Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: FRFWdnW31vMNPSgJ7lqo9A7ZHtV7mFbrv1PAjxPTAP8=
Subject key identifier: 74:3F:27:D2:07:FF:1D:20:B9:F8:BD:2C:4E:BB:F8:92:8E:79:94:CF
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 0198D5BC14174A0EF0FA7CF5664CE99A995C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: 2//oN1wyqw/fYVRAlCPndkwMuGVsdDF43wJaAKXUg6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:14:17:4a:0e:f0:fa:7c:f5:66:4c:e9:9a:99:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=743f27d207ff1d20b9f8bd2c4ebbf8928e7994cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:1a:55:32:fc:ed:5c:ee:82:54:e8:51:ce:
e9:e5:79:ca:b7:16:2d:04:ec:7a:7d:c3:9b:c7:7d:
99:37:cf:4e:5d:d2:e7:6a:d9:17:05:37:73:3c:15:
67:b9:60:2e:3f:53:51:08:8a:21:69:41:13:d5:2b:
3e:61:85:fa:a2:be:53:61:66:4c:66:1a:d4:be:7f:
0f:bb:f4:f1:4d:4c:15:ea:b5:31:a8:e5:9f:e1:03:
21:10:b7:c1:10:67:b9:0e:d4:40:4a:80:f7:7a:d8:
11:e7:12:b9:cb:41:a0:40:16:c9:aa:d9:eb:8e:ae:
b0:73:d3:f9:c3:e4:4e:db:98:f7:8c:37:d6:fd:cf:
56:f1:e9:83:e2:54:57:6e:bc:49:1a:76:c7:af:50:
12:a1:cc:16:7e:b7:56:e8:0a:da:ca:d1:9e:cd:ca:
81:04:e6:9f:10:2d:8f:b3:c6:bf:e6:2e:88:3c:69:
f9:f0:ec:69:da:f4:1e:0b:d9:cd:c9:8e:00:5d:c4:
45:21:8a:82:38:47:3e:eb:6a:a2:f5:a3:be:f5:88:
5b:d7:5d:a6:a8:1d:eb:28:17:51:45:42:65:d8:7d:
46:72:02:fb:5c:22:af:a7:96:da:f6:d1:61:cd:6f:
dc:f5:f0:94:ea:eb:f3:6f:ca:64:a4:f1:f6:ac:bc:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3F:27:D2:07:FF:1D:20:B9:F8:BD:2C:4E:BB:F8:92:8E:79:94:CF
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2b:76:1f:c7:90:5d:82:9f:96:79:e0:86:b4:58:68:8a:c3:
08:81:ef:0a:b0:41:9d:33:fa:e2:66:42:89:0a:1a:25:7f:90:
a6:2b:04:46:17:e0:96:c5:34:a5:1a:c7:f6:fe:54:7f:15:59:
71:1a:d6:5c:ec:09:91:d8:44:6c:c3:e8:09:5f:77:95:0c:09:
93:41:03:3d:7c:53:4f:4f:cc:59:30:d2:e3:f4:ea:3c:1c:9f:
a3:0b:69:37:ad:30:0e:13:28:d7:d2:dc:ca:ac:9f:d8:d2:8d:
8d:e3:08:6b:5d:bb:1d:c8:2d:86:c1:74:8b:c7:fc:1b:e3:74:
cb:2b:d8:95:3a:be:4a:9b:9b:85:42:36:09:05:6f:6a:6c:bb:
bd:a4:b2:8f:de:75:ad:7e:7a:af:4a:64:db:7b:7a:97:3c:26:
55:10:b4:40:c6:8a:09:3d:42:bc:0d:61:79:69:66:e1:10:70:
c4:10:ef:48:e2:02:13:5e:71:ce:90:8f:e5:14:a1:96:14:ed:
d2:94:55:e8:b7:15:6e:f7:b0:bd:bd:59:ad:65:1e:39:f6:9e:
62:73:18:61:22:74:a2:cb:7e:ba:81:7d:37:c9:e1:69:c9:66:
aa:78:15:a3:87:e4:88:be:65:54:e9:f2:df:17:39:2f:e6:72:
a9:f6:f2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:23 2025 by rpki-client