Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: PqLGPotktfejjpI7mmVzCDZwCuKRDkw+qMaIxVZu1qA=
Subject key identifier: 71:2B:81:BD:81:C2:69:71:E0:74:DE:5B:66:32:E0:22:B6:50:8B:E7
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 01988F22183D92382FBE27632AAEBB534E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 101F
Signing time: Sat 09 Aug 2025 14:00:32 +0000
Manifest this update: Sat 09 Aug 2025 14:00:32 +0000
Manifest next update: Sun 10 Aug 2025 14:00:32 +0000
Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: 19pPQKUgqXU9B6fgv+y9uoKbA5OEGgHWG32WJnQdsxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:18:3d:92:38:2f:be:27:63:2a:ae:bb:53:4e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Aug 9 14:00:32 2025 GMT
Not After : Aug 10 14:00:32 2025 GMT
Subject: CN=712b81bd81c26971e074de5b6632e022b6508be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:19:0d:9f:5e:db:ae:f1:a0:8a:a4:9d:db:
a4:be:82:f7:da:0f:b2:40:16:1e:a7:e1:fa:43:58:
5f:33:e9:9c:a9:ca:24:db:59:24:67:63:d2:ea:f3:
99:85:91:0b:70:b0:1a:3c:08:4e:23:c0:57:84:d7:
c2:f0:7c:48:76:62:f2:6c:21:91:f0:14:e9:43:c1:
a1:2a:1d:bb:11:6d:f8:47:99:45:d2:37:89:be:05:
c8:93:9e:bb:3a:22:b2:26:a2:9e:d1:2a:d8:ef:e1:
73:4d:c4:64:e5:85:69:c3:bf:9f:82:6c:be:e6:c1:
8c:99:bb:d7:25:b0:34:b7:05:6b:36:e9:5d:f4:33:
28:9f:d9:1e:4b:f2:29:54:20:f3:43:5f:78:32:75:
23:e3:8d:ad:93:fe:b3:56:5d:75:25:e3:55:ea:61:
e4:61:2f:71:f4:4b:2b:a1:f1:4c:90:ab:38:b1:88:
30:34:96:ea:95:2d:72:11:bc:48:cf:a5:9b:50:e9:
15:02:6e:29:31:ce:e7:b4:37:7c:b2:d4:db:5d:d7:
b2:a2:49:94:37:90:7d:7d:1f:1d:d0:23:24:b2:84:
bf:56:78:59:0d:3f:4e:07:da:22:3f:75:be:50:dc:
4b:ab:08:2a:cd:af:9c:f3:06:10:bd:3a:18:d0:b3:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2B:81:BD:81:C2:69:71:E0:74:DE:5B:66:32:E0:22:B6:50:8B:E7
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1c:34:9e:44:c6:57:46:6d:27:76:25:45:f4:07:40:67:11:
3f:63:71:3d:e7:fe:d0:7b:24:1b:b6:b3:a6:30:f2:3e:50:e7:
74:ab:99:e2:51:fc:37:b0:d4:20:ce:2c:1c:31:d3:d6:db:3a:
c5:3a:e7:a2:92:24:7a:77:3a:72:45:80:c8:36:54:1f:a7:f8:
5e:5f:e3:1f:4a:59:b5:23:61:01:55:a7:b5:85:73:97:55:ab:
e4:8e:a7:ad:b6:8d:32:57:8b:c7:28:62:47:6b:0c:16:58:0f:
4f:e7:56:31:a3:b4:22:98:96:a2:8f:61:1a:27:03:d5:c9:94:
52:79:ef:62:8c:ad:c4:d9:45:e8:31:54:1c:ba:1e:2c:76:c2:
14:7b:5e:17:25:5e:16:31:e4:ce:45:82:4c:eb:df:72:8b:19:
59:9e:58:b9:9a:a5:a1:b9:89:7e:e4:f0:ad:4f:a6:f4:e6:b7:
ac:a7:8e:8f:01:fe:9d:f9:6d:fd:aa:2b:3b:31:3b:dc:2f:a0:
16:86:e4:51:38:d2:76:e6:29:73:b8:aa:b9:8c:1a:f7:da:00:
d6:f0:62:ad:a8:c3:83:19:56:51:f5:60:84:1e:2c:62:41:ba:
9b:04:02:f6:c9:a9:07:f1:9f:d1:d0:5f:a9:2e:b9:71:84:3e:
3c:77:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:07 2025 by rpki-client