Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: I/fp15FwN8c5gJ/EB5QfdIge4Hg5PrkN1+q1lJaWt6M=
Subject key identifier: E7:57:70:99:5F:3F:97:A8:D3:8D:60:CD:48:31:D4:F7:1C:2B:0F:D0
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 0198D583F293C46BFDFB025CE59DB668749F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: 45SrEhRLFOOEExPH9Bbn5WIjcKw1ZQxvzer+U7Cj6ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f2:93:c4:6b:fd:fb:02:5c:e5:9d:b6:68:74:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=e75770995f3f97a8d38d60cd4831d4f71c2b0fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:4c:2e:3a:c6:4f:c7:08:73:c5:ae:34:8e:
cf:eb:1e:6d:c5:cc:ee:37:d8:e5:7c:e2:7a:f5:6e:
26:42:f8:a7:3c:ac:56:79:ac:50:23:21:72:08:35:
72:97:79:18:c3:0b:91:cb:c2:ca:64:31:83:d1:d7:
02:df:1b:55:aa:bc:00:f0:d8:4f:15:57:75:9e:04:
d3:da:89:29:98:97:8e:42:71:a2:3e:ab:4d:69:e3:
8f:62:a1:75:3a:90:87:68:ab:5e:8b:b2:7a:cb:1a:
55:79:62:13:e3:54:ad:14:df:a5:85:6a:6b:40:97:
da:b3:f8:ef:ff:3b:8e:9a:1d:e7:85:5b:f9:ac:50:
b3:dc:cf:9f:9e:05:2b:6d:d1:dd:61:70:ad:87:8d:
3e:19:5e:8e:89:28:b7:06:2a:72:9c:0e:a2:0e:6c:
0e:4c:d1:f0:cf:47:e6:8b:bc:37:a0:90:65:c2:d3:
64:f1:f3:2d:5e:72:9b:be:68:f8:46:5d:02:59:dd:
ae:3a:b1:1a:29:31:05:44:39:44:ab:b5:64:b9:5c:
83:b9:7d:c4:7e:c2:f6:be:09:d6:c5:81:4a:a1:73:
38:45:32:b8:7c:6a:42:6a:df:33:bd:f1:df:29:d8:
ae:80:b7:1b:a7:38:d6:1d:02:aa:e0:94:dd:f6:17:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:57:70:99:5F:3F:97:A8:D3:8D:60:CD:48:31:D4:F7:1C:2B:0F:D0
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d5:35:4d:5d:c7:b6:fa:63:88:75:05:b8:2a:f8:6c:36:25:
27:ed:d3:0c:b1:d5:a3:5b:27:e5:3c:e0:cf:f4:43:cd:da:d1:
56:b3:49:83:fe:28:32:78:0e:d6:be:6f:13:d9:c5:0b:64:e9:
9a:12:b8:b0:ac:83:77:a5:02:a9:32:fd:e5:0a:68:b1:e5:d4:
02:94:7d:63:d9:f8:9a:e4:f6:04:b7:bf:7f:cb:d4:a8:3f:c5:
f8:f9:25:02:a4:96:92:0b:7f:7d:6a:ad:cb:ea:81:82:2d:8a:
e2:3e:1c:19:98:1b:76:d4:c6:c7:9e:ff:c8:69:c0:d2:2c:84:
4e:81:59:e8:2a:79:5e:d2:3f:49:22:15:cc:dd:e2:fb:44:fd:
16:23:39:44:2f:a7:fa:ef:18:ea:38:60:6d:17:c4:21:f8:68:
e8:54:3f:e3:64:51:4d:dc:29:a9:b4:d4:2b:19:f1:cc:39:fc:
de:89:d0:15:21:db:3c:dc:f4:36:be:ea:6b:38:8d:fa:73:d3:
20:0a:d1:ed:aa:6b:b7:98:9e:6e:b2:2c:09:3f:13:4e:58:e1:
72:23:b7:ca:78:63:85:d6:b5:90:e9:79:f3:64:ad:23:b7:0a:
dd:f7:bd:a5:d3:bc:8b:ac:79:c2:50:0d:d2:41:5a:cc:fd:1a:
cf:b2:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:32 2025 by rpki-client