Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: UAHVBYS71E2HsT1f+FGNfNX/qcmvrNU+ooBfRfuEBbk=
Subject key identifier: 61:7E:85:4F:68:EF:B2:46:8C:EA:4D:B7:76:0B:53:FE:98:53:AC:71
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0198D7A945D634FCCE3F1AB2F79C02EF7D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 165B
Signing time: Sat 23 Aug 2025 16:00:51 +0000
Manifest this update: Sat 23 Aug 2025 16:00:51 +0000
Manifest next update: Sun 24 Aug 2025 16:00:51 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: VA9o13MfgPC1p/U+ol9/BbR0sCHV84j0j8WNULEeL/0=)
3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:45:d6:34:fc:ce:3f:1a:b2:f7:9c:02:ef:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Aug 23 16:00:51 2025 GMT
Not After : Aug 24 16:00:51 2025 GMT
Subject: CN=617e854f68efb2468cea4db7760b53fe9853ac71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:3f:6b:eb:d0:d7:b4:f9:33:f7:6b:64:fc:
d2:17:b2:7d:0b:6a:19:d1:36:74:1c:8b:6b:29:27:
c4:67:38:86:80:85:6a:4c:65:86:38:d6:2a:ba:b2:
d2:c6:1e:62:40:50:58:64:7f:35:2d:88:01:98:2f:
c9:a2:a3:e6:5a:f7:5e:d2:1a:5b:2c:b2:fe:ba:f3:
0e:11:a9:3e:63:de:43:26:48:21:f2:2b:f3:a4:75:
a5:9f:99:e0:40:31:c2:51:29:ab:e9:ee:e4:25:e2:
e8:ab:63:a3:e5:4d:29:73:d8:02:5a:ab:11:c4:33:
2c:5e:d9:ba:0a:96:df:f5:c1:42:ed:69:e6:14:ae:
5b:e9:70:54:02:55:8f:6d:a9:62:58:16:0c:59:a8:
ec:6e:0a:34:42:52:18:ef:4d:5c:58:38:1b:de:ce:
e4:d7:99:a8:fa:cd:52:6f:59:e5:f0:37:2a:86:d0:
ee:db:29:fa:52:5e:29:16:e2:4b:f7:15:a3:e7:24:
a2:0b:ec:8f:9c:aa:91:2c:0e:8f:06:78:79:1f:59:
ce:b8:9d:84:f2:5c:7c:31:27:3b:f7:91:6a:9d:db:
7f:77:51:31:88:27:56:3e:5a:a3:4e:a2:74:eb:c7:
33:6b:f1:3f:15:46:40:4b:f1:11:93:c3:48:75:b4:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7E:85:4F:68:EF:B2:46:8C:EA:4D:B7:76:0B:53:FE:98:53:AC:71
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6e:1a:b6:bd:91:9d:0e:fb:c8:63:42:ee:06:c7:19:da:bd:
21:30:78:8a:de:dd:d1:08:45:fe:18:7d:5f:b6:f4:8a:86:5e:
91:b2:18:48:09:51:82:fc:40:4c:19:dd:3a:b8:e8:dd:45:9c:
5a:e2:5b:2e:2c:52:9f:48:66:50:71:a6:6a:a7:ec:59:27:49:
34:05:12:53:ba:80:96:28:26:07:a5:f5:5b:08:41:99:90:46:
ea:27:2e:cd:65:97:e1:78:29:7b:ad:24:72:51:8c:fd:14:bc:
c9:4d:f8:a5:00:8b:bf:e2:3f:5f:15:f9:e5:74:98:65:49:03:
1f:ba:ea:f1:c3:44:d9:af:ed:96:51:54:a1:a9:20:87:3d:3f:
fd:ab:23:61:e7:c2:8f:4a:33:65:17:fe:29:8b:10:fe:28:27:
5f:88:5d:21:a4:47:17:a7:55:8f:a7:e5:86:aa:28:b1:f3:1a:
72:86:3d:19:4b:44:61:5a:d5:f6:8d:c7:f0:99:34:c2:aa:12:
75:88:1b:49:e2:af:b8:cb:9f:7e:c8:ec:07:37:15:a7:f5:95:
42:22:f5:66:af:f6:13:cc:15:3b:72:04:c5:de:47:78:1a:7d:
c9:6d:76:37:03:f2:2a:b2:da:a8:b5:2e:a7:b1:fe:a5:8b:08:
b6:47:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:07 2025 by rpki-client