Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
File: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft (raw, json)
Hash identifier: 59MQ14U34OK64NLtj6bjuTaFnX96bJKwdBy5lL4RGUE=
Subject key identifier: 33:99:D9:7A:47:6A:54:62:6C:93:E3:6F:FC:65:2A:46:D3:EF:F4:D5
Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Certificate serial: 0198D7A940CE55C9C41AAD086077E4375A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
Manifest number: 143F
Signing time: Sat 23 Aug 2025 16:00:50 +0000
Manifest this update: Sat 23 Aug 2025 16:00:50 +0000
Manifest next update: Sun 24 Aug 2025 16:00:50 +0000
Files and hashes: 1: mB80WkYR6rBTCDx0gQ2chGJdLnE.roa (hash: qRYzeQ2/WDuNAMTY5dvhhEeLgdI0eFd+WpvXt01kHZI=)
2: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl (hash: BPnl835GsIkgRCW5LSm2NoDkFkueCMrmmZH3pJ5bJXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:40:ce:55:c9:c4:1a:ad:08:60:77:e4:37:5a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Validity
Not Before: Aug 23 16:00:50 2025 GMT
Not After : Aug 24 16:00:50 2025 GMT
Subject: CN=3399d97a476a54626c93e36ffc652a46d3eff4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:63:53:2a:f6:30:ec:5a:d0:44:e8:ca:cf:
10:a8:04:58:60:cd:de:c8:78:da:c5:33:16:7e:46:
f1:2f:4f:94:8b:ee:24:20:a3:06:66:53:28:0c:57:
a2:b6:ff:5f:87:02:67:d5:f8:e5:a5:89:2b:fc:43:
31:0a:00:27:d0:57:c6:bb:93:b4:af:46:9a:b1:b4:
19:8b:f6:a6:9f:e5:46:1c:8f:fe:25:25:45:ac:92:
e6:e1:67:42:c0:a5:a9:d7:ea:32:1d:b7:2b:79:42:
e3:38:ac:b1:46:0d:3b:9b:d8:c3:29:bf:7f:b8:05:
f8:d8:1a:74:5d:d6:2d:46:b3:8b:51:ff:7f:73:f0:
1f:93:04:c5:02:b5:ad:61:b1:f8:99:7b:34:12:12:
b9:ea:76:1d:94:d1:c8:62:58:f7:02:39:5f:7d:01:
7f:4b:4c:2a:df:c4:a6:ce:9e:7f:70:3d:82:3f:39:
e2:e4:55:ea:a8:aa:1b:ce:78:d9:16:4e:de:8b:5e:
63:a7:49:46:46:b6:1b:42:a1:b0:87:c6:26:c6:fd:
08:5d:0e:0d:0d:fd:98:63:3a:da:3c:d9:f3:a4:7d:
08:d6:42:42:e0:11:4c:e8:a9:9b:06:6e:b0:72:fd:
f7:f0:8d:62:60:58:0d:38:11:84:1a:e7:5b:b4:a1:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:D9:7A:47:6A:54:62:6C:93:E3:6F:FC:65:2A:46:D3:EF:F4:D5
X509v3 Authority Key Identifier:
keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:32:c4:0b:98:2b:63:55:e9:06:81:ed:56:43:ce:cf:e1:c1:
3b:56:d8:45:8a:04:5d:92:a4:24:da:cb:dd:5f:6e:8d:5a:c5:
8f:7c:60:a8:6d:64:bc:fa:a5:1c:df:08:6a:32:3f:bb:70:93:
11:21:19:eb:68:3b:bd:51:31:37:ac:e6:68:47:2f:ff:41:45:
74:10:e3:fa:19:b0:b7:d2:ac:69:ff:5a:b5:4b:43:bd:2d:c0:
00:7d:75:43:5a:c6:17:ef:a7:fb:b4:a6:64:b9:05:ab:b8:4a:
aa:55:a9:a7:06:b0:9e:39:89:ac:c2:aa:2d:22:0b:a8:f1:71:
16:ff:ca:ea:5f:09:61:d6:ed:82:05:8e:34:f4:c0:60:35:2d:
8e:e5:a5:66:17:55:f2:44:bf:df:22:d1:88:33:1a:51:d6:fc:
4f:7d:74:4a:50:bb:e9:e2:80:20:1e:1b:9b:86:6e:ae:58:55:
6f:a3:b3:af:7d:38:0b:ed:a3:e0:81:0f:f5:86:88:47:50:bb:
a6:0e:da:66:90:2e:4c:f6:0e:29:9d:13:47:7a:a6:f9:b4:66:
59:2d:95:33:bf:2b:3e:8b:58:6a:58:77:12:f5:d1:b7:59:81:
e1:7f:bc:20:29:bd:ab:a4:74:c7:25:eb:7c:09:6f:b1:62:31:
c3:14:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:13 2025 by rpki-client