Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: Iszyl/Ypo288p/DZzey3iUT5jwthQTA12TcgCkIJ0jY=
Subject key identifier: 8E:2B:47:59:C1:04:E5:E3:B2:04:77:3D:DF:2C:2D:3F:8B:29:41:D8
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 0197CA5E0917702D5EE178189960BC1294AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 09:00:49 +0000
Manifest this update: Wed 02 Jul 2025 09:00:49 +0000
Manifest next update: Thu 03 Jul 2025 09:00:49 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: qv2bCFCy4ZcrujI9R6u18BO/uSBzzo23KQEMCC1uVxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:09:17:70:2d:5e:e1:78:18:99:60:bc:12:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Jul 2 09:00:49 2025 GMT
Not After : Jul 3 09:00:49 2025 GMT
Subject: CN=8e2b4759c104e5e3b204773ddf2c2d3f8b2941d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:9e:6b:99:99:a5:63:57:71:e7:33:98:47:
53:b6:37:8c:7b:2d:8f:b0:bd:82:3f:fd:57:ab:9d:
98:b7:7b:0f:1d:9f:e6:e2:f9:ab:1b:2b:1a:bb:f6:
cd:f0:0b:6c:18:a8:f0:70:73:4c:c6:dc:55:1a:b9:
1d:e9:68:54:d1:ad:a9:44:13:bd:01:a2:fe:42:91:
90:13:d0:fc:b2:dd:e1:ee:e5:93:8b:fa:81:b3:bc:
d6:63:de:34:2b:af:1f:a4:da:a2:f0:49:ad:27:cf:
cb:ac:0f:a3:2e:a0:66:07:5a:46:e9:12:2f:fb:94:
bd:84:87:b3:07:11:bc:48:06:00:c3:da:42:45:2f:
4f:02:f2:a5:9d:e4:af:42:92:c3:ca:38:2a:6b:69:
81:ad:40:36:7f:90:a8:9e:1b:d5:a7:27:67:4b:e9:
9b:60:f1:cc:1f:03:a3:07:b6:7a:bf:76:f3:18:e2:
9f:fa:4a:3f:79:e6:16:f8:d3:12:7a:45:d1:dd:ae:
55:03:0c:0e:ee:2d:3e:e3:fc:1e:01:78:4e:42:c7:
3e:52:4a:f9:df:70:18:e0:8c:0f:7c:5c:31:6f:66:
a0:36:09:cb:73:37:21:10:eb:2e:4d:89:b4:12:ac:
7e:16:fa:e1:e7:a9:43:c4:4e:6c:65:5c:56:62:5f:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2B:47:59:C1:04:E5:E3:B2:04:77:3D:DF:2C:2D:3F:8B:29:41:D8
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:03:94:19:97:64:0d:22:f5:73:a1:7d:41:a1:44:fa:5e:9a:
e7:88:e0:c8:3a:78:19:c3:19:81:c1:c6:97:84:94:48:8b:79:
cf:3c:c2:ad:81:e0:fc:6a:d6:59:a0:a8:a9:e0:ab:e4:e4:8a:
81:f2:4c:74:30:94:f9:94:fc:5c:d4:88:c9:d6:c4:88:88:3a:
34:f6:16:d1:cf:f2:9d:bc:af:88:29:5e:75:60:2a:6c:a2:13:
b3:d4:72:ce:f5:ab:91:df:e7:69:ae:14:9b:0f:87:33:70:4f:
e4:b6:da:fc:6a:8a:e3:8e:b4:1e:cd:f6:3f:78:65:a9:af:1d:
71:fc:48:05:7a:c1:ef:60:9a:63:1c:69:82:61:a8:ea:ac:7b:
64:d9:84:d5:d7:82:e2:79:65:cd:ac:f4:ee:d8:28:35:ac:c0:
51:03:e2:32:b3:7d:37:3d:cf:fc:9e:4c:74:76:1e:4f:7e:70:
b2:05:a0:f6:d4:9c:60:3c:e4:1e:d4:e4:b6:03:22:7a:ce:50:
86:e6:ff:49:d5:44:24:2b:7c:78:62:3d:18:ad:33:87:1b:7e:
06:27:80:a1:8b:b5:b2:00:45:06:c2:95:1d:66:e4:24:e2:27:
a3:69:64:22:38:47:59:fd:b1:cd:a3:e0:17:e9:8a:46:8a:c6:
6d:db:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:25:06 2025 by rpki-client