Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: tkH4gFG+Wpq5uKg85qWtZ1zZZJAYatmLQORM6WtRlEM=
Subject key identifier: A1:EA:C9:7E:1F:87:08:05:61:28:1D:A2:AC:5C:78:EB:2F:B2:85:70
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 0198D6600C51E31F737BC9E30EE789D452B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:15 +0000
Manifest this update: Sat 23 Aug 2025 10:01:15 +0000
Manifest next update: Sun 24 Aug 2025 10:01:15 +0000
Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: P4bpgvd1BNvHkzOU4vtcyQMmKYfsJz/KYgDEBKAih2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0c:51:e3:1f:73:7b:c9:e3:0e:e7:89:d4:52:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Aug 23 10:01:15 2025 GMT
Not After : Aug 24 10:01:15 2025 GMT
Subject: CN=a1eac97e1f87080561281da2ac5c78eb2fb28570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:10:ba:26:42:12:58:dc:ea:dd:c3:fd:87:
e9:11:be:5e:81:59:6b:4f:95:9a:95:08:29:bd:03:
9c:ec:e0:28:2e:cf:29:a6:cf:d8:79:a9:5b:93:a2:
08:0b:43:e8:1e:36:a7:f7:f2:a0:5a:38:16:a9:a7:
42:6d:2f:03:8f:79:6e:2c:b8:22:f0:9e:f0:dc:8a:
b6:11:a7:8c:d9:5d:e9:17:b2:64:7e:ca:99:0e:b0:
a5:6b:0a:b4:86:54:22:9b:59:29:eb:33:28:df:a5:
86:0c:b5:54:90:50:49:4c:2b:d9:63:29:5b:e0:a0:
c8:44:df:be:f2:6f:6f:c8:61:67:3e:48:f2:03:05:
b5:03:85:0d:73:44:d0:9c:3d:76:b7:b1:7a:4b:a9:
30:23:1c:85:19:1e:ec:8f:d5:f6:ce:ba:78:c2:35:
45:ff:0b:1c:a3:44:66:fe:c2:d3:b0:31:34:c8:c1:
f6:99:7d:e2:ca:87:b9:65:53:84:1d:fa:2b:27:90:
2f:21:7b:7d:16:4d:9a:6c:4d:27:0d:8c:5d:7a:10:
7c:a7:91:c8:22:7c:27:70:b6:95:27:b2:f0:c6:ec:
0a:80:c4:73:02:f7:50:9a:90:ae:0a:a3:c9:1a:13:
1c:9b:86:72:38:1a:91:a5:04:f8:f1:a3:71:23:ab:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:C9:7E:1F:87:08:05:61:28:1D:A2:AC:5C:78:EB:2F:B2:85:70
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:39:5f:23:a8:36:fe:17:5f:0f:df:e5:07:6f:c0:4c:c1:a3:
35:37:60:2c:72:9a:a7:0c:29:ed:55:6a:6c:00:14:03:ae:55:
64:58:71:69:1c:0b:13:4f:e4:3d:28:72:78:6f:00:f9:b0:54:
0f:6a:24:60:72:78:85:e0:42:8a:07:2b:d1:c8:78:67:31:0b:
5c:8e:e8:1b:5f:27:2c:9b:14:e8:50:e3:3f:7e:97:f5:01:e1:
21:b5:31:6a:95:4e:06:86:59:14:e3:89:1a:d5:9f:d3:44:01:
4a:3d:05:bb:d0:06:e7:67:6a:5e:9f:95:1c:66:22:58:88:99:
d0:bc:23:a3:b1:96:49:6d:a3:7e:3c:25:33:4f:29:1f:c3:a5:
51:41:7c:38:ed:26:2e:60:6b:46:02:1d:ca:c5:e4:cb:7b:45:
e5:55:c1:0c:0f:9a:8b:96:eb:86:e8:56:ed:9d:ea:8c:ad:18:
de:33:55:b0:fb:ca:4b:b1:96:a1:88:3d:e1:0a:e6:74:79:2c:
5e:a4:ee:f3:a6:c2:3b:3a:4e:0c:82:5e:09:5b:be:2d:08:68:
cd:21:70:b4:24:54:51:a3:04:7c:90:c6:f2:13:ed:cf:d9:c4:
b1:62:e2:93:49:dc:60:63:07:0d:2e:ed:60:42:f0:e4:4c:05:
28:c0:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:45 2025 by rpki-client