Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: a6E+8qLfiIP3+jPIm2A6v7vIz3KL4NVloKZDhr15osQ=
Subject key identifier: 13:A7:24:62:2B:A9:43:5F:69:D2:B4:20:66:3A:67:3D:0F:65:88:E1
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 0198D5BBFDC23290196DDCC0C3B8E5C84712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 0534
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: fHXFtYnbSLZ1gn7isNOv-X6g-Vc.roa (hash: oCDSfP23EAfcpuHp3yCgmbR/p7P3oSuSoD6KDdGkf7Q=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: iR3JzdMUAe8mVhMLOz4aETVQDDXJ2RafxfJkGlEh+X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fd:c2:32:90:19:6d:dc:c0:c3:b8:e5:c8:47:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=13a724622ba9435f69d2b420663a673d0f6588e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:81:cf:92:cd:7c:e5:94:66:af:18:76:32:
dd:90:e5:96:c7:6f:99:70:54:89:a9:9a:d7:a2:0e:
2b:3b:a2:1e:a4:47:ea:03:d8:af:04:7b:71:81:53:
6e:53:8f:00:95:e2:cc:f5:89:f0:27:e9:3f:72:24:
38:b8:49:3e:b0:bd:d3:04:d3:4e:9e:8a:af:7b:92:
28:d9:51:67:97:97:7d:47:e6:f6:c1:3e:50:2b:82:
6b:30:a2:a6:47:ad:65:01:de:4e:7e:da:d4:24:a5:
28:78:96:d3:f0:a8:f2:87:e0:03:b6:d2:48:8a:72:
ac:c6:ec:cf:f9:1f:3d:45:96:06:ff:eb:ca:1a:b6:
f3:34:16:0b:0b:0e:56:d8:f1:36:c7:92:99:17:29:
3c:b5:3c:fd:7e:f7:c8:35:9a:1f:00:ad:60:15:82:
f4:76:6e:bc:bf:df:fb:60:87:0a:cd:a9:26:67:de:
c3:fa:d3:c6:e4:11:29:a5:91:ce:d0:c4:a9:92:a4:
4c:5d:54:0a:cd:dc:9b:df:fc:0d:5a:db:c4:c5:8a:
a5:73:fd:ae:b8:9e:93:8c:73:a2:ba:3b:4e:c4:42:
ba:92:cd:33:87:b8:f9:25:3a:f6:75:66:f9:d7:01:
9c:2d:70:35:77:70:24:64:25:ad:b6:ec:52:5d:a9:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:24:62:2B:A9:43:5F:69:D2:B4:20:66:3A:67:3D:0F:65:88:E1
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cc:ab:ed:01:38:ea:b6:d2:77:51:4e:70:40:d7:ff:1c:94:
8c:03:fb:00:8d:a3:a1:0c:3a:e1:17:86:62:9e:8a:12:33:d5:
83:ef:3a:92:8b:85:5f:42:b3:d2:04:d0:0e:00:c3:a1:59:01:
7d:2c:1b:69:9b:89:1a:a3:de:0b:34:89:44:8a:6c:9c:53:cc:
5e:ef:29:c8:c1:49:c8:a2:c7:0d:19:92:ba:25:cc:36:09:3c:
36:72:05:de:97:f6:b8:9a:76:63:f8:c4:24:c5:ee:5e:d8:0e:
af:38:e0:b2:62:76:f6:6c:b8:a6:d7:98:5b:d0:f4:16:2a:d2:
bf:5e:51:2d:d7:dc:1a:29:c3:e8:ee:ad:63:88:b9:19:c8:82:
1c:fa:f1:1e:4a:57:85:be:05:21:a4:25:28:71:3d:b0:fc:7c:
fc:6b:47:d6:d0:64:00:d8:d8:62:a4:4b:30:a5:40:0b:da:a3:
da:6d:90:a1:94:52:66:cf:3f:34:fe:69:94:e2:46:50:35:fa:
a5:5a:11:b9:07:bb:66:f2:f3:42:03:be:bb:d5:07:78:4c:4a:
4f:0d:51:11:e7:1b:ce:36:02:36:a9:d3:59:7c:a2:2c:24:af:
47:80:67:f2:bb:bc:59:be:e8:e5:83:de:a1:28:a7:a2:97:42:
12:7e:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:04 2025 by rpki-client