Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File: ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier: 2MVrAJyMmfQ06r8DKOPZWN7NELo5c6LzN83gYtibGM0=
Subject key identifier: 48:87:B7:CE:BA:34:64:A0:26:BC:FA:60:4E:44:05:A7:05:DD:CB:83
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial: 0198D54DF3DA5C287206A31BE4CF65E6DCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number: 12EC
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: WTmdMFPzU41Yj6CYfdDHa3cKmOo.roa (hash: ZRrWNdq+lRZfywzlRdTcVIMqLndtMkQtQ6MhxjI8HvM=)
2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: 76/B/cVqnaA42QKEoRiP3w9ASiQLhG/U6CwbpwmpgYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f3:da:5c:28:72:06:a3:1b:e4:cf:65:e6:dc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=4887b7ceba3464a026bcfa604e4405a705ddcb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:28:27:f4:cf:16:f2:d5:13:c3:c9:27:5d:
f7:3d:10:e4:2d:5b:92:2d:eb:71:f6:7d:ee:c4:f3:
e5:25:7c:2c:3a:6d:7d:de:de:b5:4b:8f:60:08:19:
47:38:99:1c:3f:c3:16:cb:4c:f8:c3:0f:a7:b9:39:
99:3b:40:c8:a9:ba:9a:3b:04:25:5c:21:5d:12:b3:
da:38:18:48:55:57:5e:ee:ee:0a:9a:53:88:51:e7:
dc:57:02:b5:af:9c:59:41:5e:22:a9:4c:7e:b3:b6:
10:18:31:47:e7:fc:ca:aa:78:9e:f0:19:48:af:96:
d5:89:6a:8a:d8:ff:18:02:7d:e8:cc:a1:b6:bf:f0:
bb:68:1c:7b:1a:2d:1f:a5:de:35:81:19:28:0c:03:
aa:2f:51:4c:4f:e4:90:31:8d:7a:ce:c4:e6:bb:a8:
53:69:ea:66:9c:02:e8:28:6a:77:50:6f:d7:c1:13:
6b:c4:94:bc:44:55:84:22:7e:bd:bb:fc:11:49:40:
c5:62:2b:50:81:fc:29:2d:52:8e:e1:72:e2:c3:77:
18:03:dc:38:a4:a3:7c:fe:4c:65:47:61:04:a9:81:
59:5d:e7:9f:0b:31:41:6d:6f:60:4b:41:6a:f3:50:
16:1d:b1:f9:a8:ac:27:be:08:da:3c:64:fd:58:64:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:B7:CE:BA:34:64:A0:26:BC:FA:60:4E:44:05:A7:05:DD:CB:83
X509v3 Authority Key Identifier:
keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f0:60:07:f6:60:61:de:1d:b6:76:b5:cf:7d:6f:07:94:5c:
17:2e:f6:62:57:7e:f8:a7:ab:8b:eb:6d:81:e8:bf:1e:6a:d8:
d9:23:9d:5c:fa:ac:09:c5:72:be:b2:d6:13:e6:ea:a8:25:d7:
db:0c:ae:93:4f:da:12:1d:79:bd:fc:68:02:61:f8:fe:b6:c7:
db:f0:e5:50:9e:68:f9:40:3c:17:33:a0:47:e8:60:f0:73:9a:
7c:0b:51:78:05:39:14:e1:f6:c3:d1:d8:ba:b1:bb:c0:2d:a4:
57:95:43:47:ed:f3:d5:16:84:13:27:f4:bf:1b:7f:81:74:63:
79:58:3c:c7:92:5e:e9:35:e0:df:81:ef:16:80:f0:09:86:dd:
de:18:a1:be:53:32:12:30:e8:e2:97:df:a9:79:ad:d6:aa:39:
d8:26:1c:26:e2:2d:a7:21:e8:39:b6:44:b5:f6:c3:9a:15:ec:
18:fb:e7:cb:28:5b:55:d5:79:c8:29:e5:97:1a:4d:24:a7:de:
be:80:d5:d0:f8:61:91:18:a3:3b:58:75:a2:6b:c1:1f:5a:8b:
30:ad:09:b0:d4:73:71:68:d8:ea:a6:a1:2b:38:3c:c9:d9:04:
fc:93:d2:34:d4:f5:c3:6d:08:3c:d9:f9:ec:9f:a4:ab:f1:dd:
0f:68:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:07 2025 by rpki-client