Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: we7/IySyUEnoXqmB7CxDdjSFSFUCPD9/AN5dwHU8gTY=
Subject key identifier: 28:20:D8:FD:18:5C:19:C6:39:CE:0E:0C:F5:7F:BA:A1:94:D8:47:45
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 019893DAE9EA554DCBC67C90DC1BEACE66BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 09C1
Signing time: Sun 10 Aug 2025 12:00:54 +0000
Manifest this update: Sun 10 Aug 2025 12:00:54 +0000
Manifest next update: Mon 11 Aug 2025 12:00:54 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: 2T+vhyrGzoSStCUOGNGvPJdc9nZrM93sNbCQjmZg9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:e9:ea:55:4d:cb:c6:7c:90:dc:1b:ea:ce:66:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Aug 10 12:00:54 2025 GMT
Not After : Aug 11 12:00:54 2025 GMT
Subject: CN=2820d8fd185c19c639ce0e0cf57fbaa194d84745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:51:19:79:13:2c:06:ea:72:f9:4d:52:c1:
8e:b9:9b:29:30:ef:0a:60:8b:e4:c1:60:ab:43:88:
b4:d3:3c:32:d9:dd:44:00:4d:85:91:40:f4:bc:6b:
0d:69:17:3b:e4:fc:ce:04:be:ab:ca:ad:d1:87:c8:
11:76:68:90:04:66:5e:c6:9f:0b:1a:79:72:c3:ed:
d1:a3:d2:fd:4b:95:f5:08:70:0f:ab:a4:25:20:a4:
33:07:27:44:07:83:dc:1e:0b:e4:6a:46:1f:fd:8e:
e8:37:2f:e2:11:cb:c8:e2:9d:9b:e7:fc:33:a3:10:
93:57:cc:25:96:a9:0e:e0:7f:18:23:95:fd:f7:b2:
d5:e5:3d:66:7c:50:8c:09:be:11:02:7a:ad:27:d4:
4d:a5:43:a1:54:11:3c:db:8b:20:9b:86:2b:6f:55:
44:2d:78:2d:0c:64:dc:b9:ef:47:f3:01:eb:9c:12:
c9:e6:f8:0b:19:7e:cf:12:44:34:03:d2:f5:03:ee:
c8:73:e2:c2:5d:ae:43:7c:40:93:fa:89:8b:1a:ed:
07:59:1f:e1:48:bc:48:d1:c9:89:f7:40:49:23:f3:
88:c3:9a:7a:32:4c:f5:94:b4:ca:2e:c6:98:28:62:
d0:0c:6a:0f:3e:f5:68:13:79:f8:26:7e:d7:f0:0e:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:D8:FD:18:5C:19:C6:39:CE:0E:0C:F5:7F:BA:A1:94:D8:47:45
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:af:d7:04:c0:b3:64:d3:63:16:ac:3b:e7:69:b7:e2:bd:
bb:ad:2c:27:e3:dd:5e:44:0e:04:78:fd:8f:3b:21:76:f5:38:
f5:57:1d:e4:36:87:ee:3c:34:f7:96:33:14:dc:a2:b6:c6:5e:
2c:6d:5c:d3:60:bf:12:a5:51:03:32:b6:3c:3f:25:75:ea:bc:
d4:9a:55:92:6c:fd:72:5c:d5:95:3e:dd:67:9d:4b:ad:a9:89:
36:6e:82:01:a5:8a:1f:1b:d1:79:5c:5a:64:3d:00:34:ff:e6:
97:a8:52:76:28:cd:aa:1e:6f:e9:08:ba:8e:80:02:72:25:e1:
51:23:21:76:5f:e6:0f:4f:4b:22:20:9e:09:98:11:64:e9:52:
97:c0:4f:eb:32:e2:d4:0e:a8:f8:ee:82:72:b7:bd:99:00:2b:
16:09:59:90:06:0c:7d:68:cf:5c:09:90:ef:72:7f:e2:85:a0:
6d:38:7f:c7:72:3c:23:b4:9f:d2:67:42:3e:b3:e0:ee:8f:8a:
dc:23:e2:2f:44:2b:b5:9a:31:9c:88:57:e8:2b:13:02:9b:bc:
ed:a5:45:94:f1:b9:41:19:65:3a:8e:7f:9e:3d:45:44:c8:c4:
71:81:5d:d5:be:a6:fa:10:46:d0:85:41:c8:09:e0:b7:fa:17:
a3:9f:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:54 2025 by rpki-client