Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: cM76Lm30T+gutvUTCkhfDWYO14mo35v5nCZATLEEGmc=
Subject key identifier: 6A:77:24:FB:1A:61:73:53:44:E5:7C:1F:42:0E:11:9E:DD:FB:B9:ED
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 0198D4E032048001B2CD64DFF7D0E1854F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 03:01:59 +0000
Manifest this update: Sat 23 Aug 2025 03:01:59 +0000
Manifest next update: Sun 24 Aug 2025 03:01:59 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: KpCtW1Wd3K2MHqmaWjf53Hob8yyLOxi92X+dDszfAoc=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:32:04:80:01:b2:cd:64:df:f7:d0:e1:85:4f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Aug 23 03:01:59 2025 GMT
Not After : Aug 24 03:01:59 2025 GMT
Subject: CN=6a7724fb1a61735344e57c1f420e119eddfbb9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:0a:f6:33:7a:e6:86:aa:74:f9:65:42:59:
fa:9f:a9:1f:db:ec:88:77:f8:85:f1:79:1e:b9:b4:
bc:f2:9d:b7:49:86:f5:71:eb:c8:95:e3:33:70:c7:
1f:9c:ec:13:e9:b9:19:db:df:a3:17:85:1e:c2:6f:
70:87:84:da:b5:34:70:c3:e7:16:14:03:de:48:d2:
ea:0c:ff:e3:22:1e:d1:bb:cd:b1:a3:14:2f:b9:d5:
f0:e4:13:0a:ed:2c:1a:01:7c:5b:11:8b:33:79:ba:
a1:94:a7:75:97:76:c6:52:cf:b5:c2:e2:f3:0b:0b:
27:56:a9:27:52:97:3a:e3:47:fb:0e:65:61:58:7e:
ce:b4:3b:b0:10:5d:45:ec:3a:64:30:2e:d5:ed:cd:
1f:ee:f2:64:3e:0b:09:d3:cf:8a:f1:5c:2f:48:ce:
cc:37:25:b8:70:e4:6d:45:a8:4e:be:e8:ba:f7:39:
e1:59:a9:26:de:5f:28:7c:17:ab:8f:e5:eb:0b:62:
f4:ab:08:e9:d9:39:7b:3d:ed:2e:4d:63:0d:97:02:
ac:3d:ce:51:ba:ff:90:ca:d0:ac:d1:0c:fd:f7:5b:
cd:81:6d:60:89:79:56:87:54:95:5e:cd:b1:14:e4:
b0:fb:74:78:05:cf:e2:18:1b:14:47:0e:fa:60:0a:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:77:24:FB:1A:61:73:53:44:E5:7C:1F:42:0E:11:9E:DD:FB:B9:ED
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:60:48:3e:4a:ac:64:3c:5c:94:1e:d6:a5:e7:c6:db:e4:8f:
c5:04:cc:0f:7e:4b:8f:12:fc:cc:0e:75:65:02:1d:f9:66:29:
17:1f:39:b4:3c:55:e5:a2:23:b5:88:47:54:6f:2e:05:60:02:
8e:53:4d:c6:d1:c0:66:98:21:6c:d3:2b:c1:1e:5d:2b:ad:74:
7a:31:45:1a:f0:fb:42:6b:38:84:54:6b:14:0d:af:ca:b8:8d:
4d:8d:d8:2f:54:0a:fa:20:b1:0c:7f:84:07:6e:20:ac:d2:bb:
ca:f3:27:41:fe:31:f7:fb:96:af:7c:08:12:ed:e9:c3:90:da:
4c:99:ce:65:19:50:40:d4:66:7c:1c:12:0b:8c:af:3c:4f:5d:
b9:40:49:5c:85:53:84:e7:f1:bf:10:d7:14:09:4b:a8:7d:94:
d0:4b:a2:ea:ac:e6:2a:db:e6:60:ae:40:5e:5d:e9:bd:f3:bf:
6f:e5:ac:d6:0f:03:b0:5e:25:68:d6:cf:9e:38:28:80:a8:54:
03:8e:20:e4:3d:72:76:e0:55:d8:ab:91:8f:27:6f:b8:3c:d0:
ba:59:3a:52:4a:bc:6b:75:d3:4b:93:7b:e2:00:47:2c:18:5a:
ae:9a:a9:81:3d:5d:34:c6:de:59:5e:9d:c3:ea:14:0f:2f:3d:
ae:88:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:50 2025 by rpki-client