Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: RAGxhUMKoadqmfvvgfw52xyVM2RRkszml3uoyWLXBag=
Subject key identifier: F0:4A:6A:23:46:D7:94:BC:ED:80:9F:96:06:DA:AA:94:F7:34:E6:53
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 0198D4730653AB4F171A46AC33A913571EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0A5E
Signing time: Sat 23 Aug 2025 01:02:44 +0000
Manifest this update: Sat 23 Aug 2025 01:02:44 +0000
Manifest next update: Sun 24 Aug 2025 01:02:44 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: isOapXLEscuhnwtSxX+mzBbNKqhgBIwOsG8b53wZ8es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:06:53:ab:4f:17:1a:46:ac:33:a9:13:57:1e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Aug 23 01:02:44 2025 GMT
Not After : Aug 24 01:02:44 2025 GMT
Subject: CN=f04a6a2346d794bced809f9606daaa94f734e653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e1:20:a2:bd:c0:fe:ad:46:25:fe:f5:cf:7f:
d2:8c:18:74:91:34:11:d0:e7:c4:77:20:90:1a:34:
f1:44:d5:91:d8:ad:a8:6e:4e:c4:db:2a:2f:af:3e:
58:45:88:1d:31:3c:5c:31:0a:55:2c:3f:a3:51:6d:
a6:73:e0:7b:5d:ee:f8:9e:63:4a:bb:81:91:7d:d1:
bb:f9:08:55:9c:a0:c5:00:ef:e5:35:e3:ef:ef:5a:
08:44:e1:6e:33:17:29:00:77:fb:e4:d9:26:89:19:
ca:42:e5:68:5f:eb:ab:fb:61:fd:7d:d8:84:b3:f0:
69:4f:5d:a4:07:5f:4b:f1:ec:9a:a0:4d:a9:ba:27:
f0:75:a3:35:9c:61:2c:8d:02:91:7e:b5:b9:5b:96:
0d:d4:8b:99:9c:09:f1:dc:bf:f2:db:b2:d9:aa:9d:
d8:4a:50:02:ec:69:58:5a:45:53:be:21:4b:4a:d1:
d7:10:59:23:dc:df:78:73:ce:c8:fc:8b:60:5f:72:
d1:90:da:76:de:27:3d:98:a8:3a:51:03:0f:7d:a7:
a1:9e:4b:2b:53:bf:44:8e:48:f4:40:c6:f6:e3:4e:
ed:fe:d1:ed:69:80:dc:8b:9f:41:c5:d1:2e:cc:e5:
45:ce:d2:35:c6:ac:c7:cd:49:3c:4a:e5:6f:5e:d5:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:6A:23:46:D7:94:BC:ED:80:9F:96:06:DA:AA:94:F7:34:E6:53
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9e:f8:b5:00:11:2f:62:ec:52:5e:a0:b0:dc:81:78:8f:15:
7a:14:ff:4b:29:ec:66:e9:1f:f6:e0:40:f6:70:f0:a8:42:fd:
77:a8:14:3c:ee:43:46:c9:4a:32:cf:19:c3:ae:78:d0:ee:dc:
c9:86:d8:9b:23:9e:61:11:49:93:98:f7:2a:5f:2e:2c:42:20:
d4:75:0a:ac:d6:3b:e9:af:df:e4:81:66:02:e6:a1:a7:5a:d0:
da:56:78:3c:d8:b5:91:5e:7f:bf:97:77:83:78:c4:e5:48:8b:
85:3e:32:ad:cb:80:47:e6:83:71:04:3f:78:5a:b7:10:ee:e8:
7e:f3:a6:02:4e:aa:90:7b:5b:86:1e:4a:45:8a:bf:7a:1a:34:
c3:5d:91:95:46:be:b1:10:2b:c3:7d:ae:83:52:d1:4c:7f:75:
14:cf:90:d0:81:d0:9d:65:11:ac:83:36:de:83:41:0b:ed:37:
c1:28:64:1c:bd:15:ae:c1:51:40:b4:11:3c:b5:1b:dc:ed:d1:
55:b5:26:f1:d4:3d:a0:78:7f:39:3b:0f:68:f9:fb:ce:06:75:
5e:eb:01:02:3d:61:4d:2b:9f:a6:59:f7:f2:ed:66:58:4f:1f:
78:06:bc:78:5e:89:61:cf:30:cf:18:2a:df:9d:8f:3a:42:23:
02:3d:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:57 2025 by rpki-client