Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: 0+lyj6GXCtGysLajytkuqHxkyj3MQbrHSt21wax7L18=
Subject key identifier: C0:B7:6B:A7:68:B3:95:B5:94:B4:15:A6:A1:29:1C:48:D9:4B:24:F7
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 0198D6CD65FDDD373A832416E5F385095500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 07DE
Signing time: Sat 23 Aug 2025 12:00:41 +0000
Manifest this update: Sat 23 Aug 2025 12:00:41 +0000
Manifest next update: Sun 24 Aug 2025 12:00:41 +0000
Files and hashes: 1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=)
2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: 98+Gloaq65l1YN0miMDYIx8WpaLDDq2i3t0jc6si79c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:65:fd:dd:37:3a:83:24:16:e5:f3:85:09:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Aug 23 12:00:41 2025 GMT
Not After : Aug 24 12:00:41 2025 GMT
Subject: CN=c0b76ba768b395b594b415a6a1291c48d94b24f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:e6:f7:98:ab:19:d9:dc:4f:51:95:99:c6:
a7:ed:fb:56:bc:2c:7a:82:93:d5:c1:d0:52:4c:18:
f3:8b:5f:7f:b3:99:ab:07:1f:5d:45:9f:03:ca:dd:
7b:95:4e:67:54:91:25:6a:63:6e:c7:73:b2:c6:55:
9f:6f:d0:f6:40:4e:c2:5f:ae:96:b0:92:28:cc:f7:
6e:52:c0:23:fa:f1:a6:9e:3e:39:03:4f:b0:b0:00:
65:6a:3e:d7:59:83:29:e1:56:23:b3:c1:30:12:b8:
c5:f2:5b:d3:be:50:b5:48:09:9f:a5:f7:92:83:07:
2f:d8:1e:46:c6:b4:87:7b:de:73:4d:a0:fe:62:5d:
d6:1e:f2:e4:5e:75:a7:75:da:46:62:44:b6:b8:9f:
01:e6:63:aa:b4:b4:cc:4e:c2:7b:8e:00:b2:47:a4:
ba:ed:e0:4d:43:24:82:f7:41:c1:1f:31:7c:13:ca:
1d:8f:91:37:c6:51:26:45:f6:a3:42:4d:ab:77:99:
15:64:79:2d:5c:34:8c:58:b2:89:72:1f:bd:1f:51:
76:cb:8d:7f:57:d4:3c:e0:20:33:a3:08:86:c9:04:
aa:2a:b1:34:55:c0:55:35:4d:6d:ff:16:3b:bf:73:
86:9c:04:be:ea:cc:d3:2b:91:81:86:76:3d:f2:df:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:6B:A7:68:B3:95:B5:94:B4:15:A6:A1:29:1C:48:D9:4B:24:F7
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ae:21:0c:31:16:af:7d:9a:21:4d:51:4a:f9:76:26:0d:5e:
9b:40:70:95:5a:c5:93:26:93:fc:03:a2:19:bb:59:d1:26:a8:
51:10:3d:4a:64:86:9c:4d:77:65:5e:4c:38:90:81:a4:27:08:
40:8a:eb:b3:f2:7d:ec:24:e4:b7:a5:2f:57:1a:ed:34:3b:e5:
77:15:45:22:cf:9d:8f:e2:36:35:12:ca:ee:5e:99:bb:d0:04:
81:0c:b8:dc:1f:73:c9:e6:b8:ac:a8:ba:19:a7:d6:78:21:5d:
28:49:30:86:4b:f3:54:1b:7e:4b:a2:f9:4c:f3:5b:04:8c:d4:
37:6a:6e:6c:d0:5f:68:5e:31:df:61:0d:79:4b:ab:93:56:b4:
ff:1e:34:0d:1f:09:31:60:24:32:22:00:ca:3a:63:ef:18:a0:
6b:e0:1d:ef:da:b4:44:0b:93:3a:6d:14:b1:4a:7a:6a:02:19:
79:9c:e8:7a:52:d0:ef:e2:d7:76:26:0f:d4:25:94:e7:c3:14:
f8:b5:26:2e:f8:04:58:de:49:29:0f:49:78:a0:a9:92:78:9a:
3e:86:96:b4:a1:c1:38:20:de:e8:d7:6e:c6:7d:78:b9:73:cf:
89:bd:45:9a:9c:46:e7:a4:19:26:bb:3c:5d:79:4a:d8:54:2d:
53:e8:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:59 2025 by rpki-client