Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier: HRRsRGp0bZ2BMqiSKQQplkL2SHagfwax5Ico+MK2MEU=
Subject key identifier: 65:31:35:B0:40:B2:1B:9D:85:1A:CF:21:E0:AE:2F:91:B3:A6:20:C5
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 01988BEA887C7A8246FD554F9D9EB27490DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number: 0DE5
Signing time: Fri 08 Aug 2025 23:00:59 +0000
Manifest this update: Fri 08 Aug 2025 23:00:59 +0000
Manifest next update: Sat 09 Aug 2025 23:00:59 +0000
Files and hashes: 1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: ipsQiUVmwilYSZjrekF+jCaPkc6q/XGvFOHhwZNdJPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:88:7c:7a:82:46:fd:55:4f:9d:9e:b2:74:90:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Aug 8 23:00:59 2025 GMT
Not After : Aug 9 23:00:59 2025 GMT
Subject: CN=653135b040b21b9d851acf21e0ae2f91b3a620c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:11:f7:2b:e7:f0:26:46:d2:82:30:a4:ef:
3d:5e:a4:4f:a4:4f:a3:fa:9f:9f:0b:2b:5d:2b:50:
69:3d:90:d4:3a:c1:52:7a:ac:64:15:95:26:04:32:
c1:4e:23:68:c5:f6:96:0b:6d:98:56:3f:aa:31:d3:
e3:80:ca:cb:ef:4d:86:30:0a:c3:2e:1b:e6:d5:6d:
a4:fd:f5:f3:10:8a:4f:67:49:c7:42:a7:a8:21:4f:
ce:8e:32:51:22:4f:cb:c6:df:76:54:a3:0d:bf:9b:
42:f9:2f:e8:0b:75:94:6d:93:b2:ea:d5:98:b5:9b:
6e:d5:a1:da:0d:29:86:e5:59:ed:a1:c5:94:29:95:
fb:4c:85:70:fc:5c:1f:67:9d:f5:b9:de:6e:94:8a:
54:a0:ac:44:bc:7d:2e:81:28:94:3c:7a:bf:b7:bf:
22:e1:02:e2:ff:a2:07:20:3e:f6:82:57:61:ae:4f:
b1:0a:fb:96:ba:61:e1:9b:5f:d3:d8:26:82:bd:63:
6a:8f:43:9d:b5:1b:3b:30:e9:66:52:4b:50:18:d9:
c7:5d:da:a0:d1:c3:85:57:b0:91:9d:0c:44:3d:63:
b7:0f:72:b7:26:c2:19:07:7d:72:55:06:ad:7e:de:
e8:50:e3:29:64:d2:6d:f1:b0:27:6b:8c:4a:c9:6a:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:35:B0:40:B2:1B:9D:85:1A:CF:21:E0:AE:2F:91:B3:A6:20:C5
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bf:66:02:13:99:b8:17:5f:0e:88:55:ba:27:36:91:3d:07:
46:c4:27:e0:96:99:da:31:da:16:bd:47:e8:b5:2e:5d:c8:45:
c5:a8:d5:c8:af:51:d9:d4:7f:9d:76:2e:7b:d9:2c:5f:32:e3:
a8:dc:60:39:13:4f:74:b2:34:6e:c8:42:3b:f9:f5:fb:e7:93:
78:79:5d:45:0a:62:4d:cb:5f:6f:d4:ea:2a:90:66:65:ba:f8:
15:91:53:df:38:b5:d6:0d:9d:9f:03:d9:60:b1:c4:ce:f8:8a:
d8:db:6c:1e:dc:0a:7f:9e:3f:cb:5c:29:0a:18:cb:1a:ec:68:
4c:6e:4d:d7:41:d6:6c:2e:2b:5b:6f:47:14:c1:ab:07:69:fc:
42:85:49:b1:30:2b:62:8f:f1:9e:a4:a7:af:ed:9d:4f:dd:43:
08:98:9b:2b:d9:f2:1e:d8:4f:c4:c3:69:9a:db:9d:21:55:4a:
80:61:d1:12:70:fe:a0:19:fe:14:ab:d0:03:fa:1b:28:00:cc:
53:7f:13:4f:2a:15:67:d3:d4:d1:7a:69:63:ac:50:5d:fd:97:
96:b2:91:ea:c0:01:e9:a2:7e:5d:42:fe:0a:87:91:c9:cd:b0:
cb:eb:fd:3f:2d:dc:e8:e3:d1:6a:9b:a7:6e:63:39:fb:ad:70:
d0:1f:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:16:42 2025 by rpki-client