Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: rg1HkpKvMNLd9p78M7a3IN1MUU3NhkCSxgFjCWQ/CsI=
Subject key identifier: 2E:56:60:D1:D5:15:2D:91:6B:D5:2A:B2:0D:18:8A:3B:55:8C:15:9E
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 0198D9CEA9569FF792D0B810340E6D591379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 0F4A
Signing time: Sun 24 Aug 2025 02:00:56 +0000
Manifest this update: Sun 24 Aug 2025 02:00:56 +0000
Manifest next update: Mon 25 Aug 2025 02:00:56 +0000
Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: mQaLQOpHT5h8fRllrh20D16jsgiCPriHyNvEusRL4Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:ce:a9:56:9f:f7:92:d0:b8:10:34:0e:6d:59:13:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Aug 24 02:00:56 2025 GMT
Not After : Aug 25 02:00:56 2025 GMT
Subject: CN=2e5660d1d5152d916bd52ab20d188a3b558c159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:08:c8:e4:1e:e0:4c:2b:50:61:b0:a4:e6:
39:73:9b:2b:85:b6:75:40:f6:6a:d3:17:a9:f8:ba:
7e:a7:59:a7:d9:7b:7a:8c:b6:de:1f:8c:56:9f:de:
6d:2e:aa:cd:d5:1a:10:c5:e8:86:7e:40:8e:40:f0:
c2:4c:93:f6:0e:ef:b3:5f:d2:1c:41:74:51:6a:20:
1b:a9:63:2c:38:fc:32:a4:d5:1b:9f:ef:2c:13:0f:
c1:9c:bd:5f:9c:50:dd:1b:ce:55:06:c9:81:be:2f:
95:08:9a:5d:46:33:c5:2d:54:19:3a:65:b5:1c:95:
0c:65:15:76:85:ec:6e:a5:6f:b8:1a:aa:a8:84:41:
6a:cd:88:ae:ee:bf:a8:5f:80:ed:ef:03:b4:06:a8:
e9:2b:3b:22:c0:4e:b7:cc:bb:91:39:5d:98:51:80:
69:68:d8:37:5b:06:ef:65:c5:75:de:45:69:78:ef:
f5:ad:00:c1:67:04:87:38:ed:19:3f:9e:a5:01:be:
a9:5c:2c:4c:6c:0a:c5:24:bf:77:ef:c3:a5:98:be:
df:b5:df:26:b5:07:9b:73:ae:ba:d8:8f:62:a2:27:
c3:67:4e:7f:fe:60:25:f2:9b:14:92:43:14:df:44:
08:a5:e3:88:43:6f:ad:b0:45:e1:19:8b:f2:93:1e:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:56:60:D1:D5:15:2D:91:6B:D5:2A:B2:0D:18:8A:3B:55:8C:15:9E
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:13:55:81:da:8c:08:b2:b6:2d:e3:7d:47:e5:77:0c:0c:
e2:9f:d4:1a:85:a7:98:66:fc:98:0e:20:cf:b9:5c:c7:11:a5:
e0:fe:02:0e:59:7a:b6:5a:98:76:18:00:b9:8d:ee:eb:72:f0:
2e:dd:33:e3:c9:ed:2f:71:2e:36:2b:60:96:81:3d:b9:a1:c1:
e4:68:1b:ba:5e:0a:4a:e3:1d:81:d8:2e:c0:81:4f:42:fc:6f:
30:70:8c:e1:ae:13:99:b5:2e:4d:64:cc:4f:1e:01:1e:70:14:
56:e3:e1:21:a6:15:6c:71:51:88:f1:34:85:ee:42:bb:ca:2d:
7f:e7:c3:fb:15:ed:f5:58:85:19:68:da:48:b4:73:28:a1:86:
58:e8:96:d2:74:42:cc:1e:55:ab:3a:6e:e0:aa:4c:eb:79:55:
45:10:2a:04:e5:1a:7a:a4:78:a4:6a:13:b7:f7:c9:41:48:49:
2a:d8:0b:1d:5f:02:6b:56:3a:8d:8a:2a:5d:68:24:e0:ff:19:
c7:a1:7b:21:63:00:e0:35:44:1e:80:56:94:0b:c6:fe:48:45:
21:d9:99:e8:38:76:b4:db:79:66:f9:56:69:12:3c:14:5a:26:
0d:ce:3d:e1:73:8e:50:54:78:6d:f5:65:86:92:d1:40:16:70:
15:6e:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:16:06 2025 by rpki-client