Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: Q9X10eT18ofRWlkUaCtSDWY7i7Z7uyc+1T+dMDhf3LU=
Subject key identifier: C8:AE:B9:E1:59:0D:2E:0C:56:76:1B:50:12:75:C7:6E:1A:45:B5:05
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 01989FA89EC221F11B48D38A03F69C05BE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 0518
Signing time: Tue 12 Aug 2025 19:01:24 +0000
Manifest this update: Tue 12 Aug 2025 19:01:24 +0000
Manifest next update: Wed 13 Aug 2025 19:01:24 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: fHXFtYnbSLZ1gn7isNOv-X6g-Vc.roa (hash: oCDSfP23EAfcpuHp3yCgmbR/p7P3oSuSoD6KDdGkf7Q=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: f+60WxfGIgK2TX4ssrgsGbqFG2WDmNVE6Pwyemce8fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:9e:c2:21:f1:1b:48:d3:8a:03:f6:9c:05:be:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Aug 12 19:01:24 2025 GMT
Not After : Aug 13 19:01:24 2025 GMT
Subject: CN=c8aeb9e1590d2e0c56761b501275c76e1a45b505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:fa:16:5a:d8:8b:71:49:95:e0:f8:32:6f:
91:e6:d6:cf:c2:9f:3c:20:1c:34:c0:6c:2d:f3:3d:
9c:68:20:d4:6d:63:4a:32:f4:7b:88:23:9e:45:37:
88:55:60:81:c6:73:03:df:8b:a1:57:72:73:ae:38:
c0:0d:eb:8a:3f:b8:16:d3:92:55:3f:06:d0:d0:78:
63:71:05:23:6f:3c:a0:d9:a4:f8:c1:2f:a0:ee:0b:
a7:f9:af:d2:23:cc:dd:07:eb:27:26:49:58:29:6c:
95:12:85:90:a1:0c:0a:a5:b2:54:dd:1f:bb:64:af:
6e:ec:b3:0b:b5:99:4f:51:1a:1e:8e:23:c3:b3:4f:
b8:13:7d:3c:8b:90:b1:c3:2b:68:48:09:94:34:6d:
04:ac:7c:7e:64:6a:c2:02:8e:78:a7:3b:89:7b:9b:
fa:2e:de:72:6d:ec:24:dd:d5:a5:f1:35:39:58:e9:
78:1e:86:7f:9e:e4:ab:ed:2d:e2:20:09:fe:e6:77:
11:3f:55:7e:a9:83:d4:e6:4d:21:73:b3:4f:ac:dd:
e4:f7:14:fc:8e:12:0c:43:24:78:a8:df:c0:4d:c3:
f4:cf:1a:89:29:8e:71:8c:21:6d:95:28:ac:e4:16:
8b:74:41:78:2a:7e:e3:94:81:4a:69:68:e1:fe:2e:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:B9:E1:59:0D:2E:0C:56:76:1B:50:12:75:C7:6E:1A:45:B5:05
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fc:23:cd:c0:3b:d8:ba:7c:c7:29:34:5a:6e:7c:80:27:c9:
dd:f2:dd:8e:d3:9a:64:2e:fd:21:43:d6:80:b1:d0:ca:2a:44:
3b:88:b4:36:c8:9c:c6:d5:b5:14:bf:05:36:61:a8:85:95:68:
30:b6:91:30:04:d7:a9:16:48:cf:20:93:38:de:df:30:60:3c:
3a:80:65:be:3b:4c:d4:17:ed:b1:ad:14:33:60:20:29:2f:24:
83:58:c7:e6:6a:d2:90:75:ab:c3:06:eb:28:2d:4c:7c:f6:7a:
66:03:ef:65:e3:5d:f4:51:73:85:b0:11:39:93:24:f3:f1:ce:
46:fd:b1:a7:62:0a:9c:bd:3e:42:55:33:36:11:bf:9d:e8:1f:
7f:8e:37:5c:f3:31:b1:ce:fb:da:a1:66:61:06:26:48:d4:71:
dc:f3:70:f0:b8:de:94:e1:4d:c0:1a:b2:67:38:6d:51:39:99:
62:89:23:66:be:90:42:4e:9b:7f:d5:c6:20:9d:f4:91:a6:f5:
5e:17:16:50:90:d6:4f:0b:f3:4a:2e:64:8c:81:f1:2a:87:7c:
66:47:7b:47:93:07:1b:cb:2c:35:26:18:06:1e:85:79:5a:da:
c8:11:58:7b:51:60:ab:b8:f1:29:0a:68:99:6f:9c:c6:04:4d:
df:56:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:35 2025 by rpki-client