Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: L1+RagWqk5LxfFEmORCsozgO715B57R7Ho2y78CrO4A=
Subject key identifier: 57:C7:FD:51:44:63:9E:A7:ED:B7:86:DC:72:97:D8:A9:0A:ED:71:A5
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 0198D5BBF0F64218EBCB37394EFE32FA07A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0D1A
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: MxLcAgXC0vRpPyT-3NXtB6NlTcM.roa (hash: glwD9i/+OFABXNduZaHp2v7di44Ewcx6kWVCmGzy8h8=)
2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: rcHXP0+UibnEf0njv9NcaKhjUxbMecllzho4VgLx8xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f0:f6:42:18:eb:cb:37:39:4e:fe:32:fa:07:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=57c7fd5144639ea7edb786dc7297d8a90aed71a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:f9:45:66:f2:7c:71:f4:35:e7:ee:e3:6b:
08:ba:b9:93:74:57:28:8c:95:90:49:a2:91:79:b6:
02:b1:f5:5a:2c:fe:fa:1c:de:ae:cf:c2:63:91:50:
21:d2:f8:f9:19:ba:07:06:d2:ed:60:53:86:31:20:
3c:6f:e0:55:52:b1:47:16:a1:5d:72:74:3c:14:94:
39:a9:af:c1:96:a1:9f:62:62:99:30:cb:c9:27:3c:
df:65:b4:b4:ff:12:74:d7:74:7e:81:79:78:b3:cf:
dd:7e:81:16:4b:85:fd:f0:cb:93:9a:1d:cb:97:73:
06:02:75:b5:d5:58:12:3a:a3:bb:e6:d0:96:da:08:
d4:45:20:6a:fe:ef:92:81:90:0c:5a:1a:91:54:11:
d3:00:08:93:9d:69:77:14:cc:44:c1:c3:6c:64:40:
54:53:6c:88:dc:4f:80:7d:20:1c:28:58:77:66:21:
27:87:58:df:70:1b:ba:b2:0c:e0:75:20:b8:5f:13:
e3:94:91:49:8b:e8:52:d1:91:7a:c5:4a:eb:ca:84:
6a:af:9e:56:3e:74:80:17:34:28:ef:35:e0:7e:be:
c8:64:2a:98:7a:c4:49:12:33:c4:f3:4b:47:f3:f7:
41:c1:79:93:19:5a:7f:cc:fc:91:a8:84:a4:fa:cb:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:FD:51:44:63:9E:A7:ED:B7:86:DC:72:97:D8:A9:0A:ED:71:A5
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:87:20:46:dd:92:7a:6c:d2:d8:95:ef:2a:1c:d8:e0:67:35:
04:80:bf:c1:21:d6:a4:a1:24:ce:3e:e2:8a:ce:75:2a:33:b5:
14:13:5c:56:70:b5:30:41:66:42:d3:e8:24:36:54:f9:8f:06:
03:68:bd:3a:c8:1c:bd:93:df:23:63:d6:ee:1a:7c:cd:d0:2e:
93:30:50:13:eb:3e:a1:3b:a9:13:e4:34:33:b4:b9:d7:c1:3a:
57:4f:6b:56:19:6d:09:b3:e3:c9:78:1b:19:2a:5a:1e:14:67:
5f:b1:d2:a9:55:7a:36:c6:1d:41:ce:46:d6:de:89:fa:02:97:
8b:32:ec:7a:c8:89:54:a0:a6:b5:06:54:f6:b0:08:94:6e:31:
64:bf:b2:4b:e2:c8:26:92:75:fe:16:13:a3:34:81:50:44:f3:
34:9a:3c:cc:48:3b:48:b7:91:46:3d:4a:d9:81:2d:cf:f2:4d:
2a:2e:a9:a4:05:66:ff:66:b2:1a:c7:68:cd:6d:88:8b:dc:ef:
c4:b8:e1:1c:62:13:01:ac:10:a7:84:be:ec:f5:e8:3d:f6:c5:
7b:f3:b1:d2:ab:60:1f:a6:48:b5:c9:4f:18:f1:fa:8a:d8:83:
9b:ea:e5:03:48:ac:60:ed:7c:80:1f:2f:34:ad:14:c1:4c:e9:
57:09:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:48 2025 by rpki-client