Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: ZvTwTePR6DGv1C9WX72WcsZ/YSCG9D/Vd0HilSNk3Vg=
Subject key identifier: 23:3D:A8:25:2F:67:72:AC:BA:7A:8C:79:62:CD:F4:FD:0E:E4:C1:9E
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 01987DF83671A23F0F7C0307BD298B3EF10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 06:01:15 +0000
Manifest this update: Wed 06 Aug 2025 06:01:15 +0000
Manifest next update: Thu 07 Aug 2025 06:01:15 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: CO9PCQz9cvXzWAk6NAKPDF61bmOiX1bJdZ4JmNIupr4=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:36:71:a2:3f:0f:7c:03:07:bd:29:8b:3e:f1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Aug 6 06:01:15 2025 GMT
Not After : Aug 7 06:01:15 2025 GMT
Subject: CN=233da8252f6772acba7a8c7962cdf4fd0ee4c19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:c3:c1:bd:be:76:e3:47:9e:9a:c4:c3:7e:
d9:9e:d0:35:2f:b1:48:60:4e:d3:00:59:4b:af:14:
58:c1:6e:48:6a:cd:4f:fd:39:5d:7a:59:8f:3a:2b:
aa:d7:85:c6:d3:3e:ca:21:87:ed:d8:30:ca:d6:f7:
a4:f7:39:72:08:70:c1:1c:b8:8b:54:9b:eb:ce:6d:
24:2a:60:1b:82:c5:4c:c9:e8:ae:4f:1a:ca:3f:3e:
e4:d3:e4:a2:95:d9:7c:a1:15:9e:cd:a9:ca:90:c5:
fe:cb:4d:4a:a7:30:75:67:40:a7:1f:43:45:75:04:
a1:64:0a:3c:9b:c8:89:d3:51:d3:68:a2:ed:da:7f:
76:c4:85:93:aa:0c:83:bb:61:76:8a:5e:ce:91:7e:
9a:e2:4c:45:6d:de:58:d4:18:a1:59:96:96:b8:4e:
cf:ff:2b:92:7c:1d:51:e5:fe:dc:ab:da:08:56:c3:
e0:c7:a2:6d:1e:31:ba:60:b9:c2:ab:88:40:ad:b7:
20:4e:cb:6e:99:80:60:5a:de:e8:5b:1e:f8:37:00:
5f:3e:a0:09:b0:da:aa:10:21:26:1d:33:69:12:1f:
7f:74:93:2f:32:e2:fd:7f:44:ef:17:8b:00:fa:23:
c3:ce:1a:6f:d5:83:3c:25:18:47:88:49:94:ab:9d:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:A8:25:2F:67:72:AC:BA:7A:8C:79:62:CD:F4:FD:0E:E4:C1:9E
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:80:f2:49:6c:63:66:5e:cd:3e:c0:94:ee:a0:2e:b6:09:c9:
dd:0f:50:f8:9c:d6:d3:85:49:9c:3c:08:4e:b0:78:03:24:db:
e2:ca:db:68:cd:c9:01:67:f6:cb:d7:cf:57:cf:fd:bc:bd:ef:
da:b5:5d:96:75:e9:c0:8f:f1:16:a8:5e:fc:02:eb:eb:3b:88:
c0:7a:d3:70:65:d6:9a:ae:e7:55:e2:5f:d8:3f:07:f4:2d:a7:
71:1b:8d:d2:5e:8d:e0:39:98:56:42:d1:7b:e4:67:c7:a9:6e:
3d:dc:50:31:f6:fc:b7:d6:61:02:11:ce:a5:ce:9d:63:56:4d:
d0:d9:29:7f:ed:63:34:1c:21:e4:6a:74:3a:c4:d2:a5:f5:79:
db:80:2e:26:a0:9f:fc:c9:c2:19:81:b1:ba:8e:d0:fe:d4:c0:
6e:75:63:13:85:87:cf:ca:15:a4:82:05:6a:30:5c:0b:f7:ce:
66:58:52:16:55:a8:ae:f1:01:fe:02:26:30:90:ff:e2:5d:60:
d0:53:f0:d5:f4:96:16:33:bc:f2:e1:4e:02:6f:9a:33:c0:c0:
a6:b7:15:e8:70:1a:79:ba:ca:14:75:de:51:f2:ee:9e:9b:36:
da:0f:cf:7c:30:92:64:22:65:4a:16:6b:0f:5d:0e:c2:df:a3:
a6:42:a6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:48 2025 by rpki-client