Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: hzlLjfVh8Z1+/QuPE/zeuDFbFILgXhOQ/ehaOmnSKdY=
Subject key identifier: C1:DF:DB:AD:F0:0E:69:BA:25:27:97:8A:5A:5A:3B:0F:9C:D8:34:7F
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 0198A04D93C1DE4B920087F934653528A3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 1106
Signing time: Tue 12 Aug 2025 22:01:35 +0000
Manifest this update: Tue 12 Aug 2025 22:01:35 +0000
Manifest next update: Wed 13 Aug 2025 22:01:35 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: z+XbncLJ7beHvgGRFf21LzGrBfu/4JJVUUQ3Lprb0Ng=)
2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:93:c1:de:4b:92:00:87:f9:34:65:35:28:a3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Aug 12 22:01:35 2025 GMT
Not After : Aug 13 22:01:35 2025 GMT
Subject: CN=c1dfdbadf00e69ba2527978a5a5a3b0f9cd8347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:3a:1e:1a:11:17:ef:7a:6a:19:fd:41:4c:
40:76:32:be:64:0d:6e:d0:ef:b5:ad:dd:3d:f0:b7:
73:41:ec:6e:c6:c5:67:a5:6a:09:b5:08:22:f4:03:
5a:d5:67:7e:94:31:db:2e:c8:79:71:d1:2c:15:fc:
55:14:f8:de:6d:57:0c:cb:4b:1b:1d:a5:64:ad:d1:
c0:60:78:59:69:c3:3e:86:ad:94:a9:5c:d1:30:09:
7e:23:c8:8b:cc:44:ad:63:02:94:7e:05:81:a4:36:
a3:6b:4c:61:6e:a3:a5:24:89:c8:33:1f:1b:e4:78:
09:1a:d3:13:57:40:28:2b:e6:83:3a:0e:47:56:11:
4c:64:b4:52:19:1a:e7:05:61:ca:13:19:73:d1:7e:
a6:32:5a:d7:22:bd:92:2a:f3:52:05:d8:52:4f:36:
d6:46:b5:b2:0d:55:2b:1a:0f:05:28:42:6e:5a:37:
c9:77:7c:04:5a:57:20:b2:53:61:52:f3:b8:a7:72:
76:42:18:34:6e:8c:08:ef:dc:24:32:38:8d:9f:99:
65:1d:d7:d9:09:57:7d:36:e1:ef:85:19:40:0e:8a:
80:99:64:a5:13:5c:b5:b3:54:e7:36:33:03:b4:ff:
75:fa:d4:58:a9:97:1a:4a:94:92:23:8a:e2:11:70:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:DB:AD:F0:0E:69:BA:25:27:97:8A:5A:5A:3B:0F:9C:D8:34:7F
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e0:8f:b9:9f:a9:a2:92:a3:84:37:fa:22:55:40:89:38:02:
a0:18:16:4c:9a:e7:01:d0:ba:03:0b:e4:d6:d1:1d:b5:3e:c4:
2c:cf:35:11:c9:70:39:4b:76:88:40:5a:55:c1:51:44:f8:82:
34:e3:93:71:70:54:29:34:64:43:90:86:53:68:b9:ec:5d:f0:
02:f4:c3:52:43:99:fa:5f:b6:c0:b2:8a:91:92:fc:3c:64:6f:
1e:80:03:f8:46:5b:be:b5:f7:03:36:13:56:d0:b1:fb:0a:43:
d9:1f:86:4b:d5:de:5f:19:79:32:8d:42:f3:a0:8e:4d:3a:44:
04:d3:05:7f:55:58:ba:0d:41:df:ed:46:ec:4c:c6:b8:51:f0:
56:05:dd:8f:a9:d9:88:5e:0a:55:36:85:5b:06:8f:b6:a9:72:
5a:85:6e:8b:49:7a:8f:d7:7f:c4:1b:9e:01:31:3d:52:99:58:
7a:8d:1d:81:8c:f9:38:ae:d1:a7:d2:99:c3:2a:88:4f:5d:65:
9a:9e:fb:ab:99:9a:44:67:46:02:33:ab:7c:b1:0b:5d:d2:9c:
d9:0a:ee:7c:6f:7c:a4:87:a3:e6:be:1b:e2:a6:ab:ca:09:de:
10:9d:68:f4:d9:da:60:e0:38:97:ee:37:5b:53:81:5d:04:b7:
12:c6:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:33 2025 by rpki-client