Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: 1cYhGTKFF9mKAb6MqPFqOYPv1mbTbUoMf0TkjBeqZ+o=
Subject key identifier: A5:C9:C1:49:77:36:21:49:3F:F8:50:0F:61:42:5E:6A:9B:EC:48:6A
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 0198D5BC300B3DF82A8B15C4B0CAABD941E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 157B
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: FsnKtfkvoLkptSIdbm/npAixGAH0pt5Ypu4AsKgSI6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:30:0b:3d:f8:2a:8b:15:c4:b0:ca:ab:d9:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=a5c9c149773621493ff8500f61425e6a9bec486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:84:fd:08:20:df:a8:07:5c:fc:48:39:69:
83:7b:d8:b6:b8:19:07:74:c7:84:73:ec:32:22:a2:
46:33:df:37:34:bc:62:1f:f1:a8:10:70:0d:dc:f7:
da:ba:6e:9e:ec:39:04:8f:81:12:ce:6e:b1:27:ab:
cd:5e:17:2b:e3:9f:39:c9:b3:6d:3e:87:e1:06:dc:
38:a6:8b:f7:7b:b4:38:0c:64:53:a7:70:be:be:ee:
f2:6d:59:3c:01:09:90:ce:b7:b6:fa:da:ca:00:48:
dd:14:24:28:dd:7c:a8:34:57:84:91:5f:c1:be:24:
34:45:0a:ae:64:be:bc:76:15:62:70:81:36:e4:81:
0f:3d:93:54:55:ea:1e:99:27:36:e0:9e:c9:8b:9b:
b1:ac:85:c4:f5:1a:4c:4a:30:f8:7e:e0:9d:ee:7c:
e7:dd:b0:06:2b:80:45:2f:be:bb:46:ff:33:ca:75:
f5:27:80:0e:0e:84:d4:ba:20:ff:c4:d4:e5:92:49:
ac:ff:2b:7e:b3:05:79:d6:9d:10:de:e8:ec:3f:b7:
ad:33:98:66:75:ba:fc:96:f9:f4:4a:3b:bc:ce:5c:
19:80:14:4c:85:5e:b3:9f:f6:fc:26:2a:d9:05:4c:
8f:fb:9d:83:9c:96:17:bb:74:03:ab:aa:11:46:4a:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C9:C1:49:77:36:21:49:3F:F8:50:0F:61:42:5E:6A:9B:EC:48:6A
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:43:b4:d3:10:3b:cd:ad:8b:f3:ee:31:1c:3a:41:65:c7:c1:
27:2b:a3:ce:dc:bd:de:9a:ca:f2:4b:8a:37:bc:0d:04:a0:79:
7c:3c:e3:06:85:d9:1b:18:16:8c:cf:23:2a:6d:ae:33:9c:65:
a2:06:6c:38:14:69:f5:4f:a7:51:28:ef:51:6f:17:98:f4:39:
33:8b:71:85:96:f8:55:e2:e4:46:43:82:ad:e9:78:95:ab:a0:
27:45:74:93:74:4e:65:f9:a4:25:39:40:79:f8:6b:f5:a5:dc:
ff:ca:83:a7:df:31:18:92:6e:44:83:86:7f:da:41:19:04:d7:
c0:b6:ad:51:37:93:f6:ce:0f:0b:61:e7:d0:67:f7:6c:66:21:
47:8b:0c:b7:5d:4f:c8:58:ca:02:59:0b:73:0c:13:b7:75:b6:
21:5a:95:97:4d:5c:4c:77:3a:5c:73:d1:0a:91:30:46:3b:4f:
1c:fd:d7:c5:7f:e6:83:56:61:dd:52:c6:a5:29:dd:9a:c5:8b:
63:1f:cb:b8:33:84:f5:ac:d1:64:65:6f:a5:f6:a4:69:3f:ca:
91:6e:83:33:e5:64:ce:48:be:79:b8:75:8e:dd:65:0f:01:06:
da:8c:52:ec:c3:29:56:4c:de:4a:b1:aa:fa:c4:37:b1:d2:b2:
2e:c7:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:26 2025 by rpki-client