Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: dtZ6kzLwRQZQ04kFhYyN8U246F6McX6qHzIOisTNVPk=
Subject key identifier: C7:9A:85:69:F7:EB:24:16:EE:2B:1B:58:FD:EC:1A:F8:38:F5:11:99
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 0198D54E5473C90AE02C43733B79E0800D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: mHl5slZiYu8vv84AINkxymdWXa4UwrRVAmHx4asns3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:54:73:c9:0a:e0:2c:43:73:3b:79:e0:80:0d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=c79a8569f7eb2416ee2b1b58fdec1af838f51199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:09:87:78:87:d9:b8:d7:97:2c:8b:5d:85:
a9:2c:29:64:34:3f:92:f8:b6:93:48:9f:15:f7:10:
87:03:48:0b:87:70:ad:3d:27:f2:50:79:e0:57:9a:
c9:1c:e1:59:47:42:5e:2d:ff:dd:97:a9:41:b8:79:
ad:22:6f:d1:1c:91:77:4a:51:c0:4d:e2:1a:b3:32:
91:a4:12:fd:8e:dd:dd:ba:78:5b:9a:9b:81:b3:04:
11:97:b8:d1:24:f7:57:c5:cf:d1:41:8d:62:46:da:
71:fa:bc:32:ea:3f:e0:0e:7c:40:10:cd:64:05:5b:
57:de:b4:f2:ce:fd:5f:39:ea:bf:4d:24:97:34:26:
b5:ba:85:de:5c:ac:c7:d6:ec:de:97:cf:47:50:c6:
a1:8d:5b:86:f5:fa:af:eb:a8:bc:43:2f:15:28:0d:
b9:93:77:ff:7b:b7:e0:6c:ea:49:57:f8:1c:fa:70:
a8:03:a0:62:a8:b8:f9:e8:b7:47:ac:61:2f:ac:38:
b6:59:e3:7a:dd:7b:86:e7:d5:7b:db:07:8c:8a:4b:
31:ec:be:40:2e:75:0b:f0:93:c8:e5:1d:37:e4:a0:
12:fa:04:97:10:e3:76:d1:18:50:82:a2:0a:3c:79:
ec:51:92:a0:84:3a:61:28:92:0b:2b:67:c3:d3:00:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9A:85:69:F7:EB:24:16:EE:2B:1B:58:FD:EC:1A:F8:38:F5:11:99
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e2:09:84:9b:a1:ed:0c:fb:2d:03:ae:70:72:cb:82:89:56:
df:96:8f:ad:c8:d1:96:17:37:c3:56:26:6c:96:3d:28:5b:68:
85:95:e9:28:e7:84:db:fc:fb:e0:9a:a9:17:3e:1e:08:e4:cb:
a4:ef:ad:5b:02:8f:5e:3e:10:01:ee:5c:ed:1c:4d:b3:4c:b1:
1c:89:f1:a4:b8:65:f4:ce:e7:3f:2e:be:06:b0:be:f2:c1:b5:
f5:a3:d1:25:1e:e7:ea:f2:3a:0b:bd:19:67:a0:0e:42:59:3e:
e1:45:c0:0e:7d:b0:14:56:f9:62:55:e6:62:60:6a:6a:63:f1:
80:0e:09:30:ff:9f:07:a9:8a:e5:d7:bc:25:11:1c:67:b8:a9:
ac:8b:94:4c:7b:7b:77:cd:07:54:71:19:75:4b:21:d4:82:ce:
c0:93:7a:8f:38:95:ab:34:22:ab:9e:b1:b4:d6:a2:04:6e:3f:
e6:62:f9:16:8f:f9:29:a4:c3:f2:8f:c2:37:ca:4e:b1:15:dc:
05:92:e5:0a:f2:4c:6e:b3:98:5c:65:2b:fb:0c:74:37:0c:9d:
4c:a3:f0:3d:bf:50:fc:0d:44:33:f6:1e:6a:3f:7e:53:8d:00:
78:0f:16:e6:f5:8d:32:3a:b9:d1:0f:e2:25:5b:85:ff:17:aa:
7d:99:d5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:40 2025 by rpki-client