Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: ZAxSvtAZkzn/gj8EXQYzhABnCklLx1I5zZPOi0A46CQ=
Subject key identifier: AB:B2:04:BF:CE:72:96:3C:26:56:81:74:3F:D0:AF:2F:63:4D:04:9A
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 0198744FFD974C17A2BF7AAD1D0A3FEB786F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:00:55 +0000
Manifest this update: Mon 04 Aug 2025 09:00:55 +0000
Manifest next update: Tue 05 Aug 2025 09:00:55 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: oEHWkl/Oi6SkIwLAWWZbZiYJnLUlBwxIjNrP34cCxKc=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:fd:97:4c:17:a2:bf:7a:ad:1d:0a:3f:eb:78:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Aug 4 09:00:55 2025 GMT
Not After : Aug 5 09:00:55 2025 GMT
Subject: CN=abb204bfce72963c265681743fd0af2f634d049a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:b6:d3:40:ad:ff:97:75:d9:cd:77:63:b8:
dd:fb:a0:92:4a:3a:d2:9e:12:ef:9e:8e:c1:3a:1c:
c0:47:bd:67:40:86:b0:0c:ab:a2:f8:96:28:98:d2:
b0:1b:a2:ef:71:1a:94:c9:28:fe:c8:e3:de:22:83:
03:f9:4e:78:47:38:88:dc:97:2b:46:89:0d:7e:b8:
e5:7c:98:9c:b0:db:78:4b:68:aa:a8:1e:3a:e6:c5:
6c:20:ba:12:67:48:06:7a:a1:64:a6:1b:1d:8f:47:
c0:e0:7d:00:9f:cf:82:5a:df:ac:5d:be:ab:24:19:
8e:d0:46:19:54:8b:b4:8b:c9:e1:f9:be:d6:47:76:
d2:ca:4b:5f:28:13:53:48:0a:ab:c3:ac:01:32:8b:
29:9c:09:7c:ff:26:4d:6c:ed:b9:3c:65:6c:90:ac:
06:49:54:bc:e3:97:b8:3e:e6:46:3f:76:d5:71:ea:
d5:99:2d:ba:b7:f0:40:9e:fa:eb:9c:7e:fc:e1:36:
38:99:26:e8:da:77:e8:dc:44:44:37:68:5c:58:ff:
74:54:2f:e4:08:1d:b6:86:30:67:a5:05:c0:1b:0e:
47:73:68:d1:38:4a:f3:9c:52:e2:ec:48:a7:e8:5b:
6f:8d:31:ad:46:89:5e:a6:92:2f:f6:60:f6:a5:16:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:04:BF:CE:72:96:3C:26:56:81:74:3F:D0:AF:2F:63:4D:04:9A
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:33:7d:a1:e6:2f:d1:ea:bd:31:60:d7:02:f2:a0:9a:7d:
0c:88:7c:52:e0:ae:01:d1:37:a1:77:3e:4d:e4:c6:fe:d5:65:
58:b2:58:31:4e:f2:1c:9b:81:7e:21:1f:e3:5d:2f:72:84:fa:
95:e9:17:6f:65:a3:aa:9d:73:65:e2:27:07:2f:f8:a5:60:e5:
e5:ca:fd:c4:71:ac:db:6f:d2:99:47:e1:26:9d:d1:a0:f3:93:
d8:ea:c5:e8:a7:83:d4:7e:db:fa:3e:96:61:15:da:d6:b9:99:
73:29:bc:0c:b8:23:ea:5a:88:46:e1:64:a0:50:dc:2d:97:3a:
88:2d:98:77:c8:5a:58:ab:94:41:3b:dd:64:40:f8:ba:e9:06:
5f:cc:58:5d:3b:66:86:5f:1d:dc:fd:f7:e5:64:6e:7b:5a:f8:
99:06:68:7c:73:a4:d2:7d:02:00:c2:44:f1:39:86:6f:f0:3d:
1e:f4:4a:2c:36:84:62:ae:e5:21:6d:34:d3:2d:de:12:30:cb:
c0:b7:a9:2e:7b:13:b0:d4:09:1c:2e:34:43:c1:ce:8f:68:85:
5a:a1:06:00:8b:2e:4c:b2:17:51:79:11:95:c0:11:59:36:06:
ee:62:cf:5e:ba:1c:e6:87:da:a7:42:69:6f:a8:a6:b2:03:ba:
94:71:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:20 2025 by rpki-client