Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json)
Hash identifier: 6TyJy2GvzlBLfwjUrfYS2lZ2BzhNk/+adLkpJ86R2ek=
Subject key identifier: DE:D5:CE:72:97:2A:DF:86:5C:7D:74:36:41:DC:78:04:37:F9:5F:23
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 0198D660BC929FA3A39B21DD7EAD56EEC75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
Manifest number: 097A
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: hn8hdRvXphRZ6r7guPGZ04oDdSY3VhvLpcR0cxqoAdo=)
2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bc:92:9f:a3:a3:9b:21:dd:7e:ad:56:ee:c7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=ded5ce72972adf865c7d743641dc780437f95f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:8e:fa:94:28:f9:dd:66:6b:a0:ee:02:e4:
66:2f:9f:02:07:a2:64:d7:dd:1a:a4:a1:fe:c5:97:
c5:52:f9:75:9c:e8:c1:a7:d1:a5:93:7d:ca:58:17:
3d:6e:71:f3:11:f6:46:36:31:3b:0e:f9:e3:d9:d2:
98:2a:e6:d5:c6:3f:0a:5c:79:be:d5:2b:fb:e6:8d:
1d:4b:7d:bf:ca:7a:a0:6f:42:f4:ee:ae:11:23:8d:
25:ae:2d:2e:61:5c:4b:52:a7:3c:e0:a9:9c:24:17:
ac:61:96:f3:0d:b0:25:38:b1:d0:16:db:ef:d1:a0:
c2:e3:3a:df:b7:92:ae:08:a3:d2:d1:f3:c4:f5:38:
5e:40:7b:c3:b8:46:d8:47:6a:5c:71:f9:2e:e5:72:
6e:a0:c0:44:91:c3:e0:d1:d3:80:93:c9:38:80:b8:
d9:66:79:58:7c:36:35:af:22:be:6b:39:33:9c:08:
6c:fd:f4:ad:ae:ed:1b:c4:fb:ac:6c:09:0f:54:4f:
03:4c:2d:3f:6a:d7:dd:53:f5:fb:85:46:2c:d3:b4:
8d:f8:35:46:6d:8f:c8:73:a3:08:07:14:83:14:71:
99:4b:76:31:98:c9:c8:d0:26:0d:e4:9d:4c:cc:13:
df:d0:c9:07:9b:69:94:e4:ea:93:ab:84:33:46:77:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:CE:72:97:2A:DF:86:5C:7D:74:36:41:DC:78:04:37:F9:5F:23
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:29:00:f8:5d:c0:0d:9f:1e:a7:8f:b7:57:2e:4e:de:4e:63:
0a:63:69:27:80:e2:17:86:8b:77:ec:27:2a:65:60:4d:14:a8:
60:6c:b3:85:08:6b:cf:b1:6f:dc:99:5d:ed:9e:31:5d:a2:37:
a9:c3:a5:18:d8:07:1d:ee:1d:5e:08:d3:2d:d6:1a:39:4a:dd:
df:cf:af:98:2a:49:29:00:cd:34:8d:78:c1:92:d1:f8:0a:e5:
4a:9b:ed:43:79:e5:5e:bc:1c:01:25:fd:ac:4f:68:ba:df:e4:
3b:04:64:1f:12:87:d0:cc:6f:d9:93:d6:44:53:72:16:33:73:
14:1a:85:df:60:7d:d4:2d:e1:89:a5:01:3b:ef:4d:e0:21:ab:
16:79:bc:df:2b:21:52:b4:46:4a:c9:7a:be:c6:f8:3f:81:c3:
d1:ed:ea:cd:ce:70:e7:6a:c1:58:0b:70:f5:83:c8:38:04:23:
4e:45:dd:fa:51:17:f5:3d:d1:49:85:65:46:78:a6:bc:07:2a:
11:2e:73:53:b9:0b:0c:b4:7a:2d:a1:22:50:74:bf:a1:9c:35:
ff:79:43:19:b5:5d:25:d4:60:49:75:41:4b:5a:a8:e6:2a:13:
47:81:07:94:c3:7d:99:16:a8:7f:98:46:09:3f:c1:0e:60:ac:
fd:ea:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:36 2025 by rpki-client