Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: RzAhgRDO0BqvrgbBGRtc6ILwunq0YLZHvRYxVvW3/cY=
Subject key identifier: 86:23:C9:D6:22:13:9C:06:63:56:F2:36:27:5E:86:F3:29:98:98:CC
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 0198A08451A3F95AFF398004E1F814D80EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 162E
Signing time: Tue 12 Aug 2025 23:01:22 +0000
Manifest this update: Tue 12 Aug 2025 23:01:22 +0000
Manifest next update: Wed 13 Aug 2025 23:01:22 +0000
Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: c69QaNTvQSm3ZHAZBUPkB/SD1B6uYEJAm9Krbnpt6QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:51:a3:f9:5a:ff:39:80:04:e1:f8:14:d8:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Aug 12 23:01:22 2025 GMT
Not After : Aug 13 23:01:22 2025 GMT
Subject: CN=8623c9d622139c066356f236275e86f3299898cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:1b:93:d2:5a:6b:a8:92:a8:46:bd:c8:6c:
8c:47:b1:b3:88:12:c7:83:35:cf:5f:b0:16:dd:ad:
bd:a6:17:83:e4:96:47:f1:04:76:2e:83:87:41:7e:
5a:ef:91:ff:35:f0:a8:02:68:a2:77:bd:b9:0d:13:
cf:52:7f:98:a5:f7:36:17:e4:ee:49:a9:eb:69:73:
71:20:55:d5:e6:21:b0:94:b0:2e:88:4e:a6:2b:a6:
be:fe:c5:27:9e:2b:11:e2:e7:bf:92:c4:cd:0a:7c:
88:97:43:bf:74:98:c8:7b:a2:8a:7d:4a:a9:bf:67:
e4:94:ee:58:0a:02:d0:c7:5f:0c:cd:70:2f:74:fe:
23:a6:86:75:3a:8e:df:09:bf:cf:c2:24:46:a5:0c:
2c:5c:ff:98:f9:10:c4:a2:f6:13:8b:29:6a:5d:10:
72:0d:50:5b:65:0e:66:d2:f3:13:4e:f3:4b:26:ba:
1b:84:f7:f9:63:bb:72:4d:b9:f3:b6:74:a8:9f:0c:
28:4c:3e:8d:74:c0:d3:90:43:48:99:ae:6c:67:88:
bf:29:a5:f6:d6:74:df:fa:29:d9:c5:7a:04:e2:b9:
51:15:07:5e:40:51:98:e7:24:ed:e9:36:82:8b:0a:
d1:42:53:5b:51:6b:df:ee:b9:93:61:78:6b:42:0a:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:C9:D6:22:13:9C:06:63:56:F2:36:27:5E:86:F3:29:98:98:CC
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b8:02:e4:5b:a6:1a:59:93:3c:89:2b:20:f0:b3:b3:1b:ee:
80:7d:aa:ac:1e:38:25:b1:c8:47:c1:d3:9b:ed:2b:06:ff:c5:
52:55:b8:60:ec:e2:03:3c:3a:ad:ff:c7:91:04:3e:15:9f:f4:
7e:63:c5:81:cb:f2:a1:34:5c:7e:a2:42:16:44:91:d3:b4:3a:
1c:3e:03:52:c3:38:d4:16:bc:6d:ca:9b:43:7e:9b:f5:c5:70:
7d:ea:9a:04:76:a4:72:d5:df:23:87:c8:e0:4f:1c:fe:49:8b:
68:93:2a:c6:43:82:cc:33:af:fe:27:a7:d8:5c:17:64:bf:31:
2c:00:22:bc:1a:ff:6c:42:ed:83:ec:e4:81:b1:b5:2c:67:4f:
fd:53:8e:ba:41:4a:9d:41:68:37:8b:a9:2e:00:84:5f:6b:31:
c7:b8:2c:ab:d5:25:a5:39:26:21:4a:40:6f:67:c9:39:1f:42:
1b:81:c5:ee:14:c5:3f:52:01:9e:36:c9:a8:61:ee:96:5e:e4:
ef:8c:7b:d6:25:91:9c:76:c9:88:55:71:ef:5f:ac:d9:76:73:
97:e6:a9:8d:7f:bb:96:97:75:2d:11:93:f0:6b:96:e3:9b:68:
28:0f:13:ae:9b:e5:46:e3:29:43:82:66:ab:36:9b:08:62:14:
59:ea:a0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:38 2025 by rpki-client