Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier: rVdq6+jfE+L5uC8dqTsMX9jFStBKE4iWGY+jsfWASPM=
Subject key identifier: 2D:90:31:03:46:E9:B7:09:D8:8F:87:25:44:04:4B:B1:C9:12:79:F5
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 0198A04EFEC3D809AF65ADAC58137701F44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number: 07B4
Signing time: Tue 12 Aug 2025 22:03:08 +0000
Manifest this update: Tue 12 Aug 2025 22:03:08 +0000
Manifest next update: Wed 13 Aug 2025 22:03:08 +0000
Files and hashes: 1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=)
2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: lbtTvHgE81mzWARucDsIKMYzEFJVxfRCzlsq3w1iOvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:fe:c3:d8:09:af:65:ad:ac:58:13:77:01:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Aug 12 22:03:08 2025 GMT
Not After : Aug 13 22:03:08 2025 GMT
Subject: CN=2d90310346e9b709d88f872544044bb1c91279f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c5:24:1c:13:0e:30:f7:8a:c7:f6:60:28:8b:
69:25:1f:96:99:7e:cc:98:58:31:a5:38:ff:67:f9:
f9:4f:38:84:04:34:0b:a0:e2:58:df:52:f9:77:b7:
19:4d:7d:66:5e:97:67:e4:99:2a:02:cb:c5:e3:43:
4f:31:15:a3:de:af:22:92:ce:84:7e:6a:a4:bf:34:
fa:d0:aa:c7:c6:18:8d:9e:8d:5f:af:90:b3:36:c6:
82:fc:c8:7d:e4:5b:07:5f:e4:9d:53:de:14:ad:a3:
f8:4c:21:94:e5:6c:9c:62:05:63:fa:c1:c8:85:b2:
91:55:72:14:29:b8:4a:40:3b:b6:c5:80:80:e6:fe:
23:11:11:b1:03:e3:2b:26:41:03:fb:8d:70:54:6f:
40:0f:57:ec:4a:a5:de:33:f5:ad:2e:55:51:59:12:
b4:d9:d8:59:4a:18:e5:53:1f:d3:d9:cd:26:95:2a:
92:cf:59:5b:d2:a8:fe:c3:03:2a:d3:7c:d8:43:0f:
b0:1a:e4:8d:17:2c:39:65:e9:e0:0a:4a:44:b1:84:
c8:aa:e2:cd:a6:8d:b5:3c:dd:c2:2f:3d:c0:d0:67:
81:15:b6:15:0f:16:42:e5:0c:22:0e:7d:a4:f7:bf:
91:68:86:79:08:70:a1:00:82:4f:41:60:a5:9c:df:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:31:03:46:E9:B7:09:D8:8F:87:25:44:04:4B:B1:C9:12:79:F5
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7c:63:ed:f8:79:f8:e9:fd:6f:9b:6f:0a:7b:90:6c:02:a1:
e0:29:18:17:d7:39:3b:7c:98:30:3b:01:f6:50:b3:b5:8f:e6:
88:aa:f4:f9:5a:61:7b:d7:08:6d:37:f8:39:56:92:b0:ea:7d:
0f:62:7f:a2:22:4a:be:1d:f8:25:6a:1e:fa:62:89:cd:bc:c4:
49:d2:12:b2:e9:38:52:94:bf:9a:ec:51:57:f9:0a:3f:32:a9:
40:96:49:e4:87:8a:df:4e:97:56:7f:af:7a:5d:0d:81:0f:3a:
4f:38:88:20:84:f8:27:5b:20:6d:48:1e:54:22:f3:04:54:7e:
7e:0b:01:8b:64:14:76:b7:14:ac:c6:06:61:fc:85:8f:34:1a:
1a:fe:4c:8a:18:5a:bc:7e:7c:90:de:d7:80:3d:88:ce:78:ca:
da:b6:8c:ca:2d:64:c6:a8:8b:d0:78:84:b3:c7:af:eb:1d:c5:
ea:55:85:1c:7e:45:67:08:d6:0c:45:e2:20:1e:0d:4c:0b:ea:
bc:0b:57:e6:ed:a7:a6:a5:97:57:8a:c7:f8:ca:40:64:cf:90:
7f:97:26:75:3a:73:2c:94:da:20:be:c4:d6:1c:37:93:47:63:
81:d4:c7:11:01:fc:52:dc:d7:a4:f2:7b:da:5a:e7:7b:5b:50:
9d:96:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:16 2025 by rpki-client