Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: dd4gfJdEQJ472OAlGT4nGP6KowAaAnvHS7yXvXqhJMQ=
Subject key identifier: 4F:88:35:D1:A0:C7:9B:F4:C5:30:E8:22:7A:C0:08:54:12:0F:8D:C3
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 019873E26A2347C8CEFB55E3068356DF0A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 021A
Signing time: Mon 04 Aug 2025 07:01:14 +0000
Manifest this update: Mon 04 Aug 2025 07:01:14 +0000
Manifest next update: Tue 05 Aug 2025 07:01:14 +0000
Files and hashes: 1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: zR5opqwR+IcCWTHEshxV39iIN1CMEoBpVuOFKQacojk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:6a:23:47:c8:ce:fb:55:e3:06:83:56:df:0a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Aug 4 07:01:14 2025 GMT
Not After : Aug 5 07:01:14 2025 GMT
Subject: CN=4f8835d1a0c79bf4c530e8227ac00854120f8dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:ee:45:c5:65:5b:16:8d:54:03:48:60:99:
96:e0:41:5f:91:8b:75:95:51:ab:d6:b5:f7:cb:8a:
ad:fd:ae:da:1c:3e:e1:45:e1:f1:e4:a6:08:20:88:
f9:a4:1e:f1:dc:cd:34:c2:97:09:ae:86:fd:70:20:
bb:c6:aa:ab:d4:5a:15:38:09:68:93:f0:10:3e:c6:
70:8e:41:89:dd:a4:4c:4a:92:9f:fe:20:1e:ef:ee:
11:b9:06:99:6c:8c:6e:36:17:b4:7f:7f:d1:71:1c:
86:7a:fd:2f:92:cd:3c:6c:29:f9:a8:2f:11:8e:49:
3e:8c:85:88:85:e4:78:d9:0c:1b:d9:c3:5a:99:a2:
f7:a4:37:b4:b6:1f:8a:97:e3:c9:36:21:e7:36:66:
27:3e:91:6f:ea:ee:7b:c0:38:36:2d:54:30:36:f7:
43:9b:77:ae:d7:c1:85:b5:b7:6f:32:2f:1b:35:74:
72:99:11:16:94:4e:43:4b:2e:b7:bd:bd:66:b1:28:
4d:56:17:29:1f:27:05:b0:7d:46:e1:88:03:46:bd:
5d:0e:d6:b4:c2:fc:db:3e:42:ef:83:9f:f5:11:61:
40:2c:b2:82:16:ef:24:67:33:8b:d0:8c:89:de:ca:
08:21:1c:0d:01:54:47:cc:f7:1f:62:e8:3f:52:ea:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:88:35:D1:A0:C7:9B:F4:C5:30:E8:22:7A:C0:08:54:12:0F:8D:C3
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e8:ff:01:fb:c0:16:0f:fb:c9:0f:e6:19:a7:b1:90:70:36:
58:1a:68:f2:97:1c:62:51:df:b1:68:2c:6a:a9:51:e4:a0:0e:
cb:d5:cc:49:74:69:d8:74:24:df:8e:76:f6:ce:9a:6d:fe:0c:
0a:16:e9:0e:51:82:d4:dc:f9:4d:06:f7:a5:cf:6e:52:75:0b:
74:b1:0a:83:9b:80:63:10:0a:57:cb:53:20:ab:40:ab:48:5f:
28:b0:09:c9:4e:ae:49:ee:a9:c8:c3:7a:86:1d:aa:ea:ff:bd:
23:69:9f:a1:80:57:e5:99:88:fd:94:68:ab:48:2d:cf:8c:78:
a9:5c:61:83:6c:c5:d5:6f:a2:97:d5:26:19:d7:54:6a:1d:27:
bf:1e:df:63:b2:a6:ad:fb:22:7f:65:c2:f8:11:26:39:82:4b:
52:4a:c1:7d:dd:fa:3e:03:98:20:36:f3:2e:ad:53:af:67:ce:
4b:41:04:f9:32:ac:7c:38:98:5f:81:42:04:9d:63:7c:8c:49:
ce:8d:db:ee:a2:07:c4:09:fa:3b:b4:0b:bd:94:b4:8d:fc:3b:
c7:a0:16:b5:f9:a0:7d:bb:f1:f8:d3:84:05:d4:5b:9f:6a:a6:
e9:88:b6:98:49:a0:3c:5f:06:ee:f3:7e:5a:0e:37:2c:c9:95:
66:2b:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:10 2025 by rpki-client