Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: knph8SzNIa8/Nq1w0lhjW4eAfaGq+Z+++ijZ+g+57LM=
Subject key identifier: FE:47:8A:F5:4A:FC:33:A4:1E:C6:D7:1E:D8:39:BA:FF:FA:A6:A5:D7
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 0198D4725015A73B9982875B9B52B9540408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 024C
Signing time: Sat 23 Aug 2025 01:01:58 +0000
Manifest this update: Sat 23 Aug 2025 01:01:58 +0000
Manifest next update: Sun 24 Aug 2025 01:01:58 +0000
Files and hashes: 1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: VW99OwSCHc34lt7AXuUTyaaiCNijbuVSHLFVLCR1x5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:50:15:a7:3b:99:82:87:5b:9b:52:b9:54:04:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Aug 23 01:01:58 2025 GMT
Not After : Aug 24 01:01:58 2025 GMT
Subject: CN=fe478af54afc33a41ec6d71ed839bafffaa6a5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:ab:08:f9:d8:84:bc:b9:aa:17:c3:5e:34:
03:15:67:7a:4d:66:d4:13:b7:ec:01:89:2e:03:2b:
ca:35:0f:ce:d7:7c:8b:54:4c:e0:a5:b4:2b:84:8d:
33:04:7f:f3:4f:82:9b:8e:1b:2f:46:ee:e0:90:7f:
2e:97:8b:3b:d3:1f:17:5b:16:b0:76:5d:22:65:d8:
22:b1:9f:3e:c1:ff:23:41:63:a5:40:a6:c7:3c:aa:
c3:d1:03:d9:55:46:ab:e1:3c:df:fb:98:1b:07:fc:
4f:1d:bd:2a:c7:d8:f1:e4:f6:d3:1d:17:9a:f0:9d:
bf:4d:a8:7b:90:73:a0:1a:20:10:b4:c3:bd:b0:04:
f6:e1:83:8c:9d:af:52:5f:40:fa:c8:31:3a:0e:2f:
bb:40:22:e9:bf:b9:d8:ab:52:26:80:a4:a9:e9:b0:
35:08:b2:22:94:0d:9b:b4:4e:85:36:f9:90:62:d3:
20:bf:77:a7:98:49:42:fb:8a:ad:22:1e:14:53:43:
23:31:0e:96:9b:91:2b:e0:a0:dd:92:70:40:1d:4e:
f0:dc:30:d8:2c:65:72:e9:08:6e:76:f9:dc:24:73:
c8:da:bc:4f:aa:df:d5:c1:0a:69:17:25:d4:5c:1d:
6b:ec:e0:61:e0:8f:78:44:26:2b:27:63:db:13:7c:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:8A:F5:4A:FC:33:A4:1E:C6:D7:1E:D8:39:BA:FF:FA:A6:A5:D7
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bf:02:41:c2:1b:71:c1:07:41:af:98:a6:07:05:ef:dc:16:
29:48:d5:9e:6f:76:db:d1:6f:e5:f0:e4:93:c2:e0:d5:97:3c:
54:06:49:c4:1d:50:d4:56:44:c4:6f:c5:5e:c0:44:cc:19:12:
6c:18:88:39:2f:b9:ac:5d:6b:61:cc:49:8f:cd:7e:68:9b:80:
b3:00:de:23:45:1f:2b:e5:76:5c:2e:cb:8f:b8:1a:36:ce:5a:
05:d4:61:01:e2:90:94:fd:bd:da:1c:39:b4:ba:94:3b:46:da:
8f:cf:86:84:09:de:61:33:5e:e1:98:34:63:12:6d:c5:86:28:
f2:c8:71:f2:e4:5d:1d:5b:a1:ad:da:30:7e:c3:4f:e6:a5:0b:
63:7d:c8:3d:21:01:76:e1:d6:8c:e1:15:a9:c7:66:98:01:c6:
d3:74:71:cd:42:e2:36:86:d3:d8:69:de:a1:25:89:b5:6b:d9:
22:ce:6b:ea:5d:a2:49:03:66:71:32:82:6a:e4:c9:32:c8:e1:
ef:49:ca:f4:5f:70:a7:97:04:79:20:ef:83:4f:3a:b3:5d:98:
4d:3d:23:91:b7:83:5e:ca:5c:51:e8:0e:47:e2:21:b2:59:64:
77:cb:ad:d3:4c:93:a6:c3:4f:13:9a:c0:cb:d0:08:50:47:e6:
70:5c:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:50 2025 by rpki-client