Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: 2t1hM8wmzR6bhrSaQWJZtq44QyCYXoqXgR4d7lQnpEc=
Subject key identifier: CD:2B:D3:69:A4:C4:26:16:D3:7E:E7:96:FC:FF:C0:2E:56:C0:93:E2
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 01987418CCD722FF3AFBF3572EC5ED879F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 1383
Signing time: Mon 04 Aug 2025 08:00:38 +0000
Manifest this update: Mon 04 Aug 2025 08:00:38 +0000
Manifest next update: Tue 05 Aug 2025 08:00:38 +0000
Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: N3f/916B2IeKHJlGev5G1+ISTtPJu291PuD7HnrBjY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:cc:d7:22:ff:3a:fb:f3:57:2e:c5:ed:87:9f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Aug 4 08:00:38 2025 GMT
Not After : Aug 5 08:00:38 2025 GMT
Subject: CN=cd2bd369a4c42616d37ee796fcffc02e56c093e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:08:e6:fa:1a:89:a8:9b:86:df:4b:67:64:
4a:5a:29:cd:bd:0e:c6:7e:41:a7:b9:78:2a:25:8c:
de:72:e3:48:c1:ae:01:7d:83:07:67:11:22:21:d8:
53:2d:ac:4e:f2:4b:90:81:a0:5a:06:ac:91:eb:8d:
89:71:1b:9b:fa:f3:82:ba:d5:bc:62:8e:4b:2a:e5:
ec:88:34:f4:52:36:4e:ee:0a:97:1a:9f:a3:94:c9:
a2:ca:ca:8b:b9:0e:ed:87:7c:5b:d3:71:ef:43:ea:
8c:92:95:07:ae:81:75:35:a7:1c:56:ce:f1:24:32:
83:fa:0e:ed:ea:cf:e3:69:4e:a2:37:de:80:d1:c6:
10:5c:2a:cd:0d:85:3a:7b:ae:21:80:52:2a:2b:c0:
05:47:a0:e5:d7:a6:7c:b9:29:60:d0:1c:61:5f:79:
b0:21:7c:f9:b7:a5:cf:6a:f1:73:41:e9:95:aa:0d:
aa:e7:0b:00:04:79:8b:df:39:da:c3:09:d1:9a:b5:
e2:98:56:3f:07:43:19:4a:53:47:39:6b:f5:06:3c:
bf:27:ec:7d:6c:a6:ec:0e:77:c0:fc:43:45:99:66:
34:fb:a2:99:a0:10:6b:b7:c8:7d:fc:ff:ff:c1:ed:
c1:83:5b:a9:27:57:5e:08:74:7a:68:11:d6:c9:4a:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:D3:69:A4:C4:26:16:D3:7E:E7:96:FC:FF:C0:2E:56:C0:93:E2
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e3:bf:4e:d5:6c:6c:3f:0f:4d:d3:94:00:d7:54:b9:57:38:
a2:51:cb:61:e4:dc:c5:4d:b2:96:c5:89:28:e2:62:55:bb:e6:
9a:91:fb:23:18:72:6f:2b:45:07:42:22:b7:4e:ce:09:11:9a:
74:8e:f4:d3:8d:17:41:ba:54:69:ab:bb:f4:a1:a6:f7:a5:bd:
04:bd:51:c8:42:dc:ec:f3:c8:c9:53:92:c9:6b:f6:2d:f1:66:
e2:01:b3:56:d3:d2:c5:ab:29:42:ac:7f:f7:f8:ea:e4:14:d5:
42:2a:de:c9:26:92:5a:28:13:20:c8:fd:73:73:53:c1:bf:41:
1a:db:f3:e1:06:69:e1:4e:48:21:14:c1:fd:36:12:2f:a3:f2:
3a:58:9c:c5:98:de:1a:ab:8f:fd:3a:5d:dc:7c:b5:5c:13:5c:
92:19:4a:94:af:3b:0e:f9:13:ea:43:05:9d:ca:ca:30:b1:78:
83:95:ec:55:27:cb:69:d9:8a:b9:68:03:e6:4f:10:4c:bb:35:
33:d6:8c:4f:55:03:27:ea:46:12:cc:90:3a:37:7d:71:13:32:
4c:c1:f8:f4:8b:77:a5:60:e8:16:13:a7:e5:59:80:cd:80:e8:
b1:91:12:64:03:71:c5:15:44:55:99:f8:6a:5f:fc:aa:cc:d1:
79:fd:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:19 2025 by rpki-client