Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: xrOXnF0y1qL5KB2PN+YJkuRXFXrtvNjY8sEgcdWw6tI=
Subject key identifier: CB:44:4F:D1:BB:41:82:E7:1F:16:3E:BA:5F:D7:F7:C9:BF:08:B4:61
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 0198748692AA7A017C3F7D1483FEC6D64EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 10:00:33 +0000
Manifest this update: Mon 04 Aug 2025 10:00:33 +0000
Manifest next update: Tue 05 Aug 2025 10:00:33 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: 3jFwRT6I+BxpVFNzK4i1PNE04XI7wK8sJtqfm2ot7Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:92:aa:7a:01:7c:3f:7d:14:83:fe:c6:d6:4e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Aug 4 10:00:33 2025 GMT
Not After : Aug 5 10:00:33 2025 GMT
Subject: CN=cb444fd1bb4182e71f163eba5fd7f7c9bf08b461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:9c:78:5f:22:82:0a:3d:a0:8e:33:8d:12:
3a:99:a4:77:03:9e:19:df:4f:a1:6e:00:7d:4f:52:
b6:a2:1c:05:32:e2:71:5e:4c:b9:bf:61:f5:64:ab:
1c:10:3b:2f:a4:45:c9:79:36:22:4c:bb:46:20:7b:
e9:53:84:af:a4:15:1d:94:ec:21:14:98:52:67:86:
37:32:7e:84:90:97:b5:ad:a4:0f:fc:2e:8c:d2:75:
8f:33:8c:78:80:81:02:12:09:e6:e5:8e:2e:d1:5d:
7d:a6:ac:ee:67:ab:68:0f:f8:1d:9b:ce:e9:9b:3a:
83:ad:8c:65:8e:3b:23:f7:c7:80:ba:45:d5:c4:bb:
f8:ac:97:d0:96:91:2c:b1:29:e2:63:47:79:c5:f7:
ff:8b:44:2f:77:43:10:0e:eb:c5:d0:a4:5d:29:de:
15:09:9f:25:f8:4f:70:9d:a3:21:05:e6:d9:4f:1d:
75:23:7a:f1:40:7a:e7:41:08:22:a0:17:7b:df:94:
ff:cb:61:3d:f3:fd:ec:aa:4d:89:a3:83:94:ba:9a:
52:a6:5a:58:aa:2d:a2:23:2b:96:1b:0e:b8:10:63:
f0:6a:08:0c:03:93:57:52:8d:14:d8:79:7d:ac:3a:
ed:63:7d:75:f9:b1:a7:7e:7e:ce:98:69:de:c1:70:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:44:4F:D1:BB:41:82:E7:1F:16:3E:BA:5F:D7:F7:C9:BF:08:B4:61
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ca:ff:d8:68:4d:46:5e:a0:df:76:18:c5:35:38:d3:65:f2:
00:55:93:2a:68:ae:88:dd:f8:d2:db:64:e6:7f:85:36:38:86:
62:83:54:23:db:36:c4:38:70:c7:a6:cf:e9:fb:53:cd:0c:02:
9e:43:fb:43:7a:79:27:eb:6b:e9:55:24:37:44:74:a9:81:dc:
06:8a:97:ad:92:8f:d7:60:04:45:5f:3d:55:a5:c8:4d:31:9d:
4d:60:0a:cc:b5:c5:49:68:dc:42:0f:c5:a8:b0:2f:cb:2c:88:
de:a2:7d:b0:1d:6c:d2:10:5c:05:ba:b7:d5:a6:d0:fd:bb:18:
73:a6:31:8c:f5:2d:99:39:8e:04:d0:ff:9a:6a:22:e7:be:f4:
c3:7f:97:40:16:43:10:fb:a8:ac:a1:ee:aa:03:76:b9:23:81:
99:b4:bd:b7:0e:83:81:c6:1c:4d:e0:1b:c7:47:7e:22:79:a1:
dc:e6:f7:78:8f:82:2d:e4:dc:83:a5:81:44:cd:9e:e6:e6:de:
0b:45:15:98:f3:3e:ba:85:01:4e:ee:59:ec:7a:48:e5:c7:97:
fc:64:f4:5f:62:46:02:35:72:99:28:f7:1f:eb:7c:87:03:0b:
26:d7:c0:d6:d2:41:99:8b:7c:17:00:a2:ce:e7:d8:c2:11:8a:
cd:65:b6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:09 2025 by rpki-client