Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: oy1WiWBZAh78J5Q4RccV2hTk9BYkAnQqVEbMFZrz9V0=
Subject key identifier: 42:2D:9A:AD:D2:4A:10:03:68:D9:6E:B8:81:D9:A4:47:51:33:E2:BA
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 0198D6983896EA8E1648CB84DF556BE91170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 11:02:36 +0000
Manifest this update: Sat 23 Aug 2025 11:02:36 +0000
Manifest next update: Sun 24 Aug 2025 11:02:36 +0000
Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: 0AbLtziS8k2xJ0fa1srVACZTEteRPB2zeaLW//tJG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:38:96:ea:8e:16:48:cb:84:df:55:6b:e9:11:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Aug 23 11:02:36 2025 GMT
Not After : Aug 24 11:02:36 2025 GMT
Subject: CN=422d9aadd24a100368d96eb881d9a4475133e2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:5a:c4:de:dc:f4:75:ce:ec:80:47:61:7e:
cb:e2:2b:86:93:39:68:41:3b:3a:58:55:dc:3c:3f:
f9:f7:88:91:a5:1f:db:07:45:65:3b:1f:29:52:fb:
da:01:6d:2d:13:8f:7b:f6:fa:60:8a:d4:4a:45:9a:
e2:a9:3d:07:e1:52:95:99:c3:63:0a:e5:b6:6e:fa:
78:05:63:94:8c:b8:70:bb:20:fa:64:86:0a:8c:6c:
a9:1c:9a:84:98:7b:21:82:ff:f8:9e:77:88:fa:f0:
84:46:ea:f6:2b:f0:71:e7:20:ca:a5:4f:f6:b1:a0:
2f:a3:90:24:5f:2a:ec:f7:94:99:e1:44:83:95:de:
0d:cb:82:d2:c8:25:1c:3f:6f:bc:3c:ee:cb:89:50:
be:c6:c2:77:b6:58:c3:30:fb:21:12:f5:5e:56:7c:
a4:1c:c1:c8:f6:c0:a5:30:71:f3:33:98:15:f3:55:
fe:e3:e0:98:cc:2a:05:52:a5:85:f6:11:b0:08:3a:
a2:e1:82:f5:15:5b:05:92:d9:56:74:bd:17:3b:5c:
23:16:04:84:b1:be:c3:64:f9:e8:81:67:b9:da:21:
bf:ed:c5:9b:94:0e:19:a2:38:3e:7d:d3:fd:5d:d5:
88:6c:5b:3a:84:0a:35:8b:79:6c:77:82:39:cf:2d:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:9A:AD:D2:4A:10:03:68:D9:6E:B8:81:D9:A4:47:51:33:E2:BA
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:e2:63:23:54:e5:ca:e5:b1:b0:45:80:7e:89:92:00:48:
f4:1e:43:22:aa:c2:65:aa:50:2d:8d:55:be:23:ee:de:68:5a:
93:f3:52:6b:26:71:a7:89:e5:29:61:18:29:e1:60:d0:e4:74:
71:f6:f2:2a:e3:89:31:a4:e6:51:51:a1:b3:db:64:e5:df:7e:
9b:31:d7:14:1a:8d:0d:6e:6f:94:ce:89:ac:b9:6e:69:8f:8b:
e1:09:7a:26:18:a9:d8:99:48:b5:b6:d6:9a:da:33:02:57:88:
44:41:fc:1e:d1:07:41:7a:f6:a1:1f:43:98:0e:75:d3:19:4e:
ac:e5:d8:b6:c1:f0:ef:09:b5:63:58:5f:d4:b2:ad:36:38:c8:
52:dd:3e:2f:c2:65:20:39:b2:5b:21:62:42:e2:9e:f3:06:a4:
37:08:3a:87:3a:1c:38:e1:62:49:b0:aa:18:5d:10:03:d1:f0:
a8:50:68:0b:4b:a2:2e:6a:ff:d3:61:74:03:06:ae:4a:a8:1d:
07:ca:46:da:45:cd:99:2a:ec:28:b7:18:28:6b:35:76:95:ae:
07:71:96:58:b6:35:66:53:3b:88:a3:ec:e2:44:58:b3:8c:c2:
d5:c6:6a:42:0c:7e:53:a0:0b:77:90:f1:25:f3:24:e2:bb:5f:
b4:c4:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:59 2025 by rpki-client