Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: qwcgHM+YxU6aBPQmK25kgTGgH3rot4qoOaVIXJZpGCU=
Subject key identifier: 2B:3E:FB:17:A0:BC:80:30:F4:60:AA:3E:8B:15:04:07:0E:BD:6C:15
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 0198D4E07E3BD1A6F8687880DF6A58B7F70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: i7hscDcHTCdS94CHiyGJ/TDuk5ErF2BgMqFU1C81l+w=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7e:3b:d1:a6:f8:68:78:80:df:6a:58:b7:f7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=2b3efb17a0bc8030f460aa3e8b1504070ebd6c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:fe:d7:62:f9:1b:4f:5f:b4:b7:92:c1:4d:
de:3e:aa:bd:e0:91:7d:90:8c:02:d9:9c:c5:13:b1:
8c:c3:29:88:75:d4:55:56:90:c1:ec:70:0e:95:a3:
0f:3a:a2:7d:a9:f8:9e:e4:82:c8:d0:3c:33:27:9a:
4b:21:9e:96:30:f3:7b:00:9a:48:83:6f:e4:91:0f:
fc:53:8b:f6:ae:ed:47:26:9d:7e:f9:76:58:0c:9b:
b4:49:ce:59:ca:5b:a3:6b:c0:96:df:5f:14:7c:f4:
a0:5e:cb:e3:f8:21:51:6e:35:83:ba:25:83:08:52:
26:c5:10:40:ff:25:ab:c4:55:f4:63:9d:57:61:bd:
01:b4:a3:d3:a9:a1:81:95:a8:46:2f:ca:a6:8e:2e:
95:70:6c:9e:5a:55:3d:27:e1:b1:04:c2:d1:bf:1c:
3a:33:6f:06:41:0e:70:c0:7c:ce:47:3e:4a:8e:23:
96:6a:ff:63:a8:a2:93:bd:20:96:57:f7:16:3e:86:
cb:dd:29:7e:ad:5d:9a:59:1a:2d:ec:49:a9:3b:b7:
e4:03:22:b6:18:2e:e5:e2:c6:c2:b8:3b:af:c6:91:
16:0d:5b:2a:e9:d5:23:09:65:14:cb:3f:10:05:4b:
de:95:4d:a4:f7:a0:06:78:94:5b:92:46:89:33:55:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:FB:17:A0:BC:80:30:F4:60:AA:3E:8B:15:04:07:0E:BD:6C:15
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c4:c3:a8:8a:a4:e0:7a:f1:1a:19:f0:cf:e5:44:a3:38:f5:
65:f4:5c:8a:bf:a4:1c:d3:a7:4f:f5:aa:af:a9:a8:9f:66:84:
fe:ad:e0:c5:13:54:29:9a:68:f7:79:97:49:52:2d:ce:6d:7c:
9a:d8:6c:14:97:db:83:72:f8:4d:3e:c0:09:a4:f9:bb:8e:8a:
f2:8b:68:bd:15:17:c2:d8:ff:b2:41:b4:32:96:cf:4c:7d:c6:
d9:a6:a9:b4:1b:63:f0:85:74:01:88:1d:0c:27:a2:b8:34:49:
4d:7b:b0:ba:f0:16:95:f2:c6:8f:31:af:f8:91:8d:9c:03:a7:
9f:ce:d1:71:bf:7b:24:d2:d1:c1:b4:57:a5:41:7a:4b:d0:67:
5a:ba:44:10:76:90:fa:6f:92:74:df:f3:57:f7:a8:5a:6b:73:
c5:cc:96:7b:a6:a2:1c:c2:29:80:f8:43:5f:d8:8e:2c:cd:8b:
6a:50:16:ac:7f:6b:e6:50:e1:9c:85:1e:52:86:62:c9:52:65:
d8:54:d4:28:4f:1e:f4:c0:11:a4:67:e2:1f:79:6d:f0:d5:c5:
4c:ce:0e:3c:ce:5e:25:cb:b2:6f:c8:bf:56:16:2c:13:df:6d:
fb:9f:3b:3a:f3:21:74:41:19:fd:40:b5:3c:9d:ad:1a:d1:5f:
94:47:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:01 2025 by rpki-client