Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: QHoUsaqtq79nyB4pQrYzcRbYC68a7SJNkWVo1E5ZZFw=
Subject key identifier: 8B:01:9D:93:46:AD:8F:6A:87:96:36:18:24:C0:86:10:F4:06:79:1C
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0198D6980568D332410490A22F3BFF545F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0918
Signing time: Sat 23 Aug 2025 11:02:23 +0000
Manifest this update: Sat 23 Aug 2025 11:02:23 +0000
Manifest next update: Sun 24 Aug 2025 11:02:23 +0000
Files and hashes: 1: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (hash: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=)
2: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (hash: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=)
3: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
4: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: dwgaDtXcD7FqobAgOcF8Y5WUP1Fkqy5j6wBgjl3Opoo=)
5: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:05:68:d3:32:41:04:90:a2:2f:3b:ff:54:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Aug 23 11:02:23 2025 GMT
Not After : Aug 24 11:02:23 2025 GMT
Subject: CN=8b019d9346ad8f6a8796361824c08610f406791c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:78:0b:7b:14:0a:58:36:20:ed:4f:7d:23:
3a:a0:26:76:51:4e:f2:cc:dd:44:0f:d3:6b:99:4c:
b1:27:7c:ae:55:ca:f8:ea:30:69:fd:7c:59:54:0f:
66:21:46:fd:a8:08:01:f4:eb:18:94:0d:9c:0b:04:
21:cf:25:be:2c:a1:a2:66:40:6f:66:3a:ad:cd:f5:
9a:65:71:b9:6c:28:67:82:a4:80:65:2a:77:4f:0f:
14:89:50:70:f7:c2:14:66:d6:09:a7:25:79:e4:79:
1b:9d:c0:3d:50:a8:4a:5c:c8:97:ff:ba:0f:02:4d:
18:1b:9f:64:bb:bf:a2:8a:0b:94:6c:41:67:7c:12:
9c:75:ef:f9:94:ec:17:c7:a2:30:c9:a3:17:a6:82:
20:f0:ca:6d:24:e0:0b:b3:89:a3:48:c0:8b:97:3d:
f1:25:06:4c:f9:36:d4:2c:3e:41:95:12:3a:7d:aa:
d4:3e:c7:ab:bc:9a:bb:17:85:d7:53:72:e5:ee:c1:
8e:d5:8a:f9:3f:e4:3b:1e:21:2a:74:1b:1b:86:52:
6c:19:7a:ae:b8:d7:1e:24:2e:22:2d:25:80:6f:6a:
31:18:4e:47:59:1a:e2:9c:af:df:76:ef:05:c3:74:
80:b1:e1:c7:45:94:0e:b9:35:b3:5e:aa:b5:7b:d8:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:01:9D:93:46:AD:8F:6A:87:96:36:18:24:C0:86:10:F4:06:79:1C
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c6:0d:7e:05:6b:57:db:05:03:c6:53:b8:dc:a8:9b:44:cd:
45:71:d3:30:d6:ca:3b:b5:3a:15:bb:57:43:16:c3:0d:d8:ab:
3a:74:44:6a:f5:52:a5:06:ce:db:a6:7e:db:32:c0:2b:c8:dd:
95:bf:75:53:e2:f2:fc:ce:48:5c:d0:84:8b:eb:2e:ad:c8:50:
08:1e:27:91:8e:b3:5c:27:b5:1e:d4:af:98:14:c8:9e:eb:f8:
76:3c:f8:d9:2d:a7:2c:58:1f:1d:ec:bb:ec:fb:f5:aa:e3:14:
35:fc:b0:ec:87:01:ac:65:99:a5:d1:be:f4:fa:43:e0:f1:77:
fd:c9:f0:18:8d:bb:26:83:02:3a:44:d9:ae:c5:0a:36:9f:84:
ad:a0:2d:2d:9f:27:c7:8c:40:4b:ab:6d:75:55:bf:cb:4f:b6:
86:cb:51:64:2a:88:8d:d0:ab:41:56:25:ad:a7:34:56:1b:96:
00:44:e9:d9:ad:49:db:f7:ac:a7:0e:d4:d9:ff:d0:1d:e6:1d:
85:56:1c:c6:20:8a:9d:0f:81:88:2c:c5:e1:d4:ec:fc:1c:81:
60:98:52:fd:3f:08:ed:e3:2a:5c:ee:81:79:58:c3:58:9a:85:
c4:e0:1f:cf:3d:d5:e8:48:79:db:10:fd:27:0c:fe:90:d3:55:
a3:11:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:09 2025 by rpki-client