Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: mHzaP60/2/Z0TFU66QkgloeGaX7lTWqAgeN39HziKvY=
Subject key identifier: E0:F5:2F:32:CF:56:7D:9D:93:14:C9:07:0D:16:54:BB:4D:F3:12:F7
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 01987D89B1DB6906F5306049A6BB3FD2CB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: 0144
Signing time: Wed 06 Aug 2025 04:00:32 +0000
Manifest this update: Wed 06 Aug 2025 04:00:32 +0000
Manifest next update: Thu 07 Aug 2025 04:00:32 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: OGt8vYbftAVIAGhySxc+M5vLszEGBZ36Fl6d5hzY4ZY=)
2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:b1:db:69:06:f5:30:60:49:a6:bb:3f:d2:cb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Aug 6 04:00:32 2025 GMT
Not After : Aug 7 04:00:32 2025 GMT
Subject: CN=e0f52f32cf567d9d9314c9070d1654bb4df312f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:b4:90:1a:93:aa:ca:d5:b7:ef:b0:dc:0b:
53:4a:67:73:af:66:e2:af:1b:4e:9f:71:c5:f4:0e:
48:64:17:8c:f7:dd:eb:ba:db:c0:93:3c:dd:d9:07:
83:44:d9:a0:6c:8c:b9:7a:5f:3e:1e:a9:af:e8:34:
6b:69:97:c2:7f:9f:33:e7:15:ca:81:5d:2e:6d:83:
a3:03:78:61:f3:77:d2:0c:35:4d:84:48:69:b4:e7:
88:62:a0:f9:2f:4e:00:b1:6c:fc:e8:08:ac:95:59:
65:ab:5d:7e:62:74:55:82:e3:ad:ba:f1:53:52:c2:
c1:2c:86:dd:b8:60:e1:16:54:9b:81:bf:0f:66:21:
a1:71:56:ec:de:47:90:11:d1:99:67:69:f3:d2:18:
49:87:18:81:1f:e3:de:f8:e0:c7:3b:01:9f:cf:d2:
75:ed:d0:f9:53:8d:ed:9a:99:a7:ce:a6:29:8c:29:
df:39:ff:de:6a:e6:68:9d:31:bc:a5:da:3e:f6:d3:
8a:ec:aa:87:09:55:41:96:f3:d4:1a:72:3e:33:98:
1c:7b:c1:a2:7e:69:9a:84:87:b6:04:d5:6a:c5:4c:
1a:4a:11:65:8b:d7:03:89:88:a4:22:81:50:12:78:
33:e1:ac:9d:64:f5:e3:b9:fe:80:cd:3b:d2:14:fe:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:2F:32:CF:56:7D:9D:93:14:C9:07:0D:16:54:BB:4D:F3:12:F7
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:32:95:42:91:ce:eb:6d:62:cf:85:18:94:6c:a5:f2:96:
98:4f:01:94:f1:99:4b:61:6c:ce:cc:46:2c:15:98:20:da:40:
8c:8b:a4:57:26:33:cd:39:9a:82:d1:9f:13:3a:47:57:3c:1d:
74:c2:aa:6e:64:59:6b:c8:6e:41:ef:7e:2f:bf:75:38:8b:41:
29:e7:ad:6f:13:df:48:e6:0c:22:42:61:de:bf:dd:18:d8:ee:
1c:8c:ca:ee:f7:6d:9f:f0:75:65:0f:89:5f:09:ee:a2:8e:cc:
d9:b9:d7:cd:25:e4:e9:6f:30:5f:c1:b4:d2:2e:b4:c2:47:41:
a8:ce:29:ba:47:e8:5d:ed:8f:66:49:f0:e6:42:66:55:46:c5:
41:e6:b3:74:85:8c:47:3d:88:17:84:60:9e:97:f0:1b:6f:e3:
c2:d2:df:28:ea:5c:05:f2:39:ab:2c:1a:cc:5f:a7:bc:ef:7e:
5e:8d:0f:0e:c3:40:d0:1e:cd:bb:49:90:96:44:73:92:1b:33:
90:12:83:11:9b:b1:43:e2:50:cb:2e:63:3d:7f:0e:01:92:59:
6c:4e:bf:a7:cc:26:d1:27:db:9e:a9:09:8e:de:6f:90:df:76:
22:71:20:82:72:57:e4:da:9f:43:4f:57:85:1c:93:9e:a9:43:
ff:d3:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:53 2025 by rpki-client