Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: 3ZqP8pTVGm4wzEinF84IADdiK9Rwuip6pZNhFRoTYH0=
Subject key identifier: 84:8B:5F:99:30:75:38:BB:7B:D6:41:35:82:01:5B:B8:3C:67:1E:DA
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 01987298C485DBE743B65F781764C9F1EAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 1238
Signing time: Mon 04 Aug 2025 01:01:11 +0000
Manifest this update: Mon 04 Aug 2025 01:01:11 +0000
Manifest next update: Tue 05 Aug 2025 01:01:11 +0000
Files and hashes: 1: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (hash: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: JAPavgQtbLZESILn+42Rnx7TelR+mFd2iESldZ653EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c4:85:db:e7:43:b6:5f:78:17:64:c9:f1:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Aug 4 01:01:11 2025 GMT
Not After : Aug 5 01:01:11 2025 GMT
Subject: CN=848b5f99307538bb7bd6413582015bb83c671eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:01:9e:f6:6a:48:e8:8c:dc:44:f7:77:66:
22:f6:d3:28:ab:a2:f2:02:c7:d4:90:aa:93:bc:a8:
e0:ee:bb:a7:47:7f:2b:45:a8:a5:76:78:d6:61:c2:
60:71:8c:0f:cb:92:30:e5:1c:f9:00:44:aa:ba:1a:
f5:86:26:ec:01:fc:07:0a:b4:e0:c7:ff:a0:07:25:
44:55:f0:0e:e8:cc:cd:4e:92:82:a3:83:1b:9d:0f:
18:38:1e:04:e5:0d:d1:89:79:ec:2f:db:b6:4f:8e:
c9:1d:28:00:00:9b:76:dc:2f:c0:85:9f:40:8e:6c:
e2:a9:80:4e:b0:6c:d9:6e:db:03:8e:f7:77:99:76:
b8:f1:ef:a4:71:46:78:30:3f:45:af:76:a9:dd:cc:
2b:55:c3:6b:c2:b1:34:6a:5f:5a:92:88:a5:3e:9b:
10:dc:d3:d3:66:52:31:c0:c1:95:b2:7a:3a:8f:d8:
8d:05:d3:39:33:7c:49:52:5a:24:7d:0c:42:be:dc:
bc:73:83:2e:01:6c:26:77:97:16:94:0a:06:8b:28:
99:88:0a:e9:3d:1a:7d:78:94:fe:b4:34:7a:3c:29:
f8:c7:19:85:0e:1a:a0:af:49:99:1a:0b:14:23:8f:
c1:5e:ad:95:93:16:eb:7e:1b:e8:b4:57:85:c7:f3:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:5F:99:30:75:38:BB:7B:D6:41:35:82:01:5B:B8:3C:67:1E:DA
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:19:6b:d4:51:83:f5:ef:a5:38:fb:77:ff:d4:b9:cb:8f:
e4:0d:49:c5:24:7f:02:8e:26:40:68:5a:27:70:76:7f:cf:01:
18:b5:ea:ae:de:71:12:7b:ab:13:02:9d:b0:1f:08:ce:4d:c3:
f8:48:f9:18:07:ba:01:71:8f:78:e9:a1:9c:eb:04:33:4d:a5:
01:dc:03:8b:92:9b:5d:e1:44:72:64:bd:36:07:7d:45:ef:f8:
34:ab:04:1a:cc:14:3a:43:09:80:65:19:16:42:b2:66:32:56:
4d:14:4a:65:cd:62:b5:7a:68:3a:1c:92:50:6b:71:c7:1a:3e:
7c:51:2e:23:f7:95:34:80:ff:40:ab:b9:30:14:59:d8:5a:8e:
0a:b3:ef:ba:af:48:7f:0e:da:d8:fe:0b:4b:2d:76:c3:c6:c6:
b9:ff:be:36:84:bd:c5:bf:f7:66:5b:d2:a5:72:b6:86:9d:6e:
17:c6:cf:5a:1f:de:b6:22:b6:18:df:17:2d:16:9e:5f:34:e2:
32:c8:be:9f:c8:15:e4:80:36:a6:5d:2a:f6:c0:5e:2a:82:fa:
cd:ad:12:b4:34:6b:04:5c:c8:8e:2d:8d:dc:a3:75:28:fe:69:
46:9b:d9:0b:83:b5:7a:08:c3:6d:9e:b7:42:a4:9f:47:49:b8:
0d:20:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:43 2025 by rpki-client