Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: Pc6bllJZhoZ4OFaqksbE+T3147/ShcUbzqHoghJdgOk=
Subject key identifier: 23:E3:55:BF:25:67:66:A3:65:E2:D1:69:66:EA:9C:97:36:C6:9A:BE
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 0198D960952E0671DEDEC05927185F1DE02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0942
Signing time: Sun 24 Aug 2025 00:00:42 +0000
Manifest this update: Sun 24 Aug 2025 00:00:42 +0000
Manifest next update: Mon 25 Aug 2025 00:00:42 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: rdweKvNAQXtFg4ycNiuonPM4Tk9eptObwyLBMStYyEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:95:2e:06:71:de:de:c0:59:27:18:5f:1d:e0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Aug 24 00:00:42 2025 GMT
Not After : Aug 25 00:00:42 2025 GMT
Subject: CN=23e355bf256766a365e2d16966ea9c9736c69abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:9d:43:22:2c:ab:7b:8a:65:cd:3e:20:56:
4d:25:ef:90:9c:78:a6:94:e1:b2:99:df:ff:f7:57:
91:71:c6:c3:6f:1e:b7:8b:2e:56:a0:de:87:51:56:
de:81:b7:89:1d:1b:f2:46:f7:fe:f4:e2:01:8e:6a:
f9:7e:ec:66:df:39:d7:0f:ac:48:02:59:b9:4b:6f:
41:f1:f0:71:36:ed:12:64:49:0c:18:1f:3c:e0:cd:
78:d9:71:30:bc:b4:6a:77:12:44:cc:19:e2:6d:dc:
bb:1e:05:71:53:ca:d6:00:c5:81:b5:3f:3c:a6:a2:
9b:19:08:74:3e:bc:26:75:ca:03:11:92:5b:37:0a:
24:f1:b5:08:29:50:5e:9f:d2:1f:66:dd:0d:ea:7d:
68:cb:c6:55:ad:eb:37:d3:0e:3b:f0:71:9e:a8:77:
d2:bc:9a:0d:a0:c4:7f:b8:77:b6:93:86:fc:80:6f:
ba:a3:52:3d:5d:ef:a4:b5:cd:67:a3:46:97:02:d0:
54:17:e0:78:66:ec:f7:2a:64:95:c0:11:6d:e2:83:
f8:6c:58:9c:b4:4d:0e:45:d6:5c:82:c5:c0:95:28:
02:77:5c:bd:cc:6d:68:f8:2e:a8:5d:a2:5d:78:2c:
e4:16:7b:92:30:ab:21:3a:4c:0d:97:c1:b7:36:2a:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:55:BF:25:67:66:A3:65:E2:D1:69:66:EA:9C:97:36:C6:9A:BE
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3a:bd:e8:dc:7e:a7:a3:95:00:3b:00:8f:c8:a7:9d:a5:da:
1e:e7:05:bd:6d:f8:82:10:b9:d2:01:38:29:2d:bd:bf:87:63:
54:df:5c:83:30:76:b3:e2:10:d1:96:76:b6:92:70:37:a3:9b:
00:de:4b:86:12:9e:4b:97:f7:ae:e9:1a:bd:c0:91:4d:8e:d1:
a0:7e:85:e1:57:20:2a:45:e4:9a:8b:d7:cf:c3:ef:44:1e:e7:
17:3f:4f:84:9f:7c:3b:86:32:21:21:c4:5a:df:e9:3c:f2:86:
61:09:29:c8:e6:4f:55:89:bd:ab:4b:59:5b:b1:b6:2b:a2:d0:
21:5d:2b:94:86:db:69:e3:ab:f4:34:39:dc:30:85:e3:6c:4b:
e0:cd:58:a6:ca:97:c8:28:09:c4:9b:09:0e:1e:45:f8:92:d7:
98:6b:ea:c0:bc:a7:2f:74:32:b5:31:6f:fa:ce:04:19:21:4f:
eb:3f:c2:ce:ff:68:0b:e2:f2:3b:6a:bf:67:c0:23:2a:e4:c7:
31:7f:f1:14:0b:a4:52:8c:ee:fc:0d:35:9e:a0:66:1e:f2:89:
8f:a2:99:71:d6:7c:43:be:02:a2:a8:cb:98:bf:51:1c:48:8f:
cd:c3:5a:a0:36:6f:39:a2:95:00:0c:99:44:9c:bc:7b:d5:23:
07:f8:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:41:27 2025 by rpki-client