Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: hOy+9XYPVLxa+RvIzreXFpGrFASMh6EpaURc10TrVwc=
Subject key identifier: DC:FC:24:12:D6:E3:AA:1E:0D:33:15:82:E8:21:5E:3E:C8:94:49:1A
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 0198D40478061EB71A741119EBC26CAA7463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 023B
Signing time: Fri 22 Aug 2025 23:01:59 +0000
Manifest this update: Fri 22 Aug 2025 23:01:59 +0000
Manifest next update: Sat 23 Aug 2025 23:01:59 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: p9uHlLesSUm/a16KuXTK+83db+Qe0+hGfRTSsqwVJBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:78:06:1e:b7:1a:74:11:19:eb:c2:6c:aa:74:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Aug 22 23:01:59 2025 GMT
Not After : Aug 23 23:01:59 2025 GMT
Subject: CN=dcfc2412d6e3aa1e0d331582e8215e3ec894491a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:aa:ab:76:70:1b:b4:49:07:c9:d1:f9:95:
69:2c:32:e2:cb:de:cc:47:bd:54:15:6d:50:f7:a7:
69:05:85:a6:65:8e:c3:14:1d:62:8d:9f:fa:35:5e:
bd:d4:d2:d5:85:64:e5:5e:f2:e6:79:b7:28:d4:b9:
3e:40:61:a1:be:b5:b5:5d:bf:d9:6f:e4:d4:ab:f6:
ba:24:c4:b9:3f:d5:6c:a3:e9:d4:44:da:a2:a3:64:
ce:ff:a8:4f:4c:b5:74:c5:bf:cb:b3:d6:4a:0c:d0:
5f:ea:70:86:f8:2a:f7:2c:c1:05:35:9f:24:74:7e:
4a:b0:59:43:14:c0:25:b2:a3:55:8b:58:3c:ce:0d:
e9:ab:25:01:ef:75:a0:fb:45:46:9d:fc:3f:c8:d9:
a0:8b:55:5e:f4:f1:17:f9:09:19:5e:9b:7e:2b:b0:
fc:90:b9:f7:ca:4c:11:3a:f4:b7:0f:51:85:b4:ba:
04:ee:f8:be:cf:be:a8:9d:a3:bc:1e:a6:14:37:8b:
ef:e5:66:6b:16:fc:9a:39:df:0f:9e:e6:00:3d:bc:
9e:b0:66:60:56:ec:a2:8a:7f:0a:25:d6:83:f7:de:
c3:53:b8:ed:0a:88:0f:a9:1b:7e:43:db:cd:62:e1:
1c:90:c1:9b:b0:6c:cb:df:ec:52:10:4c:45:60:56:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:24:12:D6:E3:AA:1E:0D:33:15:82:E8:21:5E:3E:C8:94:49:1A
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1d:a0:12:24:23:87:4f:c7:d2:15:70:11:30:aa:df:0d:d8:
4f:c4:b1:1d:39:5e:f8:fd:c6:6e:73:69:46:f2:97:1f:78:79:
02:d4:39:84:fe:96:f9:29:97:2e:b8:e2:62:3b:b8:44:53:12:
9c:f8:b8:64:61:9c:9c:5b:32:00:84:7e:dc:62:73:a4:6c:d2:
1d:5b:84:80:7c:b4:1e:c1:87:ac:a8:93:03:72:aa:ca:2b:55:
d8:07:0c:97:7a:35:ba:63:78:0b:19:38:78:d7:d4:aa:9d:9b:
fc:28:06:25:44:0b:89:e4:19:80:58:f4:7d:e6:80:06:43:04:
17:73:0b:d6:05:56:46:c5:78:82:6b:75:22:18:47:09:26:b2:
c6:39:1a:3d:c7:04:00:dd:77:f4:2f:f0:ac:d7:39:cb:53:fc:
b3:2d:52:ce:6c:f8:2c:c1:17:e3:e9:e9:18:ea:05:19:fc:bc:
80:f8:ae:25:0d:59:25:63:17:f5:a8:3e:f1:fe:9c:db:a6:8c:
c6:82:43:a2:03:07:f8:cb:02:2f:18:d9:78:47:00:eb:d4:b6:
ea:2c:a3:ab:a3:d3:9d:52:86:dc:b9:3b:ed:17:02:65:89:d1:
e8:a1:47:c6:a1:fb:27:18:b6:c1:6a:99:a2:ba:dd:45:cc:11:
74:57:7a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:09 2025 by rpki-client