Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: d6g0RJ1gFmAwKLiwgu4QEw1vnKbvRhzb4+c0tztc8oA=
Subject key identifier: 34:8F:07:53:37:33:BB:81:19:A8:91:E3:ED:E5:8E:D4:1A:FF:86:8A
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 01988BEA694D2932A3C83C970746F51A7FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 23:00:51 +0000
Manifest this update: Fri 08 Aug 2025 23:00:51 +0000
Manifest next update: Sat 09 Aug 2025 23:00:51 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: kbGBGXNiKskqh0oSyWu7AIOBIcjVYmjDyJKbi2ui9a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:69:4d:29:32:a3:c8:3c:97:07:46:f5:1a:7f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Aug 8 23:00:51 2025 GMT
Not After : Aug 9 23:00:51 2025 GMT
Subject: CN=348f07533733bb8119a891e3ede58ed41aff868a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:b8:9d:70:b2:a2:e9:c0:10:18:b7:df:d7:
52:f2:1f:3d:5a:30:e8:a3:6f:66:ef:1a:21:09:db:
3d:07:bc:9a:e8:5d:b7:9a:72:71:20:73:6f:27:dc:
b1:bd:73:5c:49:d2:40:c0:cd:a9:6d:90:27:58:50:
80:19:c1:21:88:d8:39:54:f1:3f:25:65:85:b5:a6:
23:2f:b3:26:fc:81:b5:05:43:91:04:85:3e:a6:f9:
7b:86:72:04:f0:bd:72:43:a1:93:32:f3:bd:36:b1:
b8:a1:41:9c:2a:68:b1:e6:67:48:21:3d:97:3d:b8:
fc:54:03:b6:92:47:e6:ff:4f:a8:cc:f8:46:f8:04:
86:b7:fc:d1:59:62:a2:1f:62:7d:71:2a:6f:48:fe:
a4:76:97:c7:bb:92:0d:aa:f8:91:68:57:1e:25:49:
d4:5c:f3:65:a8:d5:1f:f7:3c:05:02:46:67:82:00:
25:05:10:54:02:a5:e6:0c:38:f8:d0:4f:9e:b4:61:
c6:a5:f0:9d:63:01:28:37:ed:52:1f:78:04:83:1c:
36:16:2a:4e:83:ec:65:af:bf:91:fe:94:97:49:d8:
cd:23:a6:c6:02:63:3c:2f:a9:29:b3:e4:c4:6e:33:
d1:00:f2:10:c3:43:f9:3f:9e:42:b2:c1:59:1d:c4:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:07:53:37:33:BB:81:19:A8:91:E3:ED:E5:8E:D4:1A:FF:86:8A
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:95:f6:ba:89:12:b1:5e:90:69:ba:0b:87:b6:cd:eb:2c:e4:
f3:33:65:1c:75:90:02:7c:f4:c3:71:33:6e:af:3c:27:6a:ad:
c3:61:c4:e2:3f:f9:7f:a9:82:89:c9:ba:7c:c9:af:c9:6e:00:
dc:c4:59:5a:aa:46:dc:09:95:78:c5:66:44:8b:ca:8d:96:6d:
3d:cd:8a:98:f0:7a:c1:4a:12:d5:c3:f3:8c:88:83:6d:ee:91:
48:12:95:f7:3f:4a:26:d8:00:8d:94:b3:3a:ec:9b:fb:49:ce:
f6:25:c2:9e:63:a8:6e:97:39:93:9b:c3:d9:89:30:82:ea:35:
84:f6:42:36:75:ac:9f:b1:50:5d:d8:d9:f3:ff:f0:bb:a1:f5:
70:95:3b:2c:b2:03:4c:99:1a:a3:86:08:bc:3b:b0:0f:2f:22:
ef:4b:19:d1:c4:ad:c4:13:83:6e:3d:50:17:92:76:e0:13:58:
b4:57:48:5f:aa:a8:2d:5e:d5:78:a9:e8:77:5f:60:e1:c1:40:
d5:90:b1:07:0e:e2:bc:77:35:12:61:3c:65:e5:28:b7:4a:22:
51:f1:37:c5:b5:7e:94:58:1e:bb:f3:16:e8:40:b8:4f:2c:61:
a6:aa:6c:ea:f5:33:71:28:09:e9:8e:72:d9:b5:c2:f2:ac:e5:
e8:6d:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:52 2025 by rpki-client