Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: xnkdVDltFQN6DVyDlFzo6C97uFmw96zsYLmd05lNArI=
Subject key identifier: 4B:80:00:A0:01:F6:77:68:8F:84:6D:36:56:73:50:CF:1F:B3:F9:76
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 0198D515F7AEE3D7DBD10E07A41FF2CF9024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:43 +0000
Manifest this update: Sat 23 Aug 2025 04:00:43 +0000
Manifest next update: Sun 24 Aug 2025 04:00:43 +0000
Files and hashes: 1: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (hash: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=)
2: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (hash: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=)
3: D2QorAtAGpZ4DSilBt-gZlYU1WU.roa (hash: vpJGRRZzUNjxMRhoSrLA2Ov0y70mAO/SHEjk1etazfE=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: kl1C578xnXzYV0NrOqFQoEv8cX7NEqr++5vsXhuF+Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f7:ae:e3:d7:db:d1:0e:07:a4:1f:f2:cf:90:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Aug 23 04:00:43 2025 GMT
Not After : Aug 24 04:00:43 2025 GMT
Subject: CN=4b8000a001f677688f846d36567350cf1fb3f976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:22:51:8f:08:ff:ad:f0:e3:46:c8:f6:67:
a6:58:db:1e:9f:e2:52:ec:59:cc:a8:fe:18:b5:93:
75:5d:37:7b:61:b6:9e:da:92:d2:5b:97:85:a1:2a:
57:b9:29:d2:b6:50:2e:47:1d:b6:27:94:d7:3f:40:
b0:71:c4:cd:38:d6:55:22:57:8b:8a:7f:23:1a:5b:
4f:71:38:01:d6:70:7f:03:a3:f8:af:02:2a:28:73:
1f:9a:b7:ed:14:3a:68:38:a1:59:1e:12:e2:b7:65:
4a:a9:26:91:ad:56:5b:4b:7c:36:04:a2:7d:b7:60:
75:49:7c:39:39:d7:08:0e:29:04:26:66:1a:19:ad:
49:92:96:79:a2:3d:8c:8c:35:cc:63:ba:60:12:3b:
11:b1:27:0a:66:6f:78:65:d1:ef:0d:c9:58:da:77:
e6:f6:9a:36:1a:16:00:23:0c:d7:2d:fc:d6:03:31:
50:e1:c7:2f:45:4e:1f:29:cf:3e:4a:e0:1b:98:8b:
6d:2c:b4:b2:c5:ab:ff:67:3e:e9:1d:c5:ec:36:15:
66:1a:75:92:92:c0:94:76:4b:9b:c6:d6:c7:e4:b1:
29:07:d4:f5:56:7e:e7:52:4b:55:f0:20:34:15:c6:
de:fc:ce:2b:c9:00:a3:9e:5c:cd:bb:d0:e2:45:bc:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:80:00:A0:01:F6:77:68:8F:84:6D:36:56:73:50:CF:1F:B3:F9:76
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:ff:62:03:ca:e2:6a:77:32:b5:ef:62:0e:cf:de:2b:ec:
f2:5b:f3:26:a7:90:b1:19:bd:ca:5e:e5:a3:9b:2e:23:74:1c:
1e:43:0b:5f:63:03:b7:df:5d:44:d9:61:e0:c5:7f:0f:4f:7a:
66:35:02:09:0d:4d:fb:6e:b9:4a:3a:a6:9c:53:6e:66:2d:f3:
8e:85:73:52:ab:70:b9:40:1a:7d:9b:c2:db:ae:24:5b:a7:45:
ab:74:e5:14:51:97:42:b0:69:4b:9d:22:a8:d9:c3:60:94:a0:
30:96:63:17:b6:ac:83:7e:4d:6b:34:1a:02:0a:a6:5f:d8:4e:
65:18:91:e9:8f:18:5e:99:05:b6:55:db:b2:56:bc:78:25:7f:
a9:b5:ca:79:31:7d:e3:64:82:df:06:75:87:cc:6d:e2:f7:59:
cf:37:d1:7b:36:34:b8:90:93:b3:a5:9c:e3:68:7c:5d:5a:69:
6e:ba:f8:d4:42:23:ef:87:c0:ee:39:8d:d5:55:4d:79:ac:b8:
9f:82:2c:01:60:4c:92:ae:b7:9e:e7:b3:64:2a:18:39:37:59:
ee:be:23:c0:42:ae:08:9e:36:d7:72:1d:d8:2b:22:e5:12:ff:
6d:3b:0a:94:5d:1d:42:1d:45:76:90:2c:a0:3c:d7:71:78:2e:
da:31:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:41 2025 by rpki-client