Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: gknf+R/Fb/wjXqbeeixaFlES6JLUOTPJ1XVabL0WD/4=
Subject key identifier: 24:7F:23:9C:D6:34:82:BE:E4:E7:18:A9:C6:7C:F6:AB:29:53:2D:A3
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 0198733D7077EEA76C9500498D95B5C20E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 1200
Signing time: Mon 04 Aug 2025 04:01:02 +0000
Manifest this update: Mon 04 Aug 2025 04:01:02 +0000
Manifest next update: Tue 05 Aug 2025 04:01:02 +0000
Files and hashes: 1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: k7UCoUV+6Z8HPxrD0JWHf8y2GoghQqLv2eDpQAb6El4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:70:77:ee:a7:6c:95:00:49:8d:95:b5:c2:0e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Aug 4 04:01:02 2025 GMT
Not After : Aug 5 04:01:02 2025 GMT
Subject: CN=247f239cd63482bee4e718a9c67cf6ab29532da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:8b:85:e4:fa:b5:8a:d3:46:96:50:58:62:
05:1b:66:93:26:1e:82:06:79:c2:eb:62:de:60:a6:
b5:f4:81:d4:60:0b:c5:88:22:38:b4:50:ed:74:c0:
50:e6:5e:de:75:1a:87:9a:82:20:19:a9:ad:a2:1f:
0e:b0:ee:99:bb:53:93:16:24:a0:63:5c:c2:8e:fc:
2b:f0:8c:a4:47:41:62:d3:27:30:d7:4c:cd:b6:a3:
26:c0:d4:2f:51:75:60:ef:9d:60:da:8f:d6:8e:e9:
00:c7:5c:5d:b8:9a:5f:4c:9a:e1:18:3a:1b:69:6c:
54:26:8c:34:64:e8:1a:36:ad:ff:88:8f:81:45:47:
fa:18:c2:46:af:ff:1f:36:ca:3a:0c:5d:55:c5:de:
54:2d:f7:bd:57:76:ac:d6:04:e1:57:12:c4:53:63:
57:1b:0d:3d:6c:7d:d9:a6:a8:45:f2:1f:76:70:6f:
9f:e4:5c:14:33:bc:fa:d6:60:36:70:40:a3:f8:17:
b8:ea:31:69:a4:d8:29:d8:2c:e9:b9:a4:28:f8:70:
c1:58:f8:f1:54:ac:38:c9:69:f3:c1:bc:1e:bc:87:
53:d8:4e:ce:c5:e9:c3:59:ca:5e:24:59:29:e5:76:
ee:3e:30:56:bf:54:5a:0f:37:3f:bc:26:b8:5d:fa:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:23:9C:D6:34:82:BE:E4:E7:18:A9:C6:7C:F6:AB:29:53:2D:A3
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:39:ce:9e:fe:4a:fa:49:a0:0d:d6:3f:c9:55:7f:5a:17:a2:
cb:11:67:0d:93:fb:2e:72:a1:71:aa:fe:f9:cf:ec:9f:da:46:
c1:37:5c:21:4a:3a:1b:e1:49:f5:16:b9:f3:6b:5d:f2:9d:1d:
ae:e0:24:d9:0f:c3:43:4b:64:ab:4c:b3:46:e1:ee:89:65:28:
67:02:1b:9e:f2:f7:11:10:df:05:cf:5d:dc:e2:05:7e:94:95:
d6:82:b1:35:1d:8e:ec:c0:46:1a:2b:bc:e0:83:80:c8:4f:b4:
4e:a7:e4:7d:ad:28:82:ca:81:fb:59:56:82:8b:6c:0a:bc:5c:
1d:54:ac:d0:0e:9e:f5:e8:af:14:d7:c9:4f:b1:4c:0f:92:19:
c9:50:d3:cb:8a:91:ca:4e:62:8e:c2:88:72:91:14:49:16:76:
ed:9f:b6:c9:e2:bd:f7:41:95:d8:f9:ea:aa:61:39:f8:32:a2:
3e:84:fa:9d:a9:53:46:35:09:23:15:13:00:1b:9c:9a:0d:81:
00:29:79:47:0c:6e:25:bc:ea:76:bf:26:b1:f7:ae:df:2f:13:
b3:f8:ed:05:71:1e:a8:8c:af:e4:dc:4e:af:da:f5:14:86:21:
02:2f:0c:bf:90:fa:ac:c5:f4:28:8c:13:c9:38:fb:2e:11:0d:
77:ea:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:31 2025 by rpki-client