Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: MktchhSKukH0wWPxbQz8yy/3HCDVCvdcRgZgtxAeYAk=
Subject key identifier: 2B:52:8B:1C:0A:18:34:5F:07:FD:0C:57:BD:6B:E5:AC:41:7E:3F:BF
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 0198D516246D012AB5968CB586DD0CEDB751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 0606
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: pBPmRFpBG/c65f7KQ72y1tGVsIDv+Zkys0B/1N9uTeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:24:6d:01:2a:b5:96:8c:b5:86:dd:0c:ed:b7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=2b528b1c0a18345f07fd0c57bd6be5ac417e3fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:20:93:42:d4:f4:58:e5:d3:34:4c:48:7e:
d5:2a:0e:91:62:51:ee:41:41:a7:05:d7:94:5b:41:
01:af:2a:00:f9:d6:b4:0d:eb:17:4a:5f:3d:62:dd:
44:07:e8:90:9e:41:fb:dd:7b:a1:db:cf:da:b5:7e:
b5:84:60:76:61:29:0b:e0:2f:64:0e:6c:c0:06:bc:
a1:be:7a:d7:69:4b:f0:bc:64:2e:83:d7:e3:c1:49:
0f:13:59:41:7d:37:ab:48:19:d2:e1:04:fa:8a:43:
55:44:30:9c:72:7e:83:8e:a9:5d:38:14:d7:fe:d4:
44:94:f1:52:6a:fd:07:16:b1:7e:ef:f4:61:e4:a1:
fe:7d:80:3f:03:25:e1:44:69:2e:b3:16:e9:bf:d9:
40:0d:62:9a:c1:ea:f4:7b:e4:d1:8b:2e:44:38:44:
4a:0f:1f:31:94:3c:62:52:d4:1f:06:8d:98:c0:2e:
a2:55:38:b1:ab:54:a8:1b:68:3b:6e:fc:29:9f:ae:
d2:38:26:57:42:43:f7:41:f6:5f:2a:b6:f1:0e:c6:
cf:1b:09:90:32:f4:e0:1c:4f:24:46:bf:dd:44:1b:
89:c8:3d:7f:a3:6d:76:59:7a:c8:48:5f:c3:fa:87:
27:49:71:95:32:ba:98:50:c6:d9:33:12:39:d8:44:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:52:8B:1C:0A:18:34:5F:07:FD:0C:57:BD:6B:E5:AC:41:7E:3F:BF
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:47:fa:4d:d1:c7:ce:4e:d3:13:4c:5e:4f:70:df:2a:99:59:
93:73:eb:b2:70:1e:96:2c:68:df:e3:7b:a1:9e:c8:37:8e:6b:
3e:e8:a9:a6:f0:dd:2b:34:f0:cc:45:4c:1a:d7:d2:9f:77:c8:
17:50:89:f8:85:e7:fb:9e:d3:70:3f:6a:8f:f3:8b:db:3f:6b:
d2:01:9b:98:2d:ae:47:fc:20:f2:cb:24:82:48:58:c9:a2:44:
b1:79:d9:48:cf:72:79:8c:8b:ff:67:3e:46:96:0a:1f:76:a9:
e3:b1:2a:2a:2f:ad:78:3a:86:f1:3d:29:8a:09:a8:7f:ef:52:
49:d8:80:2e:bb:2c:a7:d6:73:f7:61:02:e4:72:69:94:02:90:
12:cd:8b:40:b2:0f:bf:57:1f:be:90:9c:a4:6c:1a:7e:0c:4b:
49:3b:38:2a:4c:53:95:c8:44:f6:d0:33:c3:4b:0d:36:04:ae:
6e:97:a1:bc:51:eb:73:8f:fb:20:31:3e:80:6a:af:94:11:46:
58:ca:ea:17:cf:6e:de:6c:fd:59:c6:8f:92:7e:fc:e7:fa:07:
6b:cd:b0:12:f4:d5:05:6d:47:6d:64:71:1f:8c:f5:5d:f0:68:
f4:46:3a:be:eb:60:17:c6:8c:4f:00:a6:ca:22:ba:04:ac:d3:
97:f0:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:49 2025 by rpki-client