Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
File: nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft (raw, json)
Hash identifier: +AUmy1c+iC7esUFWLMBq2MVBVtl3NzhAKHrZFNDbn2A=
Subject key identifier: 61:2B:81:AC:B0:03:D6:DA:26:3C:92:47:9B:D9:EB:AD:C2:D0:4E:B7
Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
Certificate issuer: /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Certificate serial: 0198820C21594CECBF7A38C875B9C8BCA89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
Manifest number: 161B
Signing time: Thu 07 Aug 2025 01:01:29 +0000
Manifest this update: Thu 07 Aug 2025 01:01:29 +0000
Manifest next update: Fri 08 Aug 2025 01:01:29 +0000
Files and hashes: 1: RvlNk8dGKorZzV6RSRdv-WDV_HE.roa (hash: KtznCFrYuNrxb/iIoe3x5KvOTsGXxBUw5Sa9+KNOTgg=)
2: nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl (hash: JlqkbfPSSvXkI1ccvd4jF2fKu0GmrD4N/gRSa2uI6ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:21:59:4c:ec:bf:7a:38:c8:75:b9:c8:bc:a8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Validity
Not Before: Aug 7 01:01:29 2025 GMT
Not After : Aug 8 01:01:29 2025 GMT
Subject: CN=612b81acb003d6da263c92479bd9ebadc2d04eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:45:b3:0b:b5:46:e6:f8:25:e9:a8:a8:78:
67:c0:c3:f2:09:86:d7:6a:e4:7a:b3:12:1d:3f:b6:
36:8c:51:e6:ac:4d:e8:43:53:c8:bd:f7:54:f8:5f:
52:68:d5:1e:74:48:39:89:f1:a4:36:7e:e5:3a:12:
c9:bf:6e:eb:a3:0d:92:f0:49:5b:28:9d:32:a7:c6:
99:84:af:46:99:07:82:e1:43:8d:e4:ca:33:01:52:
bc:41:d5:49:66:40:93:05:9f:09:bd:de:f7:52:74:
24:62:88:33:24:50:dc:3b:81:21:1d:86:05:6e:ab:
f4:e4:76:ae:a8:9a:f6:27:af:ff:cb:30:d4:3c:bb:
63:09:25:49:29:ae:7f:1b:f2:a5:4d:6b:73:98:8b:
94:39:76:e1:e2:7c:16:7e:03:f6:f5:13:ee:67:5c:
50:a0:d3:63:c4:cd:37:92:cc:70:f3:e8:99:98:35:
cd:74:b4:e6:03:c3:4a:38:24:2f:42:ba:9f:e5:c3:
be:75:98:87:4f:10:0c:20:ad:20:e9:83:23:54:e0:
71:2b:c0:ec:e2:2e:56:55:04:5b:0f:bd:b1:2c:91:
cc:75:b1:f8:31:2c:54:c1:ed:1b:ff:23:28:fb:5c:
1e:6a:0f:16:3f:ae:b5:16:df:31:51:89:2c:85:cb:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:81:AC:B0:03:D6:DA:26:3C:92:47:9B:D9:EB:AD:C2:D0:4E:B7
X509v3 Authority Key Identifier:
keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:1f:1c:1b:90:9a:de:5e:e5:86:83:60:54:eb:de:23:8a:
a2:86:ac:43:8c:a3:db:cf:f2:ff:cf:d1:90:09:95:20:77:6b:
2f:14:2a:94:09:1e:57:44:81:97:1d:22:c3:1e:77:31:cd:79:
78:d9:47:51:1d:51:5a:fd:87:e7:3d:be:de:ff:98:ff:20:41:
5e:c0:11:de:28:39:3f:db:bd:0a:46:64:2a:45:27:03:5c:8d:
13:30:e9:ca:33:5c:e1:76:89:99:88:5d:02:68:75:18:f4:0e:
2d:21:ad:7d:3b:9f:c9:0b:0c:b5:87:d3:a4:7e:7b:96:32:80:
24:8b:3b:f5:7f:03:27:d8:35:ec:60:6a:99:87:49:bd:9a:01:
33:3a:24:83:98:54:15:77:00:59:ce:8d:55:89:4e:38:94:b5:
4a:c9:4f:61:2f:6a:a6:f5:5f:70:91:9e:2b:0d:69:83:39:cd:
72:72:fc:dd:c9:98:f6:a9:f3:8c:24:da:b4:a7:d9:4c:a8:7d:
96:7f:e4:11:1a:f0:81:3c:56:13:bb:13:f4:23:e7:2f:5b:58:
21:24:82:cc:31:fc:4f:af:ca:b0:20:a0:1f:5b:13:26:4b:82:
6d:77:11:12:95:d3:3c:79:b3:ae:68:4e:c5:13:62:de:ee:b2:
67:74:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:45 2025 by rpki-client