Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: 0ki06LUlitFVYjIOqL5nyJmcJc6gw9zgLssSZ0bsQ7U=
Subject key identifier: E2:F4:8D:84:DE:9C:20:A4:09:6E:A6:BF:98:EB:99:1A:AE:D9:CA:16
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 0198D65F0F88BBAC187A411E193CA3D2207D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 12E9
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: SA01NGDDVklTMuBcVAKCrqA+MRtxvS5Dgore+sLPFUw=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0f:88:bb:ac:18:7a:41:1e:19:3c:a3:d2:20:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=e2f48d84de9c20a4096ea6bf98eb991aaed9ca16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:7e:47:b1:af:3a:08:25:e0:80:ac:0e:12:
93:bd:2b:34:4d:d3:a3:1a:88:2f:5d:e9:ac:e6:c8:
a0:23:9b:97:6d:93:35:12:2e:51:04:dd:58:d3:10:
16:a8:64:eb:1b:81:40:92:90:ae:5f:25:25:86:28:
dd:a1:7c:bb:0e:ac:d5:af:92:c6:9c:27:ec:4f:ad:
60:11:67:e7:d8:8d:02:d4:28:35:48:d0:f2:80:ae:
0f:5e:92:b8:23:76:28:21:36:0f:a0:9c:1c:fa:a8:
dc:7d:f5:bb:0b:0e:97:6e:b1:03:94:83:12:15:e9:
9f:ce:4d:2f:5c:14:a7:49:79:a9:89:6a:9f:35:2f:
b6:0c:16:e2:2b:f6:4f:ec:6e:d3:4e:24:2b:60:ea:
52:e4:0c:72:9c:ea:53:a9:d3:75:2d:96:64:ef:fa:
2e:cf:6c:ff:34:e7:cd:9e:a2:57:b2:e5:6a:59:ae:
9c:cc:10:2d:30:18:d5:2e:1f:ff:0d:0c:00:ea:41:
51:f5:da:7e:85:5d:7a:af:25:3c:45:8c:a5:f6:2d:
7a:0d:25:71:c0:ab:e9:da:1c:c9:44:cd:61:1a:fe:
e8:6d:c4:c1:62:ea:96:51:48:d6:e5:8d:7e:2e:4a:
fc:7b:e6:9f:eb:ac:f1:e5:c4:75:e8:ad:45:d7:6e:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:8D:84:DE:9C:20:A4:09:6E:A6:BF:98:EB:99:1A:AE:D9:CA:16
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:67:00:61:8a:b6:54:63:f3:6e:85:30:04:c2:4d:f7:04:
e4:93:81:ab:ac:b9:de:cd:dd:e1:7e:4f:64:66:2e:3d:fd:e6:
7c:72:93:20:9b:eb:7e:e3:42:78:23:92:1c:0f:dd:23:a6:42:
73:6e:65:48:37:e2:b6:6a:4c:9b:16:e6:86:2d:4d:9b:74:cf:
b4:bb:a9:6d:c7:3b:7f:53:c7:95:30:5b:19:15:ef:c1:4b:79:
21:59:4c:db:61:b1:7a:83:95:9f:0b:d8:9c:d0:99:fd:73:4b:
ac:0f:70:33:98:5b:b4:64:5c:09:63:7b:b1:fb:71:d5:d0:4c:
58:1f:49:1e:94:e4:5b:ea:31:b0:d6:77:4d:96:17:69:2a:42:
a9:e7:31:9f:e5:fd:18:ae:74:2f:d3:7c:4b:bf:42:ad:a5:59:
05:3b:da:f6:8a:bb:4e:aa:59:1f:7e:40:04:41:5b:66:26:81:
1f:fe:c4:e6:2d:61:6f:21:fd:78:0f:39:d1:87:2d:42:49:03:
d5:a9:31:e2:bb:72:f9:18:e1:c1:65:3d:42:71:15:99:76:e8:
6a:ba:7c:c8:d2:ff:46:25:78:26:9a:1a:4c:e6:30:52:d9:b5:
31:75:d6:80:17:11:2d:a0:1d:82:46:6a:ab:bb:48:28:a1:46:
1c:01:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:29 2025 by rpki-client