Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: LmaptTQgKUqWTDyX/kiUwX1xMNlA74d+7Pv4X7yfNsM=
Subject key identifier: EC:F4:73:E8:D1:2E:1A:B5:96:D5:F4:B3:00:C8:79:7E:AB:DE:6B:BF
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 0198D65FDEE33C6C174DFC457FBC17C027DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 1122
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: usxvnSW3frxXKQWhCTagAO/Kg/yE0HMkZHL72HaZqhU=)
2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:de:e3:3c:6c:17:4d:fc:45:7f:bc:17:c0:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=ecf473e8d12e1ab596d5f4b300c8797eabde6bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:64:c2:2a:71:36:b9:68:9c:19:15:bb:bc:
89:1b:1e:43:59:57:e0:89:e0:7b:2c:ab:84:96:69:
86:61:48:7d:dd:f9:f2:cc:fb:72:46:22:e3:a5:78:
24:3b:ae:fe:b9:23:e4:91:61:06:aa:51:21:e3:ef:
bd:4b:cc:34:ea:c0:47:7c:d2:0e:9c:80:85:88:48:
2f:80:f2:eb:29:b2:2a:71:e2:70:59:b0:28:4a:a7:
cb:6f:98:d6:a1:32:46:b1:4d:17:8a:57:2d:93:1f:
7d:d1:28:03:95:db:28:e4:37:12:f8:e2:30:b9:a0:
9e:6e:7a:88:2d:44:3c:3e:73:13:68:21:9e:f4:dd:
91:c9:38:c3:86:5c:f1:57:61:31:ce:fd:87:45:4b:
6c:e8:4a:73:3a:26:7c:92:b9:f3:85:96:2c:fc:4f:
56:fc:74:6f:b6:bf:6e:0d:d7:da:21:d4:4c:06:c9:
f0:2b:78:a2:cd:f6:16:e7:3f:4b:50:c9:19:4b:78:
4f:9f:cc:1f:d1:7c:dd:ac:5b:66:49:a9:5b:83:84:
61:8e:73:70:0b:15:f8:ff:ab:14:49:be:39:a2:3e:
20:7b:14:ae:93:d9:2e:a0:4a:52:64:12:f5:e5:37:
48:80:a6:06:61:e1:c2:55:1f:50:1d:2d:58:9b:bc:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:73:E8:D1:2E:1A:B5:96:D5:F4:B3:00:C8:79:7E:AB:DE:6B:BF
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:91:91:2e:4c:9f:93:54:f6:70:d0:73:97:76:04:d5:42:26:
7b:cd:94:63:d0:ed:0a:68:4e:17:8c:0e:c5:a1:e0:73:ef:f8:
23:fd:3a:b5:39:36:3e:b0:eb:c2:aa:b1:bf:a2:96:a6:ed:fc:
73:e4:65:d8:a7:99:1e:16:ec:37:45:d7:87:93:f0:4d:77:1a:
45:c1:98:70:aa:9a:40:ae:df:88:99:0b:c8:18:12:89:a0:50:
c3:2d:31:c6:a5:33:f5:c1:d3:fa:0f:43:9e:6e:90:39:fc:62:
68:ec:11:90:5f:8e:3a:f2:22:8c:77:41:c0:49:f0:33:c6:b9:
f1:ad:1d:f8:d1:60:eb:8e:57:b7:85:fd:48:83:b2:f2:7b:6d:
f7:5d:f0:27:52:f3:ab:af:88:84:fa:2f:79:9a:81:e0:48:c3:
97:98:9c:7b:05:22:a9:2f:07:a8:e8:bb:92:df:4b:a0:69:c3:
71:8e:97:23:f3:82:d4:d9:d6:1c:85:5d:d3:e5:5f:e6:66:40:
81:0f:52:14:eb:9c:66:16:e4:bd:5c:69:2f:ac:69:e4:76:50:
cd:df:06:75:dd:b8:61:b0:e0:c5:39:55:cf:11:74:f0:74:e9:
00:c4:af:0d:4a:73:6e:fb:e2:08:48:2f:98:ac:15:2b:5e:76:
9e:62:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:16 2025 by rpki-client