Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: nQ96fFjiOZTiIFIogYZmzJU6rmFhFBDb0xihuWCZzO0=
Subject key identifier: 90:DF:7D:72:7C:51:86:96:A2:E8:CC:F5:F5:31:9E:B4:07:15:DC:ED
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 0198D5835ED6F41B5260D07A03CC2336FCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 09E3
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: BfyUax/df8mS9EGKBU+vjFdS91OhU8/NmoV+HB9bLMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5e:d6:f4:1b:52:60:d0:7a:03:cc:23:36:fc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=90df7d727c518696a2e8ccf5f5319eb40715dced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:81:d8:5a:dd:5e:c7:9c:d7:8b:70:5d:8b:
1a:84:12:98:be:a6:ba:7a:f1:91:b5:6f:71:30:48:
2b:8b:bf:10:45:95:7f:5c:05:66:1d:5a:75:59:bd:
2e:3a:44:b3:5b:c3:7a:28:1c:af:55:8f:08:e6:6d:
3a:40:d1:9c:a2:27:7b:e9:60:3d:06:53:9e:34:6d:
f1:85:02:2c:9c:ee:77:9a:fd:07:97:89:a1:8d:69:
18:29:22:2f:2d:57:f6:c8:7e:de:ec:66:19:9a:78:
bf:89:13:71:64:f7:6f:21:9f:fe:4c:db:1e:d1:ac:
13:dc:f4:9a:31:cf:33:38:d8:01:4c:f3:7f:96:71:
34:19:a9:01:f9:42:52:72:13:86:e4:de:53:cd:c1:
7c:61:dd:8d:13:de:a5:55:de:bd:ce:a6:1f:c6:db:
2f:d9:26:d3:a9:1c:98:69:76:63:89:e9:a9:83:44:
74:5f:af:ba:86:ee:c8:cb:11:89:ad:43:52:d4:4a:
e2:84:2f:95:3a:11:e5:c0:5b:19:5a:7d:1b:67:ca:
76:d1:7d:cf:f2:17:3f:bf:f5:e6:9b:89:6f:a2:98:
bc:d2:3d:1b:b4:7c:71:0b:75:8b:c3:32:e6:4f:3e:
5d:7f:09:68:77:e8:78:4c:6d:e2:87:8a:28:80:29:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:7D:72:7C:51:86:96:A2:E8:CC:F5:F5:31:9E:B4:07:15:DC:ED
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:73:78:8f:74:e8:ab:08:1a:80:97:f2:ea:f1:43:80:f5:90:
c3:af:d4:b8:d9:76:3b:c8:07:66:d4:1b:32:93:f3:6b:35:d9:
22:4b:6d:e6:17:db:69:e8:9b:0e:51:c0:b7:d0:41:83:4c:1d:
a3:d6:4e:df:75:9f:be:01:08:1b:b2:e0:51:fa:df:d1:18:7a:
dd:e1:11:1b:20:2a:7a:03:ab:33:2c:f1:80:de:6d:b7:8e:62:
cb:f3:d6:43:6b:65:d4:b5:8e:19:97:cd:88:f1:f3:9f:ce:11:
bd:38:02:02:44:99:b8:d0:04:9c:a1:40:2c:2d:98:b5:8b:c4:
ea:51:97:ce:bb:3a:9f:a2:ba:06:78:03:2c:28:04:f7:57:5a:
19:14:ab:28:64:7a:e1:e2:d2:c4:21:f9:58:1b:a3:83:1c:77:
0f:ae:af:83:55:be:d3:28:5a:5f:94:52:ff:26:9d:cd:5d:10:
ec:b9:04:cd:e0:7e:25:ea:aa:e7:cb:b3:33:e6:7a:9c:fb:0c:
fa:b0:c7:dd:91:ca:aa:73:7f:da:9a:eb:63:43:8a:b3:d6:a3:
98:64:e6:b2:00:a7:ca:5a:46:11:61:68:d3:ea:e6:d8:0f:be:
a6:14:fa:1e:00:45:1d:97:19:25:2f:a8:1e:7a:48:3b:1a:9c:
e5:71:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:03 2025 by rpki-client