Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: zO14zAI2gkstfwuWv608mTBdHfe2fij8Kgi9eAuMOlY=
Subject key identifier: E7:53:61:BC:93:FF:69:3B:F6:53:66:21:6A:81:4F:21:51:C5:A5:74
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 0198D4E0E4FC1CCAEEF54969C0D2ED363E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0B3B
Signing time: Sat 23 Aug 2025 03:02:45 +0000
Manifest this update: Sat 23 Aug 2025 03:02:45 +0000
Manifest next update: Sun 24 Aug 2025 03:02:45 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: qMusNleAUVKaP/LSU7IjElK0irdWCzry7i0sisSogm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e4:fc:1c:ca:ee:f5:49:69:c0:d2:ed:36:3e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Aug 23 03:02:45 2025 GMT
Not After : Aug 24 03:02:45 2025 GMT
Subject: CN=e75361bc93ff693bf65366216a814f2151c5a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:57:ef:3c:96:29:1f:f8:21:45:17:f1:a8:
1c:71:2e:a5:14:8d:8e:0c:5b:c2:c1:ed:cd:f9:73:
f2:58:e8:11:4a:82:57:33:18:68:29:68:10:13:83:
18:7c:07:10:fd:c1:08:0f:b1:ee:24:1b:36:f4:2b:
cc:e7:41:3e:b2:d3:2a:b9:95:56:54:f8:7a:28:e9:
9f:3c:83:0d:53:95:ec:3b:84:20:9a:b6:af:e7:d4:
9f:a7:79:39:18:90:5d:55:9b:2e:7f:5c:a8:9a:38:
88:f3:dd:94:5f:15:0f:63:f9:b3:f3:d5:ca:46:78:
c3:5b:d9:63:93:69:06:ac:f3:9f:1e:02:fe:37:07:
ed:70:89:f3:fc:b0:8d:86:82:69:76:6d:ac:dd:bc:
57:1e:58:17:85:b5:c3:61:35:9d:51:0d:7e:5d:6a:
41:33:a4:0d:52:c5:86:7b:73:1f:d5:fc:89:70:27:
21:89:ad:05:66:fe:ca:5f:a4:66:b5:30:3a:86:f7:
04:34:40:eb:e8:dc:37:22:7e:66:3c:04:38:2a:c4:
92:39:f7:88:ff:99:ff:4a:57:f0:e2:f2:fa:67:be:
b1:a3:e3:12:82:cf:93:39:fb:43:2b:71:c7:fc:a3:
a0:60:b4:d3:09:3a:f9:07:16:e6:e7:63:c2:1d:48:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:53:61:BC:93:FF:69:3B:F6:53:66:21:6A:81:4F:21:51:C5:A5:74
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3b:c0:89:2d:21:94:ce:72:22:3e:99:3c:75:4f:d2:37:c6:
2d:7d:f8:69:f7:c5:b5:ed:ab:e2:7c:b8:39:a7:c1:d1:8d:b6:
0a:50:7a:e3:f0:e1:a3:2a:50:1e:7f:5d:8e:b5:4b:aa:fc:d1:
41:95:90:12:72:6b:3c:f7:40:aa:08:85:72:03:06:43:11:23:
43:48:40:20:e3:73:c9:f0:81:79:cb:ac:6e:b0:3d:6f:a1:5c:
25:a8:d1:f3:5a:64:5d:b7:d5:0a:02:d0:7b:6b:48:b5:8a:45:
50:e7:ae:8d:db:eb:f8:82:c9:23:23:ba:e8:5a:58:31:d6:6c:
60:1b:a6:f3:ec:46:36:06:ab:b9:09:43:13:8e:fa:d4:aa:c0:
d5:81:fc:5d:06:75:ec:30:1d:18:2c:5a:30:b7:23:32:13:bc:
c1:1a:b1:a9:5d:e5:cd:f8:86:51:66:21:8b:04:94:aa:27:28:
da:0c:df:58:0f:f9:13:37:b6:e8:0b:31:23:29:0d:17:df:1b:
d1:db:bf:79:25:ba:29:26:f2:bd:d5:40:ca:14:92:72:8b:d2:
be:02:e7:79:6e:3c:5a:84:98:4c:e8:03:d2:08:05:a4:8e:5f:
d6:ca:e2:97:64:57:40:4b:4e:01:c1:74:94:f6:d2:86:a7:c7:
9a:1f:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:26 2025 by rpki-client