Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier: Fyb/k9lrjZF09oqP9ChO5j3CxmMof88MGcYvimwwo8U=
Subject key identifier: 98:38:20:91:08:21:66:8F:5B:8D:EA:DE:5D:BE:D6:69:2C:9E:E0:24
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 01988B0E83875AE4FD58B361F51DFA5770A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number: 1141
Signing time: Fri 08 Aug 2025 19:00:40 +0000
Manifest this update: Fri 08 Aug 2025 19:00:40 +0000
Manifest next update: Sat 09 Aug 2025 19:00:40 +0000
Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: dLe9wHDpS0MBEaP6w3BGq3vlfskGOi+2eHIrGvJ25t4=)
2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:83:87:5a:e4:fd:58:b3:61:f5:1d:fa:57:70:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: Aug 8 19:00:40 2025 GMT
Not After : Aug 9 19:00:40 2025 GMT
Subject: CN=983820910821668f5b8deade5dbed6692c9ee024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:9d:cc:cf:20:fe:0b:fd:b5:98:37:9d:40:
0f:78:db:8b:57:5e:e2:3e:64:30:4e:f1:0c:77:2a:
f7:b1:f8:9d:f6:53:b3:14:08:cf:13:63:0a:80:5f:
55:ae:90:e0:45:e3:fa:40:77:bc:0a:1a:7f:b3:b0:
f3:65:40:f1:1e:88:53:02:3a:d1:86:dc:8c:6e:c8:
31:21:6b:8b:5f:30:5c:78:94:fd:32:82:47:09:e1:
44:ba:7a:87:5a:40:e6:33:ee:77:ba:9e:3f:4c:00:
8f:1f:12:3c:5b:7e:54:a2:72:03:2e:26:1b:a4:74:
d1:d1:06:06:ce:35:b1:79:a4:93:d5:6e:94:3e:ae:
03:22:35:3f:92:29:b5:a9:af:ab:15:ff:07:2e:a4:
5a:89:a2:4c:50:0e:c4:60:8c:71:5a:6e:7c:ec:41:
06:72:ec:59:55:ff:36:98:cd:c2:1e:b8:f7:85:10:
d8:53:c7:e8:25:5f:a4:7a:7c:3d:92:e8:70:29:8e:
c0:7a:8d:ec:85:77:fc:1a:92:86:3b:ee:d3:d5:66:
95:86:44:0c:86:c4:4b:c7:23:c2:9b:a1:8a:c0:a5:
70:7c:cf:c2:00:53:0f:d4:8f:a9:77:3e:ba:50:6b:
d1:64:ad:dc:72:4c:c1:74:e1:56:bc:fc:ec:4a:0d:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:20:91:08:21:66:8F:5B:8D:EA:DE:5D:BE:D6:69:2C:9E:E0:24
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6d:64:25:80:42:b7:48:ff:01:f7:46:36:6f:eb:a3:3e:e4:
41:3f:b5:3b:f8:c5:38:e7:80:03:a5:a6:b5:dc:76:91:bf:42:
62:d5:dd:be:80:08:28:5d:a4:35:45:c3:3d:b1:90:0c:97:df:
6e:a8:d0:60:40:7f:9d:b2:42:be:18:a1:e7:f0:1f:eb:1c:6e:
b9:49:57:69:df:88:02:ff:fd:f0:ba:52:b0:be:8d:be:9d:ed:
29:88:2e:81:cb:af:fd:ee:36:26:57:37:26:f8:33:3e:b2:65:
ea:50:d3:d0:37:9f:e7:03:e5:10:f0:bc:c4:94:d0:37:b7:71:
eb:d9:2a:f9:7c:1f:fc:a0:cc:74:8f:05:4d:55:9c:92:c1:bd:
fc:7c:b4:0c:12:f3:bb:38:2b:f0:7b:a5:47:c9:4b:72:09:fc:
04:46:72:db:0f:de:54:22:63:ff:e0:92:84:06:c0:46:e5:1c:
c9:54:11:f2:47:bf:ae:75:aa:47:3e:2e:92:32:4c:78:56:63:
37:7b:72:bb:12:d9:f7:5a:49:52:21:18:1c:07:92:9f:68:cf:
56:92:cf:2e:ac:ac:d2:f5:3a:fc:2d:44:b6:e1:0e:a0:39:15:
b1:c8:db:97:65:ed:53:da:c5:d0:4f:4a:bd:c0:11:ef:bb:96:
e5:6a:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:44 2025 by rpki-client