Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: mvWtIAZVzx+04vTVPWuen9rPCJbYgRynle4KH8j4VYg=
Subject key identifier: 81:50:D2:AE:D6:00:77:F7:FD:AE:27:AA:56:F1:89:EB:DB:52:6E:05
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 0198D6602CDED1E34D6342BFD6A5D3471741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 120D
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: Mp9hGvD8JqDB3u7lgEFdcHIpfYh7C7vpox73M6NhrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2c:de:d1:e3:4d:63:42:bf:d6:a5:d3:47:17:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=8150d2aed60077f7fdae27aa56f189ebdb526e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:46:de:06:1a:ec:a6:f4:72:6f:41:87:fd:
eb:64:29:4f:2b:ef:f5:aa:9a:0d:58:d7:08:34:bf:
a4:33:02:77:91:de:a8:81:6e:bf:4f:a4:9e:85:fc:
10:ca:18:41:b8:9a:08:5f:2a:71:fa:27:cb:69:53:
66:10:94:13:2f:99:3f:8f:23:71:6e:5a:83:3b:8d:
54:13:6e:d5:ca:e5:c1:e9:a5:6b:fb:82:09:2a:3d:
a9:be:ed:12:8c:78:cc:3e:a3:20:5a:49:72:3f:f1:
45:30:51:0f:f7:a8:2d:9d:a4:fe:9c:eb:9c:10:71:
32:5f:cf:65:6d:2c:9d:e4:98:9a:9e:75:c6:f8:6e:
c4:f7:d5:54:c4:d5:be:d5:19:da:b8:e2:13:7d:c2:
44:ba:84:78:bf:cf:9f:7f:98:99:60:7b:02:fc:2c:
85:99:9c:67:c6:db:bd:3e:19:2a:9e:1f:35:a0:5b:
a1:6e:36:e1:2f:11:e3:ef:b0:c7:21:98:0c:f7:d7:
2b:55:e3:42:51:f6:30:a9:3e:6d:af:14:c9:4a:e4:
d5:62:64:cb:74:ff:ff:38:29:19:ae:3d:c7:69:b2:
20:88:c8:50:05:7f:75:f1:4b:ee:79:70:9e:4d:72:
21:af:74:11:a4:7a:a1:5f:c1:28:d9:1b:fd:e0:34:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:50:D2:AE:D6:00:77:F7:FD:AE:27:AA:56:F1:89:EB:DB:52:6E:05
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9c:f3:35:4d:9f:0d:52:5a:93:c3:9b:f9:06:85:83:7c:fd:
d0:eb:dd:14:9a:f5:82:72:fa:33:70:5f:37:88:03:4e:65:d5:
b6:e6:f2:29:0a:89:a9:a5:d7:66:96:18:0f:e2:a1:5e:ab:63:
66:0d:be:3b:be:01:cf:ee:f2:e3:fb:84:12:f0:d6:be:43:41:
04:91:ec:14:4d:99:a8:69:f9:00:7f:0d:61:8e:31:3d:fb:f1:
d4:41:8f:3a:af:df:2a:46:4b:9b:67:3e:8c:0e:f2:36:d4:f1:
2c:a0:1f:bb:67:37:75:64:61:b3:10:ab:30:29:de:4d:8c:25:
67:4a:a8:90:a6:b0:24:4b:6a:bc:da:57:00:b4:0a:8e:3b:e3:
0b:53:5b:dd:91:26:fa:cf:4e:59:c6:33:28:09:71:46:3c:21:
54:6e:cf:9d:ff:32:33:49:43:0d:04:c4:bf:f5:74:7c:79:50:
13:26:ad:18:a7:da:2c:1c:49:d4:52:fd:43:87:dc:fc:92:85:
82:75:9d:51:46:34:8d:7b:e2:4d:5a:d6:70:b6:3c:35:d4:45:
f2:91:f4:36:37:e3:86:18:de:9c:4d:df:31:6c:9b:4e:20:aa:
01:7d:ae:d8:05:b2:3d:73:af:38:df:5b:59:58:f5:36:20:6c:
02:c3:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:13 2025 by rpki-client