Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: Vq1SI9PNSMvUhmjLMWixElHOuq7zpb6Mnv2bD9VBdh4=
Subject key identifier: B3:07:14:E8:59:65:F6:0B:A1:FC:B1:D5:E6:3B:0B:FA:CF:86:B9:CA
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 01988F902E6031769609E0A9128E21135FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0EE5
Signing time: Sat 09 Aug 2025 16:00:47 +0000
Manifest this update: Sat 09 Aug 2025 16:00:47 +0000
Manifest next update: Sun 10 Aug 2025 16:00:47 +0000
Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: 0WF0MSfDrRNjrxyD494tW4p7nDm2pyv1ELJNJ2PGCzw=)
2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:2e:60:31:76:96:09:e0:a9:12:8e:21:13:5f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Aug 9 16:00:47 2025 GMT
Not After : Aug 10 16:00:47 2025 GMT
Subject: CN=b30714e85965f60ba1fcb1d5e63b0bfacf86b9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:91:48:ff:85:7b:7f:21:e8:bb:d3:a8:b4:
48:61:87:7b:e6:b4:78:ba:70:9b:5c:03:1b:71:fb:
f6:a1:62:6f:49:ee:40:84:a7:a2:8e:c5:ba:95:af:
e1:52:39:b7:b3:08:fa:0b:7b:04:29:3c:9c:f7:f4:
40:81:03:73:1e:65:51:d1:de:37:bf:3d:31:1c:a0:
c8:75:f2:18:6d:3f:1a:3c:81:ac:a7:a7:56:1b:2d:
7e:4d:19:0e:cd:af:7d:ba:9d:72:94:32:04:71:dc:
e9:95:61:7b:bf:e5:d5:c0:32:84:e6:9c:3a:57:8c:
9a:1f:12:a1:df:d3:f6:66:1e:5c:59:88:46:92:2e:
90:0b:30:65:ea:01:5a:fb:2f:ba:18:d3:81:ce:94:
0c:af:aa:e0:5b:f6:32:74:0e:eb:ee:70:58:d4:ca:
31:6f:ec:58:11:c9:1a:a3:5a:c9:f0:fc:18:20:dc:
3e:c2:61:bd:6c:11:e6:5a:ee:83:15:b7:81:e5:dd:
eb:1f:69:88:2b:80:34:7a:1d:61:6c:82:5b:1a:3a:
e4:96:f8:23:91:29:7f:56:c4:3e:b0:2f:55:06:6e:
42:d0:2e:e5:0e:f0:bc:53:67:c0:2a:94:9d:08:77:
9a:7a:0b:d7:58:a4:96:da:e4:7d:2e:a5:46:11:f8:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:14:E8:59:65:F6:0B:A1:FC:B1:D5:E6:3B:0B:FA:CF:86:B9:CA
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:77:ae:92:21:b7:1f:ae:d9:74:be:6f:ba:d5:6c:ea:1d:18:
a8:2e:d0:a8:31:9c:3c:c8:8b:23:81:52:97:ee:d9:e4:1d:ac:
58:9d:7b:f9:4d:0a:a6:5b:2b:12:ec:f6:57:5b:05:c4:b8:c9:
c1:fd:18:29:ce:7e:01:13:e8:33:01:62:29:b3:20:b3:b9:7d:
96:09:61:eb:80:44:ac:1c:54:55:7a:bc:04:ad:f8:0b:b0:05:
b6:bd:99:31:be:f8:90:d8:b6:cb:07:ff:e1:f0:12:ad:de:3f:
f4:35:8e:99:18:2d:87:ef:6c:6c:d2:9a:69:9d:75:65:51:d0:
60:7d:b3:ea:67:a9:bd:97:f6:fd:0a:63:91:44:32:59:da:11:
eb:00:2a:af:41:2d:18:f1:8c:b7:01:b8:b8:77:ff:a2:3d:d9:
e8:9a:01:92:21:19:fb:7f:cd:38:e9:2f:1f:92:e2:db:ce:2e:
b3:40:49:18:b1:18:e3:0b:78:60:33:a5:df:89:7f:47:dd:d8:
5a:68:38:0c:1a:93:78:fa:aa:28:1f:00:62:c4:78:6a:24:ec:
ba:cf:d4:87:6d:65:fd:a8:f6:71:cb:92:2e:d3:12:79:c0:96:
2f:d7:84:59:08:fb:d7:53:2b:47:cf:b2:be:0e:0c:8c:2c:bc:
87:f9:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:40 2025 by rpki-client