Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: Zzr+02UbS6wDB6cKkixmmZw5PbLkwTTrhiQyI5kTXh0=
Subject key identifier: 14:CA:AA:D9:EF:58:C3:FE:43:9F:17:41:1A:6E:56:7F:2C:5D:AE:91
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 0198D6CD03C7799724B90A4F4909705D8C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:00:16 +0000
Manifest this update: Sat 23 Aug 2025 12:00:16 +0000
Manifest next update: Sun 24 Aug 2025 12:00:16 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: gwWIEVfhFh04LjgzxhYrCmWHVY3UHN/pw0+f5Bw3LF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:03:c7:79:97:24:b9:0a:4f:49:09:70:5d:8c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Aug 23 12:00:16 2025 GMT
Not After : Aug 24 12:00:16 2025 GMT
Subject: CN=14caaad9ef58c3fe439f17411a6e567f2c5dae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:9c:c4:f0:f6:3a:50:05:8c:cb:0b:f5:7b:
39:6e:0d:0e:a8:78:63:f2:91:64:fd:44:33:38:97:
da:f6:ac:03:28:da:41:4a:53:37:95:ec:4c:01:31:
19:49:86:ec:0a:49:49:c7:76:ed:24:57:7a:2d:fc:
f7:9a:68:1f:90:6d:87:70:10:56:83:e4:ae:11:e5:
1e:0f:ee:36:0b:ca:cd:b0:22:85:b3:b8:0b:e8:f2:
c0:39:1b:1c:2e:e2:e0:59:b6:0f:d7:72:8b:91:0d:
84:97:ab:52:ca:a8:ff:b7:75:45:fe:83:fc:56:e3:
84:94:46:f6:d8:3f:f9:c7:ab:0b:75:96:89:9b:6d:
44:3f:f0:ea:da:2e:22:79:21:b0:d6:6b:ee:c7:23:
a3:e0:66:cf:66:82:96:45:0a:07:b4:b1:c8:06:d4:
af:ea:df:e3:95:54:6a:7a:41:24:49:88:66:32:37:
9d:30:de:b7:63:7a:8e:31:3a:ee:ab:a1:0c:ac:ff:
ad:64:34:a6:86:f7:be:5e:14:fb:32:8d:a5:15:54:
21:eb:c0:3c:a4:94:79:ae:59:c3:cb:a8:c1:8f:2e:
7e:4f:ab:03:90:87:c9:23:dd:13:12:92:cf:3c:0b:
af:c9:12:73:1e:14:08:62:bc:01:ba:d5:59:28:70:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CA:AA:D9:EF:58:C3:FE:43:9F:17:41:1A:6E:56:7F:2C:5D:AE:91
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:c2:b0:d2:e7:c8:e3:c1:99:13:f0:28:e2:6b:76:a0:96:
52:12:77:fd:ef:0b:42:4e:a4:74:9d:8f:b7:cd:1d:5d:a2:87:
69:46:dc:bc:43:24:41:b6:9b:60:3b:64:d6:33:db:35:98:cf:
3b:7e:46:72:c4:ae:f2:11:45:0f:3a:69:2b:29:cc:61:40:0d:
0a:bc:54:76:1c:9b:63:f1:f1:14:34:74:89:d9:3b:c8:54:b3:
22:79:f5:26:db:9b:af:a6:22:d3:cd:64:4c:32:22:3b:a6:0f:
bf:3c:c4:a8:e0:8c:c8:10:f6:73:51:b3:28:10:09:e3:f3:8c:
6f:3d:36:25:bc:51:45:8f:b0:da:7a:f2:9f:0a:ee:fc:7e:a2:
27:f8:ac:82:43:d6:99:a5:63:72:36:26:d6:1f:f4:9f:8a:96:
54:1e:d5:0b:53:dc:a2:00:72:10:f8:ca:79:5a:7d:c1:f8:d4:
b9:44:e9:ea:18:cd:d7:9e:2c:a2:c0:2d:68:08:02:0f:75:2e:
31:80:15:4d:b9:8a:77:10:66:f4:6a:d8:97:05:0f:93:89:85:
14:49:e0:39:18:6d:4b:08:3b:ca:3c:75:57:2e:fb:83:d3:71:
b8:4e:e9:b7:70:ac:9e:31:8e:03:a5:ba:99:bf:03:65:ef:d5:
8b:41:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:18 2025 by rpki-client