Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: QXhV3EA7bl4tya0nYwbB5xvqDEjS74CJafRNUG8sDvY=
Subject key identifier: 31:11:99:BC:39:E0:14:AD:D0:70:E7:E1:77:5F:91:F3:23:F8:8A:1B
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 0198D4A7B9631150A4AE685DD5B4349F79CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 02D5
Signing time: Sat 23 Aug 2025 02:00:18 +0000
Manifest this update: Sat 23 Aug 2025 02:00:18 +0000
Manifest next update: Sun 24 Aug 2025 02:00:18 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: dJlkjE6SHHocUiOKbzU0xV+JRjYr1zMrBtQxNYkc8vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b9:63:11:50:a4:ae:68:5d:d5:b4:34:9f:79:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Aug 23 02:00:18 2025 GMT
Not After : Aug 24 02:00:18 2025 GMT
Subject: CN=311199bc39e014add070e7e1775f91f323f88a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:1a:94:eb:e2:eb:00:a1:1b:b7:c4:49:2b:
2d:77:36:f9:5b:f4:e3:17:19:f2:76:9f:41:46:0c:
ae:7e:3a:3d:d4:4f:b6:3c:f8:ba:c0:d2:37:35:36:
1f:30:33:55:85:b2:b2:5a:c0:5b:da:dc:14:c1:5a:
6e:60:96:e3:1a:11:8e:72:6b:4a:6f:3e:fc:a8:93:
4b:cf:de:2d:88:ef:44:ff:a9:e9:b1:bb:54:36:90:
d3:35:7d:e7:49:c7:6f:cb:34:b1:15:7b:02:ff:c5:
5f:cc:f2:47:85:8b:65:da:54:7c:94:35:7a:06:d7:
04:8b:f6:a8:f8:01:33:9c:98:ec:6f:41:6c:54:74:
9b:16:cc:69:f4:de:2b:f3:d8:84:e7:0f:7c:5c:45:
93:af:2d:d9:3f:cb:e0:c3:fb:11:ee:d4:ea:2c:53:
8c:11:74:85:f4:e2:fd:f5:54:a6:9a:04:29:fc:51:
56:e1:c9:d6:96:82:26:9e:f7:b5:72:d5:0b:8d:0d:
5b:ab:05:e4:9d:39:de:84:5f:c0:68:a5:5c:df:cf:
1c:2e:52:dd:8e:0c:2d:3d:08:e8:4e:a0:05:1b:68:
ef:de:eb:ee:0d:e7:7b:07:b5:ad:41:2a:f2:bb:3b:
17:35:b6:1f:38:23:ce:2b:f2:ab:4a:2b:2c:98:2b:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:99:BC:39:E0:14:AD:D0:70:E7:E1:77:5F:91:F3:23:F8:8A:1B
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2d:8e:2a:8c:d0:a8:97:bd:32:06:53:06:f9:f0:b6:c4:c1:
45:4e:04:53:ef:bc:be:09:87:e9:16:68:84:94:e5:3e:c2:68:
05:2a:be:77:f2:25:fe:e4:59:9f:85:50:85:32:65:7d:66:73:
96:92:d9:e0:92:f8:31:37:37:5e:74:bd:69:5f:82:25:92:b8:
5e:ac:10:bc:e2:3f:f5:c6:2d:85:fe:a8:eb:29:32:03:b9:99:
bc:68:6e:d6:95:4e:57:cc:19:4a:57:1e:ae:2f:86:51:d4:d8:
a1:87:3b:90:a5:b6:a9:b6:88:c6:fb:0d:1e:ac:e1:99:49:11:
ed:01:b9:a3:55:60:73:d8:35:9e:eb:84:68:7b:6f:f5:40:6f:
6f:e8:e7:42:32:4e:c9:e4:33:80:10:09:88:e3:4a:12:43:d6:
3d:9d:5c:78:4c:83:a1:c9:a4:c4:e9:06:36:43:9b:9e:17:70:
70:82:89:12:19:ee:f9:86:d6:b5:48:18:2e:0e:79:36:df:43:
bf:37:44:73:6a:b6:b8:cd:e1:b6:c8:60:90:ba:71:f4:9b:5f:
9f:e2:0c:53:73:e1:f7:71:3e:20:47:9e:83:5d:c2:1b:b4:d5:
bd:a3:50:49:6a:2b:c2:c0:46:12:d8:ad:34:a8:5a:7d:60:c4:
db:9f:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:49 2025 by rpki-client