Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: Znh8WdTICk7VBnHv2aAMPrCJVkDQ47v7Ft7x+OGvcDg=
Subject key identifier: 89:88:20:82:F1:F2:3D:4E:7E:8B:17:38:99:FC:A7:DA:9E:91:1F:31
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 0198D474202B012EFC51F1553FBD161633B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 01:03:56 +0000
Manifest this update: Sat 23 Aug 2025 01:03:56 +0000
Manifest next update: Sun 24 Aug 2025 01:03:56 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: cG3L3K7UHRZ+wz9CxO6BvVtwZOliwOiZCYd4eMHdDjM=)
2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:20:2b:01:2e:fc:51:f1:55:3f:bd:16:16:33:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Aug 23 01:03:56 2025 GMT
Not After : Aug 24 01:03:56 2025 GMT
Subject: CN=89882082f1f23d4e7e8b173899fca7da9e911f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:0b:01:ec:9d:1c:46:7b:84:aa:e0:91:15:
d4:58:9b:42:ae:71:ef:f5:fa:cd:9c:bf:12:47:84:
46:4b:36:c0:ad:ef:f6:54:2d:02:7e:c1:d9:60:75:
b9:a5:9a:25:b4:a3:f6:6f:66:16:fe:ca:3f:51:87:
e4:51:e6:59:76:f9:3b:30:6a:c4:60:1f:07:f9:d8:
e7:ef:33:a3:8a:c5:4a:34:57:bb:e5:98:fb:4d:3d:
2e:0e:fe:12:e9:9c:13:0e:d3:cf:65:97:af:5b:4e:
13:c8:76:4f:35:4d:21:73:df:3f:d5:40:8a:f6:d7:
1b:59:1b:a6:5b:eb:b5:56:56:55:3c:ce:87:e0:40:
2f:14:04:cc:7e:af:02:ca:cb:ab:08:a9:ec:66:5f:
c4:ee:b8:73:5a:9c:d0:53:62:67:d3:d8:cf:7b:c1:
4d:1a:f0:5b:16:64:f2:62:0b:c7:ee:a8:8d:10:fd:
de:8a:9d:b9:94:3a:a4:4a:e9:03:21:29:90:b0:61:
1a:70:47:34:27:c7:2d:c2:3e:ef:25:29:67:84:d6:
07:43:ca:4b:53:ee:1f:b8:44:db:7b:bf:49:26:c9:
29:bb:72:1a:1d:ae:6a:56:8f:3a:cc:56:d3:76:30:
e6:ad:bd:cd:d7:62:6f:e2:e8:ca:2e:3d:a9:c5:a6:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:20:82:F1:F2:3D:4E:7E:8B:17:38:99:FC:A7:DA:9E:91:1F:31
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bc:26:30:65:36:0c:ed:f5:46:43:71:3f:91:e2:1b:54:39:
1d:56:43:d1:bf:37:f3:a6:29:89:36:e5:0b:60:af:dc:a5:1b:
4e:6e:8b:db:1b:8b:67:b2:bd:c7:bb:91:79:81:c1:ef:78:16:
50:33:77:56:a7:dc:fd:ba:d6:9b:fb:5b:41:30:fa:4a:12:e9:
ba:b0:41:07:8a:89:d7:68:4a:30:7d:7e:4f:41:45:71:ca:7f:
63:ef:b6:9b:13:2e:d9:5b:e6:cc:49:2b:bd:5d:c1:ef:f1:f7:
65:81:64:a2:88:12:e3:1d:5d:79:bd:d0:7d:4e:e3:31:e8:fa:
b4:46:3a:f0:bb:ba:c8:ab:db:6c:a5:dc:21:60:92:e3:59:44:
47:98:75:8e:72:ca:45:a5:2b:ee:87:d9:a3:de:fa:2d:4b:55:
71:73:47:27:85:a3:3a:0d:0a:8c:8e:2f:1b:89:f3:b7:9e:5d:
84:fc:35:da:61:24:d2:0c:a2:bd:8d:63:98:94:91:44:06:91:
7b:0d:b9:60:f4:03:84:aa:af:00:fb:a0:32:fa:20:cc:64:ba:
e2:0a:65:ef:03:4f:a9:b0:50:e5:ea:e8:17:d3:ef:7a:fe:ae:
4e:66:26:a9:3e:57:ae:cc:80:ad:2f:f1:0a:7d:9d:92:4c:4a:
a5:bf:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:20 2025 by rpki-client