Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: O1R8n9O3pA9hg6Lk6p59Gm7Wj1k0lyPoaPhC/ShkjoE=
Subject key identifier: 8A:77:3D:28:E8:A1:3D:F7:C7:E6:9D:C8:AE:A4:54:DA:B6:85:69:83
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 0198D5F143D3AF1B238F79534E94570D23F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1607
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: CYV45A/zOmmeE9iJqRZC5UqL1BTI6Bqi2kUylMVi1mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:43:d3:af:1b:23:8f:79:53:4e:94:57:0d:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=8a773d28e8a13df7c7e69dc8aea454dab6856983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:46:63:aa:73:65:32:fd:8d:39:5e:26:d5:
08:02:3f:49:8e:23:f6:e8:d1:c9:a1:87:b6:c4:77:
71:14:a0:8d:20:ed:cd:75:f2:e5:cf:c7:b4:20:58:
06:11:d4:45:39:40:d7:f4:59:a8:e4:77:09:1d:95:
4c:f6:f9:57:d8:fe:09:37:f0:c4:3e:c7:e4:ad:87:
68:30:18:67:9c:f5:5d:70:3c:3c:ba:1a:81:e3:ef:
52:a1:5f:a7:af:d9:b6:e8:29:b6:e6:f5:70:16:f6:
ef:d8:ca:25:fc:b1:50:67:c5:9c:35:7d:b0:de:da:
4e:d3:e7:78:a2:fc:5d:61:31:66:59:31:37:71:67:
49:e3:6b:3f:14:dd:22:1b:07:fd:55:a2:28:5f:f4:
56:5d:ab:6f:11:18:53:f0:34:4d:cc:53:d6:6d:f8:
ca:7d:24:5b:b1:f0:e1:03:cf:be:70:01:dc:4f:da:
ea:42:16:c5:d1:31:55:f6:8c:f9:d6:11:28:d0:6a:
92:52:a6:4a:bd:41:f1:71:a8:56:70:48:24:83:5c:
1d:81:1b:ec:9b:9d:ce:90:ea:42:42:32:67:dc:bb:
a7:03:f1:8c:03:39:11:8a:37:41:04:ab:c8:85:e5:
f0:9a:f3:28:34:02:df:64:de:79:9c:fd:64:e0:76:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:3D:28:E8:A1:3D:F7:C7:E6:9D:C8:AE:A4:54:DA:B6:85:69:83
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:58:47:48:ac:91:6e:36:4b:20:a5:10:dc:ef:88:fa:41:50:
a7:74:37:4d:e6:47:62:ab:dc:02:13:f8:45:7b:8f:c6:b4:f5:
7c:5a:bc:f3:80:52:dc:89:a4:c0:7f:13:7d:ad:99:1c:67:7e:
42:22:ed:ab:70:fb:9e:eb:9c:13:18:89:29:59:4a:35:09:6f:
a7:1e:54:6d:ee:99:ed:f4:9f:d9:01:82:ee:f6:45:90:20:1d:
82:cb:63:bb:dc:8f:5e:0c:55:c1:e8:6c:f1:30:0c:5c:d2:7b:
6d:08:ea:a3:5e:67:0f:d4:bf:e6:31:d8:9c:49:0a:a0:2a:67:
f3:29:f4:ab:48:e7:ff:fd:f4:ba:69:61:35:51:b3:64:8a:cb:
6e:b4:66:46:09:fd:00:16:9e:4b:e3:74:8d:ec:a6:51:bd:06:
bb:a7:71:1a:21:82:d5:f0:64:24:86:98:2f:0a:aa:22:2f:b9:
a9:55:db:02:6e:b0:20:f9:97:3a:ec:15:3b:3b:84:36:ef:76:
07:1f:78:da:a0:8a:bb:2e:1e:a6:4d:22:ec:1b:27:a5:60:b0:
28:6e:eb:3c:6c:79:f5:b5:4c:38:3e:3a:a9:7a:76:f5:4d:30:
71:43:fc:c8:6c:b6:b3:a5:ec:46:ef:7a:40:17:d0:40:50:de:
cc:80:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:59 2025 by rpki-client