Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: gccr0gamS+waOqCP6P9plTEZYK2zZaDWfZo6jkNPc2U=
Subject key identifier: 94:43:CB:2B:24:89:D3:76:7D:4C:76:03:87:F2:8E:2B:32:F5:82:D8
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 01988B7CB9BF93F1801D53017F7AB16B3553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 093F
Signing time: Fri 08 Aug 2025 21:01:03 +0000
Manifest this update: Fri 08 Aug 2025 21:01:03 +0000
Manifest next update: Sat 09 Aug 2025 21:01:03 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: HGNQsLOIrZCTSqQoODAq7sHDDf0Q+HvaI8LgbtOL84o=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:b9:bf:93:f1:80:1d:53:01:7f:7a:b1:6b:35:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Aug 8 21:01:03 2025 GMT
Not After : Aug 9 21:01:03 2025 GMT
Subject: CN=9443cb2b2489d3767d4c760387f28e2b32f582d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:4c:58:65:2e:a6:4f:c0:e3:38:23:8b:88:
f8:5b:6b:6f:fd:e7:9b:b6:c3:16:a1:4e:33:c9:4c:
70:86:4c:df:37:5d:a2:72:14:ae:d7:01:ce:5d:7a:
0c:2d:9d:a6:61:68:2c:9b:ff:c1:89:bc:20:b0:e5:
e3:23:e6:96:db:6c:a9:89:57:d8:8d:65:c2:1c:1d:
ea:a7:2c:43:08:16:ac:9d:7d:36:e5:4b:13:8a:3a:
10:a7:5f:0a:6a:4f:11:6e:1d:bc:c9:07:c7:6d:f8:
41:c8:16:c6:8b:e2:6f:33:80:29:aa:fe:94:98:f4:
bf:14:3f:86:33:5f:0c:b8:10:33:ec:93:9a:bc:24:
03:b7:c7:c7:11:1d:5b:82:49:bd:47:c7:2d:b2:53:
8e:10:63:10:58:92:f4:01:19:fe:d8:15:06:92:22:
96:93:52:46:72:ae:d9:6d:56:f2:94:5e:68:20:00:
e9:f9:9b:83:fe:ad:b4:1d:89:c8:8c:23:a8:7d:52:
4d:ae:02:41:b8:fd:42:d6:5d:bc:c1:15:bf:91:39:
53:d7:a3:10:4b:17:9e:c3:6e:98:8b:9e:47:60:da:
84:e3:c8:e4:85:3a:8c:32:00:74:04:f6:fb:ae:3a:
b2:dd:16:53:da:ce:f8:30:0c:f2:7c:79:c8:8b:ef:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:43:CB:2B:24:89:D3:76:7D:4C:76:03:87:F2:8E:2B:32:F5:82:D8
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1d:ee:a0:e2:df:a7:c6:53:e6:c9:79:45:32:70:89:d8:45:
d4:e2:b1:fb:b5:c4:7b:7d:d4:40:1d:4d:c1:d6:34:b8:ec:65:
6b:5f:a8:ea:ff:9e:61:f5:0d:77:b4:67:df:33:4f:ce:f9:a4:
a2:9c:d6:96:be:79:23:fa:e4:b0:52:cd:3a:73:a3:b4:ad:56:
f6:14:8a:50:4d:e0:22:a5:f2:db:c3:6a:d6:42:da:b5:54:a3:
fc:de:8c:2b:63:6e:87:0b:21:78:78:bf:ac:4b:18:97:4c:e6:
6f:fc:f9:b8:44:b3:40:b4:b3:2d:a0:ad:bb:dd:10:91:99:18:
47:90:06:14:66:6a:cb:b9:ed:d2:38:ee:63:79:dc:a7:59:ef:
e5:a4:b7:09:43:4a:f3:6b:c5:02:2e:61:1d:09:1f:19:fb:33:
75:dc:79:39:32:15:4e:68:56:40:2a:cb:1f:3d:ca:ae:36:91:
4e:7e:38:67:3f:a8:f6:b8:7c:03:0c:ed:9a:49:41:a9:11:5f:
17:9a:d1:72:0f:1c:c4:90:27:43:1e:51:91:51:63:02:fc:b8:
f1:8e:6d:87:9b:0b:80:b2:eb:72:9f:4c:06:36:78:22:c1:d0:
6a:a8:29:d9:c4:c7:e2:24:17:8a:2b:4f:76:85:6f:a4:8d:09:
5d:aa:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:04:20 2025 by rpki-client