Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: dOnBOFA1fA7gJk2h+/Ct0o4fmJguuSgxSiFoDSjqOik=
Subject key identifier: C0:8C:23:62:AC:68:2C:39:33:A6:2C:34:B0:60:ED:66:F1:28:02:7E
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 019879AE112A857A7ACF83FBA19FBF4E2F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 0F1E
Signing time: Tue 05 Aug 2025 10:01:47 +0000
Manifest this update: Tue 05 Aug 2025 10:01:47 +0000
Manifest next update: Wed 06 Aug 2025 10:01:47 +0000
Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: erVRAIz2R2o4OqJlJamowJESzLcqD1TCh/2OZQgnMfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:11:2a:85:7a:7a:cf:83:fb:a1:9f:bf:4e:2f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Aug 5 10:01:47 2025 GMT
Not After : Aug 6 10:01:47 2025 GMT
Subject: CN=c08c2362ac682c3933a62c34b060ed66f128027e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:84:e0:38:2a:4e:4f:f6:f7:bf:3e:25:fb:
c4:9d:35:c0:81:0f:7e:18:7a:a5:c6:5f:e9:85:0c:
06:85:d3:7e:c7:15:50:ce:b1:9e:ea:ab:12:83:d6:
df:ef:57:7a:93:f4:d3:88:b6:45:c8:7d:92:91:28:
17:e7:fc:41:32:2f:a9:f3:42:df:72:22:09:fc:45:
c9:cc:f1:55:a1:0d:f4:c6:d7:82:e1:5c:bf:4d:7e:
50:6a:46:a3:c7:91:8a:06:70:ae:55:e0:ee:7e:e3:
d5:91:4e:09:be:10:79:18:97:7f:f5:61:1a:3f:5a:
0a:19:98:c2:a7:c2:6a:0d:76:a7:d9:f5:2c:e4:bf:
56:b6:b9:48:a7:0f:cb:9a:3b:5e:65:ac:e2:55:13:
fb:84:0d:5d:36:56:e5:c9:09:5c:12:d3:ca:28:ab:
9d:52:40:d1:9a:ae:21:1c:86:ec:12:0c:8c:d6:67:
03:60:52:f8:3c:24:ae:3d:4c:06:c4:e4:1c:b7:77:
5f:df:cf:b5:31:32:b6:3d:44:c1:92:8c:d5:7d:03:
59:ff:7f:9a:34:cb:65:ee:c4:56:15:dd:c3:cb:57:
de:4b:c7:6f:31:a5:d4:a2:4f:00:ff:d0:91:5e:df:
2e:0f:83:d1:1c:07:4e:95:33:4d:00:82:17:4f:6a:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:23:62:AC:68:2C:39:33:A6:2C:34:B0:60:ED:66:F1:28:02:7E
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fb:be:f9:f4:e3:7e:ad:95:4a:dd:92:79:63:cd:70:ef:25:
b1:ba:f4:4f:48:75:ed:94:4d:ab:81:c9:ae:ba:7b:3a:81:b2:
5e:82:a1:ab:76:87:c8:91:20:fe:93:3b:c4:a8:63:8b:69:20:
5e:0e:fa:61:68:21:03:69:32:9b:64:04:18:fd:87:a1:4c:c7:
6e:c9:f5:5f:a5:26:ee:a9:2b:ae:eb:0d:bf:81:2f:64:2a:7e:
14:46:f4:a6:02:db:a7:74:4c:81:4e:5d:d1:d8:b6:40:81:ff:
f8:4b:47:db:17:e1:2e:a3:be:8e:ad:2a:14:6a:e0:43:1a:67:
6c:d6:34:67:98:9c:fb:c8:69:b2:2d:41:07:16:d3:54:04:dc:
e8:d4:55:45:b0:5b:bf:6e:ba:92:f6:4a:f0:23:02:f4:3b:83:
32:53:f6:53:2b:c8:4a:ea:83:c2:33:ec:af:ff:15:a5:4e:9d:
b5:15:ad:61:91:88:2f:a5:6f:33:da:4f:dc:ba:c8:34:37:39:
fa:4a:fa:be:2d:cd:bf:2f:5f:98:a1:39:73:a7:c0:e8:4d:ff:
dd:e4:a3:62:85:dc:fa:2d:de:32:9a:16:bc:1f:ed:50:19:6b:
a9:b3:9b:fc:fd:08:0e:07:ef:89:52:50:31:67:70:83:67:34:
2d:55:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:20 2025 by rpki-client