Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json)
Hash identifier: NnIzFxCakxfwxojeG4NkX08mlU4LiwJ89qA3juV95s8=
Subject key identifier: 4E:A8:FE:96:59:53:4F:96:A4:57:2D:2E:5A:27:15:E1:49:21:23:C9
Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Certificate serial: 0198D4E0A3C27F2D32BB3C542AA6F470A3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
Manifest number: 08FC
Signing time: Sat 23 Aug 2025 03:02:28 +0000
Manifest this update: Sat 23 Aug 2025 03:02:28 +0000
Manifest next update: Sun 24 Aug 2025 03:02:28 +0000
Files and hashes: 1: egM_lo5hkg5KA7_uP-5h7pmD4BM.roa (hash: LWEk9cOjEXdGtew0n3bgwHhe3Zn8McfotK81AHI+3M0=)
2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: o+xsiNHg8en3NudrQdq13r1c8pv4458BmJHqpLO7l/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a3:c2:7f:2d:32:bb:3c:54:2a:a6:f4:70:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120
Validity
Not Before: Aug 23 03:02:28 2025 GMT
Not After : Aug 24 03:02:28 2025 GMT
Subject: CN=4ea8fe9659534f96a4572d2e5a2715e1492123c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:4e:70:48:ef:29:5a:75:3a:df:79:bb:73:
7f:35:7a:df:ee:a5:2f:bc:ee:eb:ae:39:bd:ff:12:
b5:20:cd:f3:a0:a9:f8:6c:27:1b:76:41:ff:85:a9:
a8:60:9d:9d:f6:10:92:3c:ca:83:03:c6:f6:27:75:
4c:db:49:d4:d3:a1:88:48:df:b6:f9:d7:80:13:ad:
1b:4b:9e:b7:40:8a:63:ac:a7:70:25:88:58:84:b9:
e5:fe:92:58:de:7f:30:0c:7c:90:40:de:8d:28:e3:
76:f2:a3:87:b7:60:ba:a9:db:f0:98:c3:ff:4e:1c:
f2:64:da:b2:8a:8a:af:3b:73:a9:ee:9d:55:b9:43:
b1:10:8c:a2:49:02:56:1e:f9:27:bb:19:0a:13:10:
1d:8b:02:c3:40:ac:09:1b:e1:98:47:1b:4d:85:89:
d9:e6:1b:e8:bf:5c:a0:1f:d1:63:05:e3:77:41:29:
79:fb:3a:5b:d1:2a:e2:9d:71:1d:e6:73:71:34:9b:
d3:d7:c7:f2:df:ff:42:aa:2b:c9:9e:ff:5f:e6:25:
60:c1:79:ad:8d:13:fc:2b:4a:cf:e0:a3:9c:ff:3a:
cd:13:cf:92:0f:1b:b2:a4:11:22:b9:70:86:21:ca:
d9:d1:1b:3c:63:0e:1c:f1:1a:b9:e8:10:26:ff:52:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A8:FE:96:59:53:4F:96:A4:57:2D:2E:5A:27:15:E1:49:21:23:C9
X509v3 Authority Key Identifier:
keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:07:f5:ba:0c:73:6f:59:4b:8f:48:c0:76:b7:ab:c3:24:1b:
f5:50:97:6d:e0:8c:07:29:33:54:9b:5d:ac:90:15:22:59:e4:
43:c7:a3:21:c4:a6:41:23:cb:70:04:ce:82:0b:e0:b3:39:fd:
a7:c9:1d:42:f3:90:c8:ed:39:23:af:bb:29:48:3b:f0:a1:0c:
74:65:ed:80:2d:8f:1f:ad:2b:e9:1f:ea:34:04:d6:99:9b:18:
a2:68:3e:a0:9a:ed:b1:0c:b6:34:30:3e:5e:89:44:4a:be:76:
f2:55:86:63:59:78:36:8e:af:54:e7:e2:d8:4e:9f:d5:8d:b9:
00:67:79:f3:9d:0f:48:95:b1:ba:7e:6f:5d:4e:de:ee:b6:58:
58:d1:59:a7:cf:ad:d8:e8:6f:e6:63:1d:d2:35:92:60:bb:8f:
22:c4:ef:97:47:00:69:72:cd:58:34:db:b2:84:f5:62:7d:7e:
79:44:e7:28:44:71:bf:29:0e:c7:66:a9:cd:2a:d4:81:b0:1b:
02:fa:4e:38:c3:1b:93:d2:ff:18:5e:ae:77:9c:b0:b9:f5:0a:
16:0b:a7:9d:16:c6:26:0a:dc:17:78:ce:08:cd:41:0a:01:9b:
78:16:cf:31:fe:99:9d:10:dc:6c:35:0b:68:07:74:ab:99:a7:
67:2b:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:25 2025 by rpki-client