Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: dytyRgzrpprP+ibEbxEZH2uf15HWNCQtagqUyAMRiOI=
Subject key identifier: E3:CA:A2:AA:32:CA:59:07:61:6C:04:BA:E8:14:CD:B1:1E:CA:3D:F6
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 0198D5BBB0EC3E7BBB98517BC884C572E621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: u59wiZHFBDBbWCXGpxtJSRQtLJJhDjSEHbYPNdOEvSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b0:ec:3e:7b:bb:98:51:7b:c8:84:c5:72:e6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=e3caa2aa32ca5907616c04bae814cdb11eca3df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:c7:ef:a8:ad:f3:a2:d1:07:a9:e8:8b:86:
d5:b1:0e:32:40:b4:66:4b:b4:5c:3e:79:ec:3d:64:
c0:84:fd:45:1f:f6:29:ac:33:47:7f:2f:60:20:76:
7e:23:83:a2:5e:86:09:88:67:87:86:df:33:99:6a:
75:7e:94:45:5e:ce:80:f8:a8:fa:06:88:fc:cc:8c:
64:2f:e8:fd:66:11:04:45:d8:5a:b8:29:49:2f:79:
c0:b3:fe:43:6d:fa:c9:22:9b:7b:5d:c3:96:78:0c:
5d:2f:8e:45:4a:6e:09:8c:fd:1a:a0:a0:e5:aa:60:
8f:39:8a:5a:3b:6e:c0:d2:70:45:74:1b:24:05:97:
0b:1c:61:23:a2:79:c0:b5:7e:82:2b:c0:f9:e6:7d:
9a:b1:a2:86:0f:5f:00:34:07:e8:58:68:af:13:77:
88:87:d3:54:48:77:e0:55:6d:0c:97:65:8b:a4:d7:
59:2a:d7:83:47:fa:c7:b3:90:d1:fb:30:64:de:8a:
81:92:d4:29:5e:8d:f0:39:be:9f:35:d9:60:07:33:
60:be:74:8f:41:d3:53:4b:2f:ca:2e:c7:2b:c1:91:
b2:8f:36:65:88:21:a4:59:e7:d4:e6:c8:b5:dc:00:
56:da:39:a3:05:0a:39:d5:ba:c7:13:03:9d:5a:75:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CA:A2:AA:32:CA:59:07:61:6C:04:BA:E8:14:CD:B1:1E:CA:3D:F6
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9d:25:5a:a8:dd:fa:78:80:a8:1b:b1:80:34:64:cb:5a:e5:
e7:c5:5c:9f:df:01:07:0e:59:01:01:50:69:4e:37:a2:ee:41:
9c:01:fe:ef:cb:5c:29:83:0e:7d:74:12:30:f6:d4:a3:78:d2:
85:63:67:a7:b1:9a:fb:04:04:67:4b:8c:55:c4:6a:80:ac:a3:
8a:7e:27:5d:bf:b7:f6:4c:d7:5a:ad:67:03:2b:02:2e:7e:7c:
35:64:71:32:04:eb:8b:1c:bf:30:2f:2d:7d:e1:dc:6d:75:d0:
c9:de:18:65:0d:e2:f5:3e:b7:b2:d4:f8:a0:fd:3a:7f:f7:76:
fd:cb:29:d4:78:01:a8:38:16:d4:7f:56:de:4b:d4:63:b3:bf:
d4:98:cd:9c:79:76:1c:b7:65:c1:c7:25:ea:83:aa:39:13:79:
1a:03:7b:df:42:f6:7b:63:62:a9:cd:cf:e2:66:77:c0:a0:10:
f2:47:e7:43:70:cf:dc:1a:52:c1:f9:19:e3:c8:ae:de:0c:2a:
88:fa:b5:f1:56:58:72:ee:80:69:7a:5c:b7:c8:e4:ce:52:30:
8c:50:9e:57:be:01:44:1e:45:64:82:d2:00:5a:82:88:6f:3b:
64:1e:32:4c:72:a2:53:f9:fd:5d:83:ed:74:87:db:48:60:d3:
ee:37:0d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:37 2025 by rpki-client