Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: zgD1E8pAXiR9IEPyIYm9+GdNo79ivIAvgRSbM+Con5A=
Subject key identifier: 2A:F4:FF:D4:C4:7F:7C:7C:24:E9:AF:46:ED:39:48:6E:AF:C1:6D:33
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 0198D54EA558D937F1EF73A259284C439BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 0F2F
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (hash: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: iBP0mGsGkjZPeUiKIMIBsJ7fzpRYNyIi3cD5pbirwW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a5:58:d9:37:f1:ef:73:a2:59:28:4c:43:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=2af4ffd4c47f7c7c24e9af46ed39486eafc16d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:11:b1:93:76:ec:ae:80:c7:76:41:45:d4:
b0:4b:78:c3:f5:68:dc:d5:66:81:c1:b6:e5:b3:2c:
8a:9f:27:8c:5b:0f:46:d2:01:7e:0f:de:56:0e:c7:
e0:ea:39:58:9b:f8:3d:fc:63:75:c7:8d:4a:3a:2e:
a4:53:7a:a3:db:a8:8e:0f:8c:86:0b:12:f4:c8:6b:
50:c3:86:a7:7b:b4:18:8d:7a:32:b0:90:2b:ed:5a:
fb:9c:27:54:14:97:3c:77:ee:85:b8:20:8c:5a:7f:
6e:6a:72:28:aa:56:1a:14:fe:77:94:94:91:ee:66:
1e:03:5b:86:de:9c:65:74:3b:5c:e7:82:e5:b3:3a:
a3:0d:a7:be:d8:4d:20:94:c0:b0:3b:bc:64:dd:ca:
30:0a:e5:16:d5:12:47:2f:81:34:be:36:ff:a1:39:
a9:23:e8:92:aa:4b:35:0a:3d:21:04:77:5b:f7:bb:
bb:77:0f:b3:4c:c7:70:d5:a6:69:b6:fb:a7:8e:24:
dd:b4:92:d9:33:2e:25:75:78:20:dc:15:82:63:af:
9e:fb:29:31:57:9b:f4:d2:6b:8d:1f:dd:63:f9:a9:
a4:52:6a:99:15:84:57:5a:52:a5:62:fd:14:c8:30:
c3:ad:c2:40:65:44:a5:51:af:f7:49:8a:81:61:47:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:FF:D4:C4:7F:7C:7C:24:E9:AF:46:ED:39:48:6E:AF:C1:6D:33
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:10:64:14:6d:d5:c0:ad:6e:7b:66:92:5c:a7:b2:11:84:2e:
bc:ea:74:f1:5c:2c:25:ab:19:a6:79:44:38:8a:d7:ea:7e:e6:
8a:73:70:5b:9f:e3:2b:ec:61:70:54:90:05:4b:55:6c:f9:c8:
0d:98:8a:17:b0:32:43:1c:3a:aa:50:d1:2c:f6:11:fd:b9:46:
99:eb:93:4e:4e:60:68:a4:06:1e:24:8d:1a:1f:e8:43:23:9b:
2b:ac:b6:c1:ad:86:9e:1e:40:4c:73:cf:a1:14:f7:63:0e:9b:
af:0d:ed:5f:00:3c:17:e0:e5:f1:56:f9:15:98:b6:19:59:29:
29:c7:eb:74:87:1b:1e:7e:8e:a1:28:70:b4:2f:4f:bf:fc:6e:
2f:a3:ab:2a:ee:53:64:ab:f0:a9:f7:67:96:e6:5f:7a:be:98:
e4:e0:7d:7d:3f:c4:23:68:9e:1f:20:3a:6e:e7:ab:a0:df:36:
b1:5d:6c:c0:dc:86:18:ba:27:a3:30:b7:12:09:e0:11:e5:1c:
73:86:a8:6a:ee:da:0a:8f:46:07:d8:96:44:60:b7:ce:2f:0e:
25:ef:c9:95:55:c1:48:35:d9:73:e0:66:65:d2:55:06:74:ec:
67:d1:56:9c:68:4b:ae:9b:db:8a:2d:f1:82:2a:eb:c4:f1:e8:
2f:0e:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:59 2025 by rpki-client