Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: 3UDAgLD4BdDisCAKKXkZ3awR3Yo8LETe8SIOXujcXxE=
Subject key identifier: B5:56:90:AA:24:41:F8:BF:72:6D:A8:46:A6:D6:7E:99:9F:54:13:DC
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 01989712A8A4CA969D8D6E37E3EE538B9128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 03:00:39 +0000
Manifest this update: Mon 11 Aug 2025 03:00:39 +0000
Manifest next update: Tue 12 Aug 2025 03:00:39 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: LUiOwqavRZU9Yz/DnJA54tJMs36s8n4WoQjD+f3LNDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:a8:a4:ca:96:9d:8d:6e:37:e3:ee:53:8b:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Aug 11 03:00:39 2025 GMT
Not After : Aug 12 03:00:39 2025 GMT
Subject: CN=b55690aa2441f8bf726da846a6d67e999f5413dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:c5:78:b8:fd:c2:61:67:db:26:86:70:40:
b4:0d:7a:d0:89:97:49:a2:3c:ea:f4:41:31:bb:c5:
72:00:ed:5e:3a:60:9c:b3:6c:22:f0:56:c2:cf:82:
65:0a:6a:05:d6:67:d1:8a:01:e4:9d:8a:a6:ae:7f:
be:09:89:1d:c8:06:6c:5c:54:35:de:ed:d6:0d:ed:
1f:6b:8b:e0:7b:f6:9c:5f:17:33:e6:62:2e:28:9b:
75:24:7d:1b:57:f5:3f:2a:53:e4:68:4f:ee:43:0a:
de:b2:d7:6a:d5:2a:d5:6d:82:dc:1f:59:61:68:a8:
4f:15:b3:45:9e:e2:b0:14:be:d7:30:d3:de:4d:7b:
80:01:1b:a1:5d:18:cf:23:6d:f7:db:b6:4f:25:21:
de:40:5a:9c:d8:5e:b3:ee:ab:04:1c:9c:10:e3:ec:
fa:8f:e4:86:1f:14:75:79:aa:93:5e:93:97:f1:06:
3d:4a:06:06:df:28:39:45:f4:8a:79:35:fb:c5:e7:
02:57:e2:82:b0:67:da:39:e5:28:49:a1:81:58:10:
d5:4d:5e:98:2f:f6:db:ab:8a:8d:66:5f:15:9e:50:
03:a1:97:38:4b:64:95:ce:e3:7e:59:80:77:73:2e:
54:f2:c1:5c:de:14:87:32:9c:0b:09:50:93:67:e9:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:90:AA:24:41:F8:BF:72:6D:A8:46:A6:D6:7E:99:9F:54:13:DC
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0b:c6:d0:8a:9f:8c:b5:5a:42:41:0c:8e:6c:73:17:39:b9:
d9:1a:57:ac:65:d3:9d:aa:6b:21:16:54:47:9d:9c:59:e2:fd:
8e:19:9f:f9:64:e1:b3:c5:a4:c6:99:47:b2:cf:61:8a:dd:c3:
81:ce:45:6c:f8:25:55:26:b2:2a:bc:e4:e5:e5:09:35:b3:f7:
d1:c8:09:f7:1c:0a:60:22:46:54:c2:32:c9:d3:3d:63:5a:f7:
e3:62:67:29:0e:66:a4:52:ab:8f:68:05:fb:49:b4:03:85:01:
3d:1c:ba:22:83:30:83:ec:91:5a:44:95:76:c4:c1:91:98:82:
55:ff:65:15:e8:39:02:d4:e2:1d:6a:33:88:7b:79:a2:a9:b8:
c1:59:21:db:c9:b5:37:02:e6:6c:78:59:50:10:34:25:44:cc:
55:48:e1:4c:cb:6f:2c:a7:9e:ed:a2:a6:cb:99:e1:a4:30:eb:
33:9d:dc:8e:0b:b9:f1:a3:54:9f:a1:56:53:87:ef:75:7f:e7:
db:8b:08:a9:e3:d2:d9:82:4e:73:96:02:23:f0:67:04:5e:cb:
29:8c:7c:61:fd:88:04:e3:c4:18:04:20:86:00:d8:12:5a:35:
5a:44:8d:35:b9:87:7c:ed:8f:cc:b6:f4:b9:03:0c:37:2f:60:
0d:c9:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:09 2025 by rpki-client