
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: uhQhh+xMVZt3RcEjXYQucIh66HQIFDEmxKJpzqVbkMo=
Subject key identifier: 97:87:33:14:89:5B:07:96:28:B0:95:0A:C4:9F:2E:4C:DC:FD:B9:7F
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 0198936D2F1D94B97D089ABE8718344C932D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0C18
Signing time: Sun 10 Aug 2025 10:01:02 +0000
Manifest this update: Sun 10 Aug 2025 10:01:02 +0000
Manifest next update: Mon 11 Aug 2025 10:01:02 +0000
Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: YzKRZYmy7JfHOnba5clljel0xEwwjfbdHYMJvR/oeKE=)
2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:2f:1d:94:b9:7d:08:9a:be:87:18:34:4c:93:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Aug 10 10:01:02 2025 GMT
Not After : Aug 11 10:01:02 2025 GMT
Subject: CN=97873314895b079628b0950ac49f2e4cdcfdb97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:88:bb:00:1b:c8:7f:74:c5:e9:72:95:0e:
3e:fa:20:94:02:cb:96:27:34:d4:aa:cd:bd:89:1a:
ee:28:30:83:5d:63:c2:61:d3:98:47:3f:19:53:e8:
78:c5:3f:97:66:4c:dd:cb:ac:14:2b:70:f5:13:48:
c0:f1:22:cf:45:b2:42:97:1b:86:7d:1d:9c:26:9d:
36:b5:b0:62:74:14:c7:4f:b3:ae:df:9d:74:0e:83:
e3:78:fc:e2:cb:04:53:c2:5c:a5:af:75:88:69:b4:
73:32:10:9b:ca:82:cc:79:a8:15:3e:e7:1d:58:d1:
e3:5a:38:4c:01:b1:bd:ca:6e:7b:10:0a:08:d4:3c:
96:10:94:a7:3e:30:f9:88:d0:f0:04:bf:e4:eb:ca:
df:e1:c9:c1:29:5f:31:31:50:1c:9c:96:ce:30:8b:
d9:68:46:1a:20:b4:c0:66:58:74:8d:79:c5:52:42:
df:cd:02:50:42:f3:0b:59:13:b8:13:b6:8a:6b:e9:
6e:65:b2:e7:22:3f:9e:17:ce:88:59:50:01:91:94:
5d:b7:a3:26:14:ea:aa:29:7c:b2:db:f9:63:1c:fc:
83:02:ca:12:25:d5:4d:75:7e:22:1a:1f:92:e2:a2:
9d:8e:21:3e:f8:67:ad:6b:97:2e:a5:1b:10:70:01:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:87:33:14:89:5B:07:96:28:B0:95:0A:C4:9F:2E:4C:DC:FD:B9:7F
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:65:8d:59:4d:72:a9:07:c6:ae:14:95:bc:b6:94:18:ea:
e7:29:c7:fa:a9:d4:51:9b:31:6e:23:ee:ac:f5:97:84:ff:12:
e8:0c:fa:2d:c4:2d:ad:06:4c:44:cb:33:66:0a:9d:08:36:50:
98:74:2c:08:24:43:4a:cb:cc:2e:cb:32:b4:84:ea:b5:f8:db:
9b:a1:46:aa:3b:b3:6f:6d:85:d3:3e:b0:71:db:5f:7c:71:03:
c9:e1:a7:ff:4d:41:ed:73:13:21:64:e0:5d:33:6e:56:23:51:
28:bc:4b:a8:b9:6e:5a:39:5e:e2:86:d5:0e:c5:d3:28:70:2f:
0f:5c:50:60:e9:d6:9a:aa:76:d3:ef:1e:86:eb:8a:4a:d1:a3:
8a:d8:46:ee:a1:0b:5c:37:0b:c0:0d:28:3d:f7:52:20:74:b3:
45:c0:89:06:2f:b9:a5:80:3d:9c:b8:d2:5a:3a:c6:d2:35:54:
90:03:f5:8f:1a:65:0e:0e:bb:a4:4e:4d:b7:89:0b:61:84:25:
e5:58:bc:5d:15:c4:d6:2a:1b:7a:41:d5:6c:6f:a3:f6:04:e0:
ed:a2:62:55:5e:5a:ee:12:55:c6:8a:98:b5:99:40:53:27:1e:
39:3f:42:61:59:1e:66:38:99:f4:eb:e9:f4:ae:61:12:7c:56:
55:45:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:23 2025 by rpki-client