4:ed:de:01:f9:b8:8e:b4:
0f:d4:21:3f:39:bd:df:f3:ad:fc:ca:e6:4e:e4:da:
b8:26:40:31:4e:81:96:e7:17:2c:7e:e6:0f:cf:9e:
1a:0e:c2:33:98:b0:bf:cc:7e:7b:2d:e5:11:ea:9c:
46:72:28:98:8e:96:e9:2d:03:35:23:94:ce:c5:cc:
3a:a8:6c:19:7b:4e:24:cc:84:f2:42:ad:88:ea:b2:
10:42:e7:c6:7d:2a:be:e3:d5:8b:7a:79:8b:70:dd:
aa:77:49:53:6e:ba:48:46:bd:63:a1:f7:7a:e4:a3:
a4:50:55:30:6d:12:ed:c2:38:28:59:83:b0:45:bc:
17:08:58:6e:1d:69:fe:70:09:51:ee:9b:8d:04:82:
23:99:ef:2c:36:c6:14:ab:4d:c8:0f:b3:9b:0f:15:
19:2c:77:4c:0e:48:94:b9:f2:d7:cd:f5:62:7c:65:
0a:1e:67:e1:3e:0d:12:ba:ad:9f:c4:50:55:7a:4f:
fd:29:91:9d:2c:46:c6:86:13:2d:0d:9d:01:83:4c:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:9A:EB:83:BC:27:D0:EF:20:39:50:2A:E8:25:BF:0D:99:46:88
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2b:af:7a:3d:25:4e:46:50:2a:9e:31:f2:6a:a5:a2:b2:e4:
45:18:3c:98:83:b0:e1:70:8c:11:89:05:3f:ec:25:20:00:37:
83:dc:a4:13:e5:f7:cd:34:0b:3e:4d:40:ca:7c:14:46:bd:31:
86:25:15:45:14:1e:c6:26:41:a7:8e:05:05:48:b3:d9:f8:76:
0e:ca:ec:a7:bb:11:78:34:c6:00:01:da:af:63:8b:a7:55:35:
be:b8:73:5c:ea:a6:69:15:81:b6:d8:66:9b:ac:88:e0:7c:30:
91:d6:ab:7f:71:1e:e6:66:c8:db:96:63:e9:9f:4e:b2:9f:c2:
56:75:5a:b9:da:ec:79:07:a9:d0:6d:13:59:aa:f3:f9:1c:ce:
80:e4:71:a5:53:d6:e0:c1:7a:8b:a6:c9:6d:c2:70:0a:b7:7d:
fa:2d:46:1a:bf:87:2e:80:f8:82:be:cc:61:8d:ea:e0:3d:fa:
85:bb:8c:ba:12:81:c1:ee:ca:87:da:01:45:e7:cc:42:42:5e:
0c:9d:7f:59:51:80:e6:66:44:36:75:c1:8b:97:5d:e1:4c:66:
eb:6f:67:bb:3a:d0:87:1e:b9:35:eb:c4:6e:49:f3:d3:4f:4e:
3e:89:3b:e4:7f:cb:e5:c9:b5:90:ec:2b:08:f2:83:1d:f9:fe:
7f:76:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:49 2025 by rpki-client