Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: Al2e59QpCl82ByBHtDU4ljOULmoqxRJ+Hv3kNnMYrG8=
Subject key identifier: 30:6A:32:B6:1A:8C:EE:22:CC:8F:20:F3:50:F4:96:F2:F4:38:C7:FB
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 0198D5BBFBA914AE7FAD569C69E2B3D16644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 0605
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: mXFlGWGf1e02QzdwqsYxhLTZQuZBmJHDHbb7KV9nvKs=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fb:a9:14:ae:7f:ad:56:9c:69:e2:b3:d1:66:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=306a32b61a8cee22cc8f20f350f496f2f438c7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:2a:4c:78:60:cc:2f:e4:ba:d2:29:88:aa:
c4:4f:91:6f:d7:33:98:12:7e:ca:81:be:cf:98:12:
27:19:db:6c:d3:2e:f8:6b:5a:10:d2:ff:bf:f4:40:
52:85:af:a6:b8:dd:16:11:f6:fc:43:1e:22:2c:bf:
84:b5:dc:cd:e2:06:9a:05:f8:10:95:ad:6e:bf:e0:
5e:a1:3b:8f:77:1f:77:c2:e0:73:3f:c5:61:89:2d:
21:af:c6:dd:94:09:59:ba:e0:8f:d6:50:0d:9e:1e:
24:54:b3:bf:d6:68:8e:8e:3c:3b:fa:d7:9a:22:22:
70:58:c8:86:16:03:a6:88:6e:b4:8e:5f:83:c4:fa:
e0:67:c8:21:fe:5c:46:bd:02:f5:e1:07:48:41:82:
69:bf:be:8b:d3:96:e4:02:05:7f:0a:8a:b4:1d:86:
ac:38:6a:68:b1:f3:3f:86:3b:0b:f8:5c:c6:b9:77:
28:01:fd:f5:f8:ab:03:57:f3:d1:3f:da:dc:04:a6:
35:c9:16:b8:8d:ab:c2:56:1a:bf:04:55:7f:76:37:
20:37:b7:1b:fb:55:e5:18:f7:e5:45:63:c6:0d:49:
da:ca:3e:92:ad:e1:32:61:f1:c5:ce:eb:4c:41:4a:
e5:fc:2f:cf:3b:e7:e7:3d:97:85:3e:9e:40:68:b6:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:32:B6:1A:8C:EE:22:CC:8F:20:F3:50:F4:96:F2:F4:38:C7:FB
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2d:df:29:da:cf:80:b9:4d:63:5b:bd:1b:6c:42:ed:da:3f:
1e:76:2e:68:87:91:aa:b9:d1:b6:ba:a0:67:23:74:28:4e:46:
a8:e2:13:15:f1:69:7e:45:ae:82:f1:34:c0:55:5e:e8:33:15:
1f:5e:cb:ca:3b:1b:a8:b9:0f:85:e6:d3:6f:9f:73:80:3e:f1:
0d:b3:ea:65:89:c7:8f:0e:93:52:fb:40:a8:6e:b7:ca:c4:f5:
ff:e8:6b:44:25:26:97:4d:c7:18:9d:ac:23:c0:c1:44:b2:95:
4c:13:a8:1a:13:50:0b:ff:61:4b:1c:fd:6b:8d:5b:2a:1d:d6:
ce:15:11:08:b9:6f:f4:27:e3:36:7f:53:81:d7:fd:79:6f:9b:
36:73:88:08:fa:b3:ef:46:81:17:a8:66:2f:1a:18:54:f5:2c:
5c:58:76:98:de:a0:ff:21:34:ea:cb:c9:9d:34:af:e0:f6:22:
83:04:bb:4c:9e:05:cd:87:07:cc:a7:8e:31:66:a6:4d:7d:5a:
fc:a7:b7:f9:c4:c3:f2:00:f5:96:7d:c6:61:67:be:28:79:8c:
13:dc:1c:13:a2:7d:58:5d:e1:c1:c8:9e:d7:71:30:95:93:b2:
ff:56:ef:27:a9:6e:56:df:f3:58:e8:dd:e8:e0:86:80:0c:33:
ec:80:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:58 2025 by rpki-client