Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: YxIF6bref4ncQ5o0b7BVL+8D5JVJKSXlNGv36MxJpEw=
Subject key identifier: 2B:27:0E:29:E8:98:18:41:DC:23:15:8D:34:E3:DC:FB:82:48:FC:CD
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 01987B9D0DB3218456B1E7D1AD6B44943B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 056A
Signing time: Tue 05 Aug 2025 19:02:26 +0000
Manifest this update: Tue 05 Aug 2025 19:02:26 +0000
Manifest next update: Wed 06 Aug 2025 19:02:26 +0000
Files and hashes: 1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: H44sZ0TYFKtrLthmDIK+86zO6zDgNJEASjdcJSRgl9g=)
2: zCy2TEUINZmipMaXJF_ZJiCXKXs.roa (hash: kFNybXZv7aLQUvfMaX6TQe+E+VLOfa/7bi5eq9XGzik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:0d:b3:21:84:56:b1:e7:d1:ad:6b:44:94:3b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Aug 5 19:02:26 2025 GMT
Not After : Aug 6 19:02:26 2025 GMT
Subject: CN=2b270e29e8981841dc23158d34e3dcfb8248fccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:fa:08:0f:83:72:0b:e3:c8:a3:6d:1e:67:
ee:5f:4f:cb:3f:69:44:28:d5:d4:62:06:7d:97:c1:
cd:db:00:c2:42:68:39:61:a2:4f:ae:f2:bd:d5:6f:
e9:c0:19:26:16:6b:5b:8f:35:5c:b2:ff:07:77:98:
11:9d:be:07:a7:30:45:fa:4d:be:b6:f0:8f:49:f9:
7e:9b:50:41:f8:76:f7:c9:5f:11:d6:df:d6:3f:35:
2f:dd:74:ff:78:9d:1f:31:f4:39:12:90:bd:ed:be:
30:a3:fd:ac:52:f2:9d:45:78:7c:1d:87:f9:a5:ac:
11:c0:e4:fa:16:89:83:68:e9:7c:ab:c6:9a:a1:c3:
08:c5:cb:69:9f:09:a0:5c:42:c9:20:a2:da:4e:16:
14:59:ff:02:2b:17:6d:1d:de:68:18:f2:a8:2f:03:
8c:53:a0:19:a1:3a:c8:2c:26:d7:68:17:3a:f2:ce:
f0:d0:83:94:3c:2a:51:3f:b6:26:61:c2:ed:cb:26:
29:b7:6f:1e:9d:36:e0:b5:bb:0b:f6:d8:40:e6:dd:
fc:a4:61:51:14:8a:7e:9b:88:70:6c:3d:b7:c5:0e:
cf:d6:94:d1:3a:33:33:42:ff:97:be:6e:83:56:a4:
f2:aa:00:a1:a3:eb:47:19:4b:ba:a6:e7:4c:43:f6:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:0E:29:E8:98:18:41:DC:23:15:8D:34:E3:DC:FB:82:48:FC:CD
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:c6:b5:5f:58:37:6f:9c:5f:9d:94:3f:f4:53:2d:fe:78:
f7:06:92:49:f1:da:d8:40:78:9d:a4:fa:92:45:5f:41:81:b7:
14:37:86:ab:b1:6e:7f:8b:34:98:c0:d3:4f:1f:18:e6:9d:33:
bc:7a:8e:82:26:6d:d9:04:af:cc:af:ae:bb:0a:49:68:46:90:
f7:1d:37:61:8f:a3:66:2f:c1:19:f4:e8:52:fb:8b:d6:25:9a:
1e:81:83:29:16:1c:9f:07:af:64:0b:42:71:89:7b:24:28:13:
cd:3d:0e:bf:f8:24:12:ef:45:c6:a6:bd:a5:5a:1b:ae:33:4a:
b6:e3:7d:0b:b4:99:a4:74:db:68:a2:83:a3:90:67:f9:07:98:
83:f1:98:70:c1:71:d0:6a:ca:f8:f3:a0:09:f1:8e:29:35:f1:
e9:ce:62:ba:30:46:eb:bf:1a:69:3e:a6:d3:21:a6:3f:eb:41:
a2:3b:03:68:6c:fc:fa:ef:10:32:64:3e:42:2e:13:da:29:c5:
a2:ef:7d:99:62:54:b8:67:66:f7:33:a6:d8:9d:fc:32:68:66:
77:15:51:fd:08:d8:96:14:84:f5:ef:74:69:cd:97:bd:8c:7d:
80:a6:26:f8:eb:3e:bd:cd:d8:67:4b:eb:94:6c:88:ea:c3:34:
dd:f3:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:36 2025 by rpki-client