Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: 9UfkoB7Bh6ZpGnHRJkLQB20CUw4uSyCTmrITiFzci+g=
Subject key identifier: 09:C1:11:52:08:8E:A7:71:55:10:38:5F:C1:EB:06:39:A7:B8:06:31
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 0198D54EB00F96DA2934564B694A42C0F817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: 1W9zXul869RZscsvs7l5z3KjagI.roa (hash: EcxA9lzR2QkCH8ycmVrRxS2eQO5K8wXyLJAAeSf93c8=)
2: 3NRb9X1EKhOfFj7W1iZuXgUl__c.roa (hash: uat5CyrD021kDb22T/rEGSo6dcpWqYuVdcsqucMCWpU=)
3: AWMfWviNywiou7vcfcntqdl-hKo.roa (hash: a1Kd8HUSNMKFctyJDa6Wjjq1nah5PsW35BpRbQ1fKHY=)
4: D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa (hash: FQWh81XYEPS1XmDh6Irb063J9GhFKg9biAGn32Ht5ds=)
5: LEzl9Qk7MYNbOqPpMlU1Ohh8PNA.roa (hash: UHP2n+X3SSu6vIRko8Q/5h8jCVqX5aAXirgs1zpJmP8=)
6: iT5JpsMQzoMkf4XPO_VvntnOa0w.roa (hash: VTobQYz4A3NOi/P7D09YiSGAxG3/JaBEWHaxO+F1IFg=)
7: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: UjjQ/2X3xlzBFGwCUJYTZm6p1vsB/G41rSVIPBqvK18=)
8: wNwYQ8mCvTdznk-R9cIS2uXjf8g.roa (hash: K+cjCT9KGnhV7mdPVbb2wa5gxtLw72aubK2ACr6NLQ8=)
9: ykvaDunnWrInYG8JYdl8FUnhb8E.roa (hash: Ow01zePEbOrkUb4yW1o1FSsU+vG0+EPGDtmmuCC0/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b0:0f:96:da:29:34:56:4b:69:4a:42:c0:f8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=09c11152088ea7715510385fc1eb0639a7b80631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:a3:46:b1:93:09:fd:a8:5e:bf:b5:0c:0e:
69:c4:96:56:b0:44:38:43:04:37:06:8f:fd:d7:2c:
ca:e8:ba:c4:e0:7c:8f:c1:70:84:f8:8e:32:76:e7:
a1:37:73:33:e6:68:66:ee:96:52:54:ce:83:3d:c6:
34:8e:cc:2f:40:46:88:00:ed:d3:47:db:57:91:e1:
3d:a0:a2:5c:82:02:f2:c5:4b:24:cf:28:b5:45:9c:
10:35:68:2f:29:c7:34:f2:2c:1e:a6:f2:56:5d:6b:
61:94:ff:b0:68:d2:82:3f:5b:7d:3e:70:3b:3d:d8:
62:6d:9f:66:f7:72:5a:f8:63:54:83:b2:b9:c4:f0:
e0:55:a2:24:81:b6:22:b0:89:d9:fd:96:6e:dc:c7:
ab:c4:bf:1c:f2:3b:9e:b0:00:b2:26:92:c7:1b:17:
ea:a3:67:f2:1c:d7:b3:1f:1a:90:4b:01:e3:94:22:
eb:c6:21:36:a1:3e:1d:f8:f9:c1:87:a2:a2:8b:bc:
aa:81:68:84:0c:e6:cc:c0:69:cb:84:bf:1a:d8:66:
9c:76:17:bf:9f:71:b2:14:63:9b:bc:9a:41:47:31:
4a:fd:c6:d9:8d:36:f0:0e:49:32:93:77:9d:d4:d5:
f3:a5:2d:d5:f2:b2:1d:8c:ba:be:73:ff:6d:fe:cc:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:11:52:08:8E:A7:71:55:10:38:5F:C1:EB:06:39:A7:B8:06:31
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:2e:e3:a4:1f:01:ff:09:47:bc:e9:cf:b4:eb:83:3e:aa:
7c:6f:0f:1c:1c:77:06:61:4e:36:89:53:2e:46:08:ce:75:ba:
75:0b:cb:2a:8e:ec:09:15:91:a4:ad:76:85:18:04:a1:12:76:
d7:ab:3b:f0:b3:3e:ef:6e:65:ba:f6:9b:0a:e5:3a:30:44:e2:
e0:a4:28:f3:6a:b7:0f:77:f8:f2:4c:d6:aa:64:85:a4:f9:5d:
60:0e:66:72:08:6f:6a:e7:e9:cb:21:2e:22:55:c9:24:35:e1:
ad:18:02:ba:27:24:35:1d:36:1f:00:a7:fe:9a:10:2b:d7:9b:
fc:ca:be:0d:7f:59:fd:66:c5:d1:96:b5:5b:cc:32:b3:ac:51:
f1:6b:06:2c:84:27:af:dc:9b:2d:f5:69:f8:21:cf:e9:33:9e:
c9:81:87:0b:09:2b:84:7d:9a:1e:d5:a9:a1:cb:ce:fd:66:be:
5d:32:a7:c1:33:9c:1b:a4:c4:0e:95:cf:c3:39:02:4e:de:57:
a2:42:24:96:1c:12:16:f5:63:74:6d:22:17:44:5a:b6:ac:8d:
c8:57:2a:cf:75:90:19:bf:46:8f:b9:df:6d:c4:3d:9b:54:db:
72:1c:36:b0:a6:86:e3:ef:e0:21:6d:84:03:52:ca:d2:a8:f9:
9c:de:bd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:50 2025 by rpki-client