Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json)
Hash identifier: 4xdtvOQBZMWE+M4ZMGCxUL4coEeuUT9ECsOBGI5hRC4=
Subject key identifier: BC:AE:9C:8E:6B:15:65:DB:15:67:A8:7D:94:B8:A0:75:63:B4:4D:B5
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial: 0198D4A8232ED401DEA52FB2E4A9E9519C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
Manifest number: 0F18
Signing time: Sat 23 Aug 2025 02:00:45 +0000
Manifest this update: Sat 23 Aug 2025 02:00:45 +0000
Manifest next update: Sun 24 Aug 2025 02:00:45 +0000
Files and hashes: 1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=)
2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: 04QfNqUIR0PAWS/iGWvJ5bhWGdn8AR22xOSMNmd1qiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:23:2e:d4:01:de:a5:2f:b2:e4:a9:e9:51:9c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Validity
Not Before: Aug 23 02:00:45 2025 GMT
Not After : Aug 24 02:00:45 2025 GMT
Subject: CN=bcae9c8e6b1565db1567a87d94b8a07563b44db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:19:42:df:aa:bc:4f:3c:48:3f:10:a3:2f:
50:5e:dd:41:5b:80:fc:68:d8:2f:c1:a1:19:7c:a9:
5d:47:0d:1d:db:82:e5:a2:b0:9f:5e:00:e5:02:e4:
dc:b9:ea:f8:8d:1c:ba:b5:1f:03:47:33:fe:8c:b6:
bc:2d:d8:05:16:73:79:cf:c9:b2:b1:92:53:ac:35:
24:60:6b:cd:36:45:67:39:6c:03:d4:31:23:ef:e6:
5c:b7:c2:ad:b4:dc:1b:67:2f:31:a8:ab:90:cb:a8:
6f:9e:92:b1:5b:83:98:d8:37:b2:37:d4:be:2a:b9:
3d:93:b3:65:42:f1:9c:ca:f5:e4:39:90:e4:80:79:
5c:40:66:ce:86:55:59:d0:96:dc:f8:af:ce:e8:37:
1e:9b:19:9f:c0:f9:fe:e3:5f:23:40:af:ff:b9:63:
70:c2:ef:50:40:30:42:25:02:0a:32:b0:c0:b7:30:
41:76:02:d1:73:ad:aa:8b:8a:b0:33:83:22:09:b0:
37:47:bb:b7:ec:dc:4a:3e:7b:1f:c4:b1:0d:9b:c5:
4f:ad:0f:0f:73:cc:fb:c9:c4:34:98:d5:77:52:71:
04:13:eb:b0:49:9e:da:36:71:29:ff:37:fb:c0:43:
62:a3:7a:e1:81:2b:14:f0:b2:0a:4a:f6:f2:e2:7c:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:9C:8E:6B:15:65:DB:15:67:A8:7D:94:B8:A0:75:63:B4:4D:B5
X509v3 Authority Key Identifier:
keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:12:01:60:c2:54:48:b0:f0:c5:92:a4:9d:0a:48:37:ba:
5c:f1:fe:ab:89:ca:b6:6d:b0:29:93:84:ce:7c:f1:01:e4:1d:
19:60:d9:86:0c:54:ab:f6:35:a0:5a:05:18:e7:fc:15:9c:64:
d7:27:42:c6:9c:10:09:4f:15:2b:29:f9:79:cc:67:c4:c8:ac:
65:36:1b:1f:d5:8f:dd:3c:ad:26:21:56:15:92:4c:1a:9a:f7:
f2:0b:86:57:01:c9:f5:59:73:a9:ad:a6:35:6d:0a:9a:ba:49:
7b:6d:e9:7e:4c:24:d7:c2:d3:21:76:22:5f:c7:b0:1b:c3:64:
da:8e:60:0c:b3:7a:92:c4:7c:dd:5a:d7:77:28:63:33:90:62:
97:5e:bf:93:38:03:07:02:6f:d7:6f:45:a3:bc:79:9a:24:ea:
e2:ef:5f:f8:c1:02:73:d6:93:ec:52:02:a3:51:8e:6f:5c:c3:
7f:9e:e5:9c:b5:ae:22:58:c7:e0:d6:34:f2:b7:06:8c:d9:5c:
dc:fc:9d:a5:27:a3:d5:84:ac:08:7a:4c:17:f0:a6:d8:97:6c:
3b:b7:67:0d:47:a4:6e:83:02:59:47:76:61:eb:84:90:75:48:
ca:6f:7b:fc:19:34:f6:c8:5f:00:59:88:9f:ea:c1:5e:f9:8b:
d4:a5:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:55 2025 by rpki-client