
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: Go2h6f/nQqCC2KUiUavH71qkyEqhCgGlckkO2QNyegg=
Subject key identifier: 4F:1C:76:1B:75:35:9C:45:F7:E4:65:3F:F2:21:B9:1F:C1:83:4A:18
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 0198D850A6A2164C5233BDC04EC7303D403D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0DDE
Signing time: Sat 23 Aug 2025 19:03:40 +0000
Manifest this update: Sat 23 Aug 2025 19:03:40 +0000
Manifest next update: Sun 24 Aug 2025 19:03:40 +0000
Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: k1tK7bk7DLlw7qRvLpwzjQXrDKmAeiPMOvWf2HWUwdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:a6:a2:16:4c:52:33:bd:c0:4e:c7:30:3d:40:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Aug 23 19:03:40 2025 GMT
Not After : Aug 24 19:03:40 2025 GMT
Subject: CN=4f1c761b75359c45f7e4653ff221b91fc1834a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:9e:a4:e1:c2:52:e6:e3:ae:25:3b:37:e7:
19:b1:33:e8:74:a4:e2:f9:8a:3a:7f:46:0a:65:1f:
86:6f:56:b9:c6:7e:ea:63:28:55:38:14:87:74:02:
75:4b:87:29:fe:53:fa:f8:af:96:4e:49:d5:39:bb:
48:36:69:54:8e:1a:50:65:cc:19:c8:ce:36:ee:76:
76:19:a0:fa:2c:13:ec:99:d8:5b:4a:4c:86:d2:df:
23:62:6e:b8:a2:61:0c:d6:34:6c:db:c2:11:7e:81:
bc:73:eb:81:75:27:b8:c3:4f:63:24:94:51:18:01:
68:35:09:dd:93:03:6f:88:f7:1c:8e:c5:78:ed:6a:
c3:81:8f:67:b2:db:70:03:f4:f9:b7:5f:e1:8e:b9:
39:74:73:38:5c:12:f4:f6:4e:0b:83:df:d9:cb:9a:
cf:c6:49:b1:ae:99:a9:41:65:25:7f:43:33:56:0b:
d3:71:f3:cf:a0:cb:2b:42:1c:94:26:bb:af:df:42:
b1:b8:90:d9:49:b0:ad:52:fa:dd:03:78:cb:db:30:
44:58:1b:a7:a4:48:89:60:92:9f:33:df:69:21:b7:
2f:dc:15:ed:f7:a5:4b:56:55:2e:3f:5d:22:b5:d5:
62:09:8f:c9:a3:4a:0f:5f:13:d7:13:95:f4:3f:87:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1C:76:1B:75:35:9C:45:F7:E4:65:3F:F2:21:B9:1F:C1:83:4A:18
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2f:3d:77:47:a6:ad:bd:c9:bb:de:2d:f1:32:40:02:98:e8:
8c:f7:9a:55:7a:d5:65:dd:a6:ea:d9:1f:a5:41:a0:d4:d3:e6:
35:10:4b:02:31:9e:41:64:03:b5:a6:ea:c1:7d:98:57:d7:55:
12:ff:82:d8:ac:b9:d1:96:f8:d3:48:3a:fc:c9:b5:42:40:bb:
96:6d:f2:f6:73:0d:f2:1b:fa:e8:65:9b:d6:1b:5b:8e:85:b4:
23:e8:a5:14:ef:af:7f:5f:b8:5c:26:5f:1b:81:6b:37:16:de:
66:7c:12:e4:03:0d:fb:70:c9:ff:f2:10:45:81:59:af:20:0a:
3c:b9:49:23:77:9e:81:3d:bd:5c:a8:62:bb:b2:8a:61:4d:2b:
c8:27:0a:ea:b7:a2:16:df:f3:e4:ef:c3:3c:bd:0a:c6:f9:20:
67:b6:4c:c7:25:e8:57:b5:99:1f:3d:9b:53:80:fa:ba:0a:32:
99:b5:ea:aa:69:2a:02:3c:af:72:7f:84:25:e2:fb:79:c5:9d:
f0:c2:7d:05:c5:da:2c:b9:a3:43:bd:ff:8b:54:22:d6:05:b2:
55:54:5d:a8:4a:51:42:c5:25:fa:dc:d2:8a:04:0b:43:46:2d:
36:23:b6:8e:76:00:2f:f7:c7:0b:2e:66:f2:f4:28:05:d7:b9:
f1:2c:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:40 2025 by rpki-client