Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: CdSdCczT53d4jYcWErkvjzbn33WKM0xQp3Kf36yq18Y=
Subject key identifier: E8:C0:5A:1C:C8:F4:03:FE:77:73:E5:D8:C2:AD:30:26:ED:0C:5D:5C
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 0198A04DA672FB1AFE7C23FB88D3E29A5226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 22:01:40 +0000
Manifest this update: Tue 12 Aug 2025 22:01:40 +0000
Manifest next update: Wed 13 Aug 2025 22:01:40 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: WKbamGKu0MOKdySG/yvj5Lsi3/OZS7Y7y4FZuXp1zfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:a6:72:fb:1a:fe:7c:23:fb:88:d3:e2:9a:52:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Aug 12 22:01:40 2025 GMT
Not After : Aug 13 22:01:40 2025 GMT
Subject: CN=e8c05a1cc8f403fe7773e5d8c2ad3026ed0c5d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:71:b7:31:49:3a:6c:b2:c0:b2:05:fb:f2:
12:50:5b:7f:65:49:d8:cc:04:a2:33:60:06:af:35:
08:3d:f5:10:41:c8:ef:f0:ea:96:42:ff:ac:c8:23:
58:79:7f:f6:5a:04:2a:eb:d7:b6:58:7c:b8:d0:26:
4c:55:9c:fd:f5:b0:fb:52:19:e4:5c:49:66:76:6c:
42:d2:e9:07:ff:0b:6e:a0:a9:7a:50:2b:c9:ae:84:
55:a7:c5:b0:fe:2e:6e:11:31:c9:20:01:b7:d6:39:
c2:8b:b1:47:f9:57:f7:6e:b5:fb:6e:dd:82:35:21:
01:5f:9b:bd:2e:8b:54:e5:ca:79:15:ac:3c:97:c2:
77:c4:e0:c2:cc:d1:9d:90:32:36:d8:80:9a:52:c0:
6a:1f:ea:5d:2b:73:83:49:ec:4d:6b:77:b7:fa:5a:
a0:33:dc:11:90:7e:b5:a9:6c:43:d5:2d:b1:87:a3:
a5:05:06:79:64:29:a9:a3:45:ac:0e:8d:84:d2:19:
38:13:fe:1f:db:24:e3:5e:27:9f:9c:ef:cc:59:f8:
4e:e1:ed:a8:0f:0c:d1:3c:e7:79:17:7b:12:0b:a2:
76:9a:85:77:ee:75:6c:03:50:16:a6:e5:7d:0e:c8:
8d:15:32:94:dc:81:e7:f8:7d:8c:b5:71:af:21:4c:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C0:5A:1C:C8:F4:03:FE:77:73:E5:D8:C2:AD:30:26:ED:0C:5D:5C
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bd:3d:26:d8:4b:2f:f8:e3:62:b2:5e:cc:4a:07:d2:3d:48:
c8:46:14:12:af:c0:8d:5e:f8:29:05:f4:cf:41:2b:0c:3c:c3:
99:13:7e:d5:46:e0:18:87:95:c0:d1:d2:5f:42:11:c7:72:99:
20:18:93:27:e5:98:b2:77:d1:55:a0:3a:32:d3:36:47:91:28:
e9:20:f4:29:26:5c:80:28:d9:88:86:c8:9f:4d:8d:e5:24:0f:
55:81:67:eb:c5:ea:c6:91:5e:70:78:07:89:e8:9c:e0:1d:26:
be:d3:3b:b4:2d:23:66:7b:af:c5:b6:43:2d:30:ad:42:dc:fc:
5f:ee:c7:b8:ba:d9:56:97:29:2f:84:62:89:42:74:d4:8d:92:
61:a5:f3:20:df:24:41:bc:68:30:cc:b9:4d:12:d2:33:ae:4f:
d5:dc:b7:e9:e0:54:87:e5:cf:aa:62:19:eb:83:41:81:e9:68:
e4:24:d7:13:77:bd:2a:1e:2a:73:51:a8:cf:2c:b3:cd:39:71:
a2:5d:59:74:59:27:da:ed:b4:9d:1d:a1:9f:23:d2:f4:e9:2f:
d3:2e:0e:9f:a4:c3:53:2a:1e:df:ef:e4:19:71:0a:de:08:48:
8b:64:4f:1e:19:1c:72:47:6b:96:54:91:04:77:70:d9:3a:12:
15:f8:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:33 2025 by rpki-client