Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: eUv+4i9ifRR9AyemxNyK2J7oUtKiqGOZ74YlFKTGq1E=
Subject key identifier: 42:D0:C6:53:53:C4:93:83:E5:E1:A5:C4:12:E6:4B:58:D8:C8:EB:53
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 019873E33634073C0570D75A082044CE659C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0DAA
Signing time: Mon 04 Aug 2025 07:02:07 +0000
Manifest this update: Mon 04 Aug 2025 07:02:07 +0000
Manifest next update: Tue 05 Aug 2025 07:02:07 +0000
Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: ifc1EecP6AcGWB7BqietmbgJWHxR2t8XfE8tO1P5pec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:36:34:07:3c:05:70:d7:5a:08:20:44:ce:65:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Aug 4 07:02:07 2025 GMT
Not After : Aug 5 07:02:07 2025 GMT
Subject: CN=42d0c65353c49383e5e1a5c412e64b58d8c8eb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a2:4b:1a:c8:71:54:eb:89:36:57:2d:93:d3:
92:7a:fa:7f:8e:3d:87:b0:7e:2e:bc:1c:a5:6b:0d:
29:7c:f6:b1:7e:b2:20:62:18:c8:33:ce:51:60:40:
3e:3b:0d:5e:7f:06:6e:de:a7:88:ba:54:f4:b5:f2:
4a:b2:36:57:4b:e1:2a:d4:7c:7e:67:d1:ae:00:cb:
0b:c0:05:66:8a:2f:27:90:41:8e:c7:a6:30:9c:1e:
ec:4b:5f:81:89:a0:20:d7:b5:ef:57:7b:c7:93:7b:
b0:ef:e9:10:b8:77:de:ba:05:0f:ba:87:53:09:e4:
66:72:cd:46:2c:41:69:0d:ca:2b:c1:05:2e:97:f3:
99:16:11:0a:b0:7e:0d:26:90:e9:46:ea:04:ab:de:
b0:25:39:64:b0:bb:c1:8e:7d:ac:d2:b2:00:20:a0:
3e:14:bf:9a:69:82:eb:d6:66:7d:c7:ac:3b:c0:ea:
82:19:24:4c:fe:72:f2:c0:09:7e:3d:7b:76:b7:27:
ad:23:5c:c0:58:49:b6:9d:d0:57:52:14:46:d7:b1:
cc:d6:01:26:50:6d:f4:a4:07:c8:d1:a2:f8:a2:cd:
a9:32:af:e7:67:c6:80:3b:a2:a3:f9:1c:fb:a2:9e:
22:f6:c6:30:c2:25:f4:50:d0:d7:2e:65:05:62:be:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D0:C6:53:53:C4:93:83:E5:E1:A5:C4:12:E6:4B:58:D8:C8:EB:53
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:86:b6:62:23:5c:32:ec:52:b1:7a:79:b5:ab:27:29:7b:15:
08:3a:1d:83:4d:58:45:0d:77:7e:3c:88:48:ac:6b:4c:0b:9a:
a3:c4:d4:03:36:55:04:7b:93:b4:b9:24:00:d5:5b:a7:73:27:
6f:9f:d9:5d:40:39:69:85:14:f1:98:77:c7:23:85:f0:d7:1e:
9c:ae:a1:7e:13:6f:68:e3:02:14:63:ab:91:42:e5:b7:8e:da:
91:8d:83:e8:4c:b8:41:bf:13:e4:70:91:47:bb:2b:1b:cd:0c:
bb:e8:90:7f:79:bd:cd:41:52:88:92:94:7e:75:a2:fb:fe:10:
29:8b:92:b8:32:c8:db:ce:9c:31:b5:23:20:4e:dd:0d:eb:79:
d6:9a:22:24:f0:26:07:7a:81:c6:d0:22:05:a6:b6:84:e3:b7:
44:8b:6e:99:d3:c0:c4:81:e6:69:f1:ae:5e:c1:82:41:5a:1a:
cd:5c:5f:66:9e:ce:87:25:11:26:a7:d3:5b:3a:97:c9:83:7b:
4b:dd:5a:02:fe:eb:e7:5d:0f:a3:7f:12:49:40:cc:36:ff:1c:
f7:59:39:fb:7e:b4:2a:71:69:77:e9:e6:d1:e1:9d:b1:3c:29:
d7:d6:ba:22:0b:30:80:b3:ce:f8:cf:14:48:d8:9a:57:bd:40:
fc:a4:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:02 2025 by rpki-client