
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier: KkpTAopPevKjWWFLVNtlAzTYfdGcY1gxXFNzMfwyu/0=
Subject key identifier: C7:51:26:01:A1:38:36:21:60:01:51:A4:F2:AF:53:90:7E:E0:03:09
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 0198D6614EE89702FB38CC4F23049A16E54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number: 07D0
Signing time: Sat 23 Aug 2025 10:02:38 +0000
Manifest this update: Sat 23 Aug 2025 10:02:38 +0000
Manifest next update: Sun 24 Aug 2025 10:02:38 +0000
Files and hashes: 1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=)
2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: JMIrHEHfVQ8gmCZtl2s8KkGVM/VtxyBFGXxDfnq17J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4e:e8:97:02:fb:38:cc:4f:23:04:9a:16:e5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Aug 23 10:02:38 2025 GMT
Not After : Aug 24 10:02:38 2025 GMT
Subject: CN=c7512601a1383621600151a4f2af53907ee00309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:da:f2:98:75:f6:eb:a5:f5:7e:c6:74:3a:
25:44:14:f5:e7:c2:07:47:56:e3:c7:bf:59:d4:40:
ae:02:2e:cc:a8:37:e3:3b:65:65:cc:50:e4:a0:2e:
0f:38:07:dd:96:70:98:a0:0c:f4:54:69:5b:15:a6:
01:83:56:77:0d:8f:11:44:61:69:f8:e1:81:ff:d6:
dd:20:ea:ef:55:13:12:c3:16:b3:a6:e4:a9:50:f6:
56:81:b9:90:9d:cb:ad:66:51:c8:4f:74:6f:fc:32:
7c:29:25:19:db:a0:9f:85:e6:ca:20:24:c7:a0:3b:
2e:17:74:1d:be:1b:78:a3:46:97:38:b8:fe:33:7b:
c4:ce:10:a4:d6:49:3c:b2:62:a5:77:de:3c:b9:57:
fd:37:2b:e1:2d:2a:53:fb:bb:38:09:ab:4f:8c:1b:
50:59:ff:5d:03:57:c1:79:0c:71:15:c9:79:84:b1:
31:4e:ba:14:ca:88:36:68:c6:b1:6f:77:7a:80:ea:
f7:97:a0:e1:a1:b9:59:99:3f:86:f5:4a:66:cf:21:
bb:23:80:4a:69:57:f5:f3:52:80:5d:c1:08:a9:ae:
7a:25:df:b8:70:a2:18:4a:42:fd:a3:7a:fd:9a:50:
a9:48:ee:3c:c0:e9:e6:d2:b8:b6:8a:e2:31:df:79:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:26:01:A1:38:36:21:60:01:51:A4:F2:AF:53:90:7E:E0:03:09
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:92:c3:76:c4:94:d9:a5:bf:6e:0a:25:5a:a3:3e:7a:fa:
90:b4:e1:75:a2:cb:af:13:eb:3b:5a:ba:1f:8a:20:3b:39:ff:
25:47:a2:53:09:b4:7f:50:61:c4:d2:1d:60:f6:75:48:a6:9c:
de:ad:86:84:19:8a:ff:a9:1b:85:9d:4c:5e:5f:28:3d:a3:04:
87:6c:bf:6a:d5:58:62:2b:0f:a0:34:16:85:d9:c7:6b:f3:b3:
ed:11:b4:c0:b3:b9:94:a5:5a:7d:cd:8f:f9:0d:c1:b3:49:17:
74:c4:ae:87:56:a0:e8:4e:1c:ea:e2:11:b2:2a:4b:3c:ca:53:
00:e8:af:24:4d:27:a3:65:a0:0c:2a:d6:4a:d3:13:3e:d1:a7:
c2:0d:80:19:ed:2a:1d:ac:a8:42:df:f5:11:0f:01:c7:be:08:
e3:36:90:72:31:8b:f5:28:a1:68:05:2b:7e:35:68:45:be:7d:
27:77:e0:f7:4a:f4:8f:49:9a:22:cd:c5:54:3f:94:8f:6a:0e:
b7:04:14:cd:27:fa:bf:5a:8d:c2:3a:85:97:bf:d9:0f:2a:b4:
be:22:3a:bb:57:f1:f6:f7:b6:0d:1f:c1:a5:cb:07:fd:2b:6d:
9b:7e:10:4e:a0:fc:12:3b:a0:74:ca:98:43:5f:b4:67:63:ff:
fb:c5:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:25 2025 by rpki-client