Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: cwo5ygU50JDP70oVi8Lvh+GT74TDWPEzrbt0TgzxDfw=
Subject key identifier: CF:79:26:B1:AC:3A:53:13:1B:BA:73:F1:D2:8D:F2:45:A0:24:25:D8
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 01988A6A4F8F90569116F92067A88DDE0788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 16:01:19 +0000
Manifest this update: Fri 08 Aug 2025 16:01:19 +0000
Manifest next update: Sat 09 Aug 2025 16:01:19 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: awUFh80uvXf59SectCygLpnPOpA+rAwQNqGYcmFzqlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:4f:8f:90:56:91:16:f9:20:67:a8:8d:de:07:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Aug 8 16:01:19 2025 GMT
Not After : Aug 9 16:01:19 2025 GMT
Subject: CN=cf7926b1ac3a53131bba73f1d28df245a02425d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:bf:8a:66:80:bc:c7:78:da:bf:07:bc:15:
97:7e:dc:a2:15:4d:2d:00:f1:15:14:1e:fa:d2:c3:
08:9d:1e:e0:c9:f8:7d:e5:67:c9:87:b9:b9:f5:37:
47:42:bf:15:2b:e8:0d:bf:75:c6:66:07:0b:a3:92:
a7:53:87:21:e0:55:66:6d:a9:f0:7c:ec:52:5b:71:
31:2d:32:62:ea:a8:de:17:68:03:b1:46:ac:6a:9b:
8b:6e:99:ca:d6:12:bc:93:66:b5:60:52:62:b9:d0:
1a:b8:6e:b9:78:74:86:76:40:f3:94:de:69:77:16:
03:2d:64:5b:d3:cd:84:70:71:44:1d:77:23:3d:8a:
5a:7d:20:8f:27:ad:88:df:ed:e2:01:de:91:24:f7:
b6:f0:8f:89:ca:b5:8c:bc:6e:34:9b:e0:c2:2d:84:
d1:fc:76:ab:66:52:98:c9:2e:5c:9b:bd:c5:8c:e4:
a1:a2:32:ff:e0:b7:9b:50:2c:d4:33:00:68:66:d0:
19:ac:17:1f:ac:a2:0f:a1:2f:d9:e3:ac:a6:f2:d7:
60:50:8b:a1:e2:9d:75:0f:61:fb:6d:62:c9:34:7c:
c8:5a:f9:61:45:09:2f:e5:a2:e9:99:83:40:b8:d2:
a3:f3:ab:2a:96:6b:e2:8c:b2:69:1b:e3:f5:b9:31:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:26:B1:AC:3A:53:13:1B:BA:73:F1:D2:8D:F2:45:A0:24:25:D8
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:24:8d:09:60:dc:ec:7a:f3:7b:58:8c:c8:3f:6a:48:54:a6:
cc:f3:9d:d4:d4:4d:e7:90:85:9c:81:44:99:f2:c3:20:f0:60:
53:8f:3d:16:a5:7a:e0:85:f8:13:78:06:b9:c4:01:b9:f2:42:
fe:2e:08:cd:d4:f8:5e:3c:0b:f6:d1:7d:af:7e:03:2e:66:6e:
de:26:c1:1b:91:9e:6b:5f:04:24:78:83:21:ed:a6:82:6a:87:
ef:46:39:03:b4:94:a5:a4:33:a4:3f:1a:4a:dc:19:4b:cb:ef:
cf:da:1c:26:e3:22:df:3e:0a:bd:8d:cc:75:be:f3:6b:31:53:
bc:e5:cd:8e:f8:dc:11:4a:a6:7b:bf:79:b1:14:0f:f6:15:cc:
2c:59:a9:a6:32:5e:c2:94:28:68:af:11:1c:82:14:46:d3:7c:
98:45:a6:49:f5:c7:7c:90:01:7b:33:66:61:49:fb:09:3c:3c:
4c:9f:27:31:b6:48:da:a4:8f:7e:01:f2:a0:d1:5a:27:14:29:
93:bf:94:17:fa:ce:d6:36:1f:37:fd:28:48:e5:33:d3:dc:0a:
7d:15:a6:5c:62:eb:9a:90:c8:00:59:6e:d2:f9:a5:5a:25:42:
a4:76:db:ca:b5:dc:d5:84:ee:04:c2:35:2d:56:dd:43:39:9c:
c8:e8:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:36 2025 by rpki-client