Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: 0gzUwl07nAMZCgc6FT9dt0KajfMqee5zOfjb5N19CbE=
Subject key identifier: 7B:F6:D7:D2:E2:D8:87:3F:C6:BA:1F:80:98:22:AB:6D:48:2A:34:1F
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 0198D6CD48413B907AEC6F3656CEEA20DBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0966
Signing time: Sat 23 Aug 2025 12:00:34 +0000
Manifest this update: Sat 23 Aug 2025 12:00:34 +0000
Manifest next update: Sun 24 Aug 2025 12:00:34 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: FSMe+uaBWo7GS+dCMXPsY41yID4dUBtzcVTEyUnVzPQ=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:48:41:3b:90:7a:ec:6f:36:56:ce:ea:20:db:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Aug 23 12:00:34 2025 GMT
Not After : Aug 24 12:00:34 2025 GMT
Subject: CN=7bf6d7d2e2d8873fc6ba1f809822ab6d482a341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:64:80:86:34:e4:60:ad:85:8a:89:d9:0f:
96:00:ee:4f:f7:69:3c:88:e5:c0:80:53:81:94:a2:
3c:da:49:11:db:13:b1:2e:02:cf:ba:e7:1e:14:13:
20:89:60:5c:d6:0c:47:1d:df:3a:93:80:4a:1b:66:
f5:78:8a:19:91:62:3c:51:c1:75:90:50:ab:89:8e:
a3:24:45:2e:82:67:cb:27:ea:26:b4:8e:10:2b:e6:
4f:05:e7:d5:9f:72:f3:0e:d0:a4:a2:25:20:c4:ea:
09:d5:12:c4:0a:39:24:4f:16:6f:54:3b:a7:30:e8:
22:33:3b:98:04:43:70:2e:20:ce:65:d0:f7:41:6d:
5d:d6:bd:1f:7a:97:da:12:b0:25:ad:77:72:37:03:
db:bd:40:23:67:40:ee:a0:79:c9:7d:58:e1:e2:0e:
87:05:c0:67:2f:ab:49:de:b7:a9:b5:6f:83:c3:13:
19:00:1d:59:2f:99:1e:97:45:81:2e:47:2c:bb:49:
03:f7:8b:95:31:f4:e9:68:9c:a6:e1:1b:e6:59:af:
ce:a0:2d:f0:56:26:37:5a:b0:08:d3:ff:67:a9:6a:
c4:8f:ab:8c:81:04:8b:0a:1e:c1:96:6b:de:47:92:
a6:b2:d7:42:7e:b0:99:24:33:fa:7a:2c:3a:4c:8d:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:D7:D2:E2:D8:87:3F:C6:BA:1F:80:98:22:AB:6D:48:2A:34:1F
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6b:b1:a6:3d:c0:93:88:f3:6c:88:09:f7:a5:56:4f:51:3c:
3d:e5:87:23:20:80:0a:c5:cd:f4:b1:52:be:52:aa:da:92:42:
8c:83:c8:83:dd:72:b7:f3:d0:f8:51:44:c4:c6:5a:de:1a:43:
49:eb:d8:a5:b0:4a:84:a5:e4:cd:d1:e3:b5:91:8d:55:21:eb:
a0:46:42:fa:91:c3:fe:96:35:63:99:59:14:86:a0:02:e8:f8:
35:93:a5:42:ec:7d:d3:01:d0:bd:bf:40:98:9a:e9:b1:ee:2d:
b1:22:09:52:7c:d3:2a:66:aa:50:81:05:1a:60:a1:5d:ca:bf:
6c:e1:5c:dc:a4:d9:1f:6d:29:5b:66:e0:59:55:27:cd:ec:2b:
81:5c:bc:ba:df:fa:d0:01:a8:dd:77:3d:27:14:7c:c0:89:44:
d0:4b:1d:d4:9e:37:f6:57:84:7c:03:46:b8:79:0c:f7:75:60:
37:28:bb:3e:a7:1a:42:9c:42:46:b8:6a:be:7a:41:23:b2:4d:
1f:67:e6:7b:50:60:54:49:a1:7a:98:7f:b3:db:bf:1c:fd:3b:
4e:b4:35:7e:39:a9:ab:11:7d:6d:42:ca:93:f1:96:d5:da:bb:
f6:32:b4:cb:72:cf:7d:22:3d:e7:57:43:0d:96:e4:56:9e:ea:
bb:44:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:25 2025 by rpki-client