Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: 4tX2amxEyAux45Em+yvtiNX6u31ANvOIthD7SAp9oI8=
Subject key identifier: 21:F3:7A:CB:51:33:26:AB:7B:2A:6D:25:18:17:F1:D0:8F:3E:DD:FE
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 0198D4DFCE1C953FF491BE5C34949ECA3C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 051E
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: yMEEtCa1FyR9avVjezDJRVP5uAsr2A8gLOpjA3FIPsk=)
2: qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (hash: 3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ce:1c:95:3f:f4:91:be:5c:34:94:9e:ca:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=21f37acb513326ab7b2a6d251817f1d08f3eddfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:7c:65:5c:f9:f1:61:e8:99:57:6b:ac:31:
c7:f6:5c:2e:b0:04:36:5a:0a:f0:c2:44:fd:67:37:
c3:c3:3b:41:35:bb:eb:40:b7:0a:b2:03:78:8b:fc:
50:ba:50:9b:a3:5c:6e:d4:82:c5:ec:c6:7b:37:82:
fa:96:a2:63:a6:c1:07:4c:bc:9d:f5:fd:62:18:af:
2b:e1:31:eb:8a:4b:31:03:e0:da:1a:88:63:04:3e:
25:1b:b8:fa:21:d3:68:ef:db:fc:6a:66:de:3c:03:
6e:41:d3:93:c3:4f:96:3e:28:74:90:5c:80:72:c9:
63:3b:27:c2:d8:c4:37:02:5d:a3:0e:b6:7c:8f:80:
d1:40:4b:9a:03:d4:9c:4d:9c:0e:0e:af:65:22:15:
6f:79:d0:35:e9:e7:2c:95:b6:18:4d:66:b6:29:7e:
45:11:e5:70:87:b2:03:d6:97:1c:b0:91:0f:35:68:
02:72:00:d7:fc:9d:ee:e7:b0:3b:01:e9:9e:60:3a:
73:02:dc:97:01:d2:4d:12:ee:ce:f0:6e:3f:30:b5:
59:78:ee:7f:7f:bd:8e:36:77:60:da:c5:2c:98:d1:
ca:8f:22:13:ab:5f:67:95:db:19:ab:74:af:1f:85:
43:d2:09:3b:3d:b8:71:71:4b:3a:e8:bc:c9:4f:58:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:7A:CB:51:33:26:AB:7B:2A:6D:25:18:17:F1:D0:8F:3E:DD:FE
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:ce:a7:80:77:c5:3c:5d:88:45:c9:30:95:9e:4f:5a:be:f0:
cd:5c:3d:02:1b:0e:6e:a5:dc:95:a8:55:fd:0f:90:bc:5a:ed:
b6:e2:7a:a9:bf:15:4b:11:6a:7b:b0:b3:f6:4e:97:62:b4:8b:
a9:b0:88:06:6a:dc:1a:a5:d1:74:59:5b:e3:9d:76:d5:e5:5b:
2f:3d:6d:b5:5d:9a:34:76:92:d7:3c:12:14:41:53:93:71:5a:
37:df:b5:44:12:1d:54:3d:fd:91:62:95:2c:9d:60:5c:23:fa:
9c:f3:f1:88:71:7c:07:18:44:40:e6:8c:81:11:21:bd:fb:cf:
ec:43:a2:5a:4e:11:23:de:54:c8:81:bb:4c:e4:47:2a:34:2d:
4e:7c:cf:9b:73:50:0f:05:ce:8a:ac:6f:a4:ed:10:df:28:89:
79:01:3b:af:9f:4e:9e:91:c5:41:59:b8:40:c4:ac:6e:2d:ca:
13:24:3d:bf:25:dd:32:af:0e:86:40:3d:40:a9:2c:fe:95:c3:
f1:8c:22:e0:55:c2:e3:0a:bd:45:62:48:24:0a:f0:86:99:24:
45:47:eb:49:ff:e7:43:83:e6:f4:94:cf:4b:ba:5c:f5:4d:f5:
4a:1c:18:64:4e:7a:24:cf:5b:e9:46:63:8f:5f:46:91:68:93:
d7:2e:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:54 2025 by rpki-client