Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: 9GYFPObSPY+wV9j30B4pnIgQFysu8a5G6cq6Lziyczo=
Subject key identifier: 7C:8F:93:D4:F6:9B:53:78:B0:6C:D8:D8:F2:BF:A9:E2:B8:8E:DC:25
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 019891476B38A681ABB42470E32811E14E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 00:00:33 +0000
Manifest this update: Sun 10 Aug 2025 00:00:33 +0000
Manifest next update: Mon 11 Aug 2025 00:00:33 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: axEKPXO/PZqt19rYnLEnrxcPaO40knxTDSIC5iJxyVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:6b:38:a6:81:ab:b4:24:70:e3:28:11:e1:4e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Aug 10 00:00:33 2025 GMT
Not After : Aug 11 00:00:33 2025 GMT
Subject: CN=7c8f93d4f69b5378b06cd8d8f2bfa9e2b88edc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:8c:17:f2:84:63:f3:d8:73:72:fe:4e:0e:
ba:b0:1a:dc:83:6a:21:aa:de:33:22:45:da:30:24:
b7:f2:de:92:86:dc:5d:bb:c0:49:9c:f4:d5:cf:62:
e8:92:d3:b5:8d:79:25:51:5c:84:59:0b:70:cd:bd:
e8:21:8a:bb:c0:09:8b:d6:83:eb:61:1f:5d:96:68:
7a:e0:ce:7a:09:86:28:41:5d:c8:9b:39:46:cf:de:
6c:20:44:a9:2e:31:75:62:1a:7d:78:d2:6b:33:ba:
7c:c8:79:1d:c0:9c:b7:24:df:8f:b7:ce:12:83:cb:
68:1e:eb:9c:56:2e:c1:c6:a6:57:a3:b8:f0:3a:36:
cb:ab:08:4f:82:42:c5:fb:04:10:1a:62:57:48:64:
b9:6d:d0:5a:ab:05:d2:69:ae:fc:58:45:11:7b:89:
d0:71:2a:b4:f6:53:f0:85:ea:a9:d8:5d:07:0b:73:
69:3f:0a:56:16:64:27:d7:eb:36:39:c6:a6:68:cf:
dd:71:5a:c0:1b:a7:94:9e:87:22:36:53:ea:8b:e5:
11:89:3c:d5:01:f9:5b:36:9c:68:f6:14:14:04:13:
ae:f1:3d:4b:f9:2f:b8:bd:01:2d:a8:e5:fb:fe:ca:
58:99:43:50:47:4e:6e:fa:50:b8:bc:f6:e9:78:12:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8F:93:D4:F6:9B:53:78:B0:6C:D8:D8:F2:BF:A9:E2:B8:8E:DC:25
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:90:86:ed:b1:9f:5a:fe:59:d6:f6:1d:d7:ae:e9:91:5d:a0:
fa:25:29:0a:5d:04:e9:cd:61:7f:eb:59:fb:54:82:23:43:3b:
1f:08:4a:18:10:ba:95:83:c6:58:9c:42:2a:ac:89:d9:7c:7d:
10:15:a0:15:68:17:c0:59:98:9b:a2:0a:01:5b:4d:45:7f:1b:
b9:90:2c:36:99:80:13:fc:31:d2:09:1b:fb:a8:37:13:f4:79:
56:ca:8b:71:b4:be:a8:14:4f:cb:c0:c5:2a:a7:a9:4b:0b:b1:
4a:8a:64:40:a8:6b:bb:e4:9a:ea:db:5f:12:c3:e2:53:23:90:
5a:5f:f6:a5:94:8f:6d:1a:5d:46:89:4a:d9:34:6f:26:41:e8:
21:88:06:5e:cf:a0:52:55:3b:07:86:8c:93:38:c6:77:32:4d:
fc:18:70:e2:40:16:0a:6e:ae:73:27:3b:28:d7:d7:dd:3a:25:
a6:20:d5:eb:cc:6b:ec:ca:cf:d4:62:93:f9:c2:24:97:e8:4f:
28:6e:08:b1:e1:98:d9:44:77:a0:27:e7:dd:8a:f4:23:d8:c4:
67:1f:53:a0:16:21:f4:83:c8:56:7e:19:75:2c:7b:42:9e:d4:
d9:d1:c6:36:20:c8:08:d7:c1:a2:c2:a8:99:b7:4c:c9:e4:58:
a0:d6:bd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:51 2025 by rpki-client