Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: zcLnZ9yXlmKCduahg7MDxnT2Ah4r2+SCpwlvqTY1xHY=
Subject key identifier: AA:70:52:6B:5F:15:DB:F9:2E:96:2D:6A:22:F2:30:9A:F7:49:64:64
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 0198960018E8FDB3ECA252671523655E9C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 021E
Signing time: Sun 10 Aug 2025 22:00:45 +0000
Manifest this update: Sun 10 Aug 2025 22:00:45 +0000
Manifest next update: Mon 11 Aug 2025 22:00:45 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: CvJjp6CoufAqVzZIouaAuIHvR9CNqTP5yGiH17vNZLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:18:e8:fd:b3:ec:a2:52:67:15:23:65:5e:9c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Aug 10 22:00:45 2025 GMT
Not After : Aug 11 22:00:45 2025 GMT
Subject: CN=aa70526b5f15dbf92e962d6a22f2309af7496464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:85:11:10:00:1f:84:6e:32:ac:e0:bd:48:
06:68:13:02:00:3b:4f:1d:f1:66:ff:41:a7:9f:30:
34:46:8d:99:0e:55:f9:2e:58:24:d6:47:af:ce:b6:
4c:ad:d8:92:a0:63:94:a2:b8:f6:3d:4b:98:2f:d1:
9d:89:f9:a3:2d:8c:46:d2:24:93:15:87:e0:2a:39:
51:fa:17:3e:d8:52:86:3f:96:74:35:33:84:a7:0c:
56:48:96:03:33:b2:82:a8:ff:fe:0b:3e:f5:93:29:
96:8d:0c:a5:42:a7:7f:da:7d:c2:ba:fe:3d:52:e4:
f7:ad:65:e0:c4:6e:5a:c9:bd:2e:ed:87:70:00:5f:
af:2f:4f:e9:08:47:33:b7:7b:17:3a:e2:1d:ab:a7:
4b:c1:5d:b7:87:17:80:94:78:c5:30:03:55:9c:24:
6c:ad:e1:eb:e1:c8:fe:ae:22:a6:e3:52:98:fd:6c:
f6:5c:2e:a7:9b:77:4f:61:1b:6f:0e:57:bc:96:be:
c9:82:b1:e1:bc:a5:66:91:6c:c4:52:42:73:50:c9:
8a:ea:08:9b:ab:51:ca:7d:9e:e8:77:a3:0a:6f:86:
52:97:57:bd:b1:61:45:63:4f:e0:f4:b8:a2:5d:fc:
6b:35:d2:f7:81:49:d5:7a:e8:6e:c0:ff:57:39:01:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:52:6B:5F:15:DB:F9:2E:96:2D:6A:22:F2:30:9A:F7:49:64:64
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a9:bc:ce:86:4e:c7:97:97:ee:d9:9f:95:09:67:bd:bc:e3:
60:4d:c8:64:bd:96:41:dc:13:23:b0:3e:0c:3a:cd:69:6e:f4:
80:26:c0:80:6b:4f:2e:3e:18:e1:a6:9a:2e:19:43:52:cb:b1:
1b:33:e2:87:15:0b:1b:fe:b9:56:f3:7a:83:05:75:ba:e4:66:
47:ba:1d:1e:bf:30:ce:b6:6b:9f:55:90:7d:9e:31:1d:b0:aa:
87:15:c6:38:bc:20:6a:45:f1:a4:b1:73:a3:e9:7f:e6:30:06:
7c:21:9f:99:a9:1d:f6:ce:91:58:7f:0c:73:6a:a7:6c:3a:70:
02:1b:36:fc:85:43:a2:35:1d:42:fa:fd:f7:d5:8d:8d:20:b6:
66:c8:d3:bc:26:74:cb:5e:71:bc:5e:46:05:b5:cb:f9:35:de:
60:9f:db:84:a2:d1:19:23:96:3a:11:76:7f:a9:ff:3f:d8:62:
85:53:7e:4e:b5:b2:2a:f5:17:12:a2:4f:62:d6:e2:7d:85:99:
13:bd:4b:57:06:4f:39:ea:2e:aa:36:96:0a:16:81:33:64:e6:
84:50:b1:8a:fb:7d:8f:7d:15:bc:a0:fd:42:9e:82:2b:06:db:
ff:90:de:19:4b:a5:73:e6:08:f3:0b:03:4b:49:d1:fb:c9:03:
5a:81:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:29 2025 by rpki-client