Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
File: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft (raw, json)
Hash identifier: r9ouShm4ylLqYJ6DW9lL4MI9Z452z5G0lNGnpPBCuTQ=
Subject key identifier: A8:AD:CB:64:86:38:E0:FE:E9:8D:08:B7:C2:47:76:16:84:48:BE:86
Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Certificate serial: 0198733D7945FF314193B0888EC8B2D16DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
Manifest number: 140B
Signing time: Mon 04 Aug 2025 04:01:05 +0000
Manifest this update: Mon 04 Aug 2025 04:01:05 +0000
Manifest next update: Tue 05 Aug 2025 04:01:05 +0000
Files and hashes: 1: mB80WkYR6rBTCDx0gQ2chGJdLnE.roa (hash: qRYzeQ2/WDuNAMTY5dvhhEeLgdI0eFd+WpvXt01kHZI=)
2: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl (hash: dbp7Q/oclHgCTrMi8bqJ0beEI3ChsgBjmFBJDJF+nBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:79:45:ff:31:41:93:b0:88:8e:c8:b2:d1:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Validity
Not Before: Aug 4 04:01:05 2025 GMT
Not After : Aug 5 04:01:05 2025 GMT
Subject: CN=a8adcb648638e0fee98d08b7c24776168448be86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:c0:ec:c8:b3:d4:f8:cc:a7:dc:09:f1:35:
e0:7a:09:c2:c4:19:76:96:1f:3f:7d:e0:4c:f0:49:
9a:3e:39:02:45:15:6e:75:31:21:96:df:4c:a7:b0:
9c:b9:7d:bb:5f:84:42:ad:b3:71:55:54:13:a2:2d:
f9:4a:d7:61:30:db:75:99:4b:9a:8f:4e:42:cf:1a:
ab:64:2f:2b:0a:ec:5b:85:c6:aa:9e:2b:f6:27:7f:
c7:61:3e:67:8f:21:89:f8:7c:26:de:be:f2:89:cf:
41:d6:4a:65:12:e4:42:7c:bc:68:95:70:5c:59:08:
be:6a:db:8b:5b:49:5c:b6:e0:34:65:1c:2d:69:ad:
7d:5a:b1:15:33:51:15:c4:5c:d0:44:a6:f2:d8:3e:
57:27:21:8b:58:8a:2f:af:89:4c:f5:d7:89:74:2d:
4c:72:0b:92:dc:35:d1:fd:ff:31:8b:3f:a6:a2:0d:
60:cf:aa:46:0c:16:20:f6:20:18:ee:fe:e6:f8:14:
6b:df:bc:dc:fe:b7:a0:93:91:3b:3d:0b:7d:08:df:
b4:74:cb:e9:c5:06:d9:4c:c6:07:9c:6a:82:4b:30:
9a:ce:d9:66:70:81:ad:91:75:f8:51:c4:68:b3:7b:
a5:53:c1:97:ed:f4:87:05:24:7c:e1:74:4a:d8:80:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AD:CB:64:86:38:E0:FE:E9:8D:08:B7:C2:47:76:16:84:48:BE:86
X509v3 Authority Key Identifier:
keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2f:5c:59:5b:53:95:8c:6b:51:bc:81:1d:cd:fd:fb:1e:58:
96:50:a4:56:f6:d4:4f:62:ab:34:34:be:16:e4:d5:39:9f:27:
e1:7d:de:98:ec:a5:4a:6d:85:84:e0:97:5a:30:bb:33:f6:3d:
d8:f6:6e:9e:23:8c:b6:1c:18:27:7b:40:5d:ae:cc:f6:95:a4:
a9:16:d5:f5:ac:0a:2e:2e:6c:ca:85:b5:b5:2e:0b:99:22:72:
e6:46:96:b9:57:d7:c1:55:64:46:19:12:8c:47:82:6a:1d:98:
02:e9:b9:24:c2:5d:59:17:b5:81:75:b5:ba:16:a6:dc:8b:72:
11:52:f1:c1:a0:9f:1b:ad:f7:31:20:aa:32:54:ed:72:0d:26:
d8:99:2b:c2:06:96:66:2c:4c:b4:6b:1e:3b:03:a0:f7:11:41:
5b:56:71:79:ab:b9:21:0c:bd:c0:b2:60:7e:2b:50:7a:91:b3:
7a:82:cc:3b:50:44:2b:56:4d:df:80:ab:22:fe:9b:2a:13:0c:
7c:1b:ad:d1:df:70:26:c2:31:0a:12:2c:00:db:49:b3:62:f5:
79:e6:f7:19:1b:ac:26:98:f9:67:0a:90:46:37:df:90:04:10:
1c:5f:85:0e:a2:76:90:fb:d9:b4:d6:19:b1:5a:61:74:a0:06:
5a:ca:76:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:37 2025 by rpki-client