Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: 4qlXXNo7gCr9rp3fpIFlLUJIZT9qzcmTET/ZGY97OTY=
Subject key identifier: 3F:08:45:11:FE:2D:6B:15:30:A3:64:85:D2:8D:DB:9B:46:91:37:23
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 0198D4E0795B9E7F39F88D0C13FF31535C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0FE0
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: pKmxtPJTdtNIyjs+PIVI7xZ7V3a76LWskDNdbAQ3qds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:79:5b:9e:7f:39:f8:8d:0c:13:ff:31:53:5c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=3f084511fe2d6b1530a36485d28ddb9b46913723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:c6:90:ff:cb:02:ce:54:80:95:10:76:21:
80:05:7e:35:43:d9:0a:2e:56:c4:1f:f9:db:dd:7b:
b4:ff:35:28:45:1a:29:35:75:68:7c:f7:ab:69:6c:
2a:50:21:b1:0e:91:2b:47:f1:4e:7b:93:16:84:7d:
8d:7c:31:15:cc:9c:33:3b:d8:17:2d:55:c0:11:91:
8e:9e:e3:06:44:1e:6e:74:e4:8c:a0:8b:83:af:bc:
a9:4e:d1:31:17:19:a9:a4:30:46:3e:0e:21:7f:f7:
1d:ee:d3:75:b5:16:91:4b:0b:1e:82:cd:43:bb:4c:
39:8b:2f:be:7e:4e:69:a0:e9:88:06:9d:3c:ad:84:
bd:5e:8d:8a:31:ce:5e:c5:1d:22:4f:73:85:0d:f7:
02:1a:24:61:96:1e:4b:00:bf:37:9a:6c:e2:c0:f2:
76:05:4b:52:90:b3:c6:30:5f:ac:36:c8:34:96:15:
7c:65:81:36:2d:3e:c4:49:ee:b0:59:e0:1b:61:e1:
f8:d1:6a:24:a4:af:0b:d2:39:0e:48:6a:19:6c:94:
f6:89:14:0b:c8:db:14:93:db:49:b9:d7:50:b6:cd:
df:b5:6d:1c:1e:72:a0:e5:98:e5:42:0a:ac:7f:75:
79:90:fb:a6:5c:59:81:a9:7b:eb:91:a9:4c:ae:ec:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:45:11:FE:2D:6B:15:30:A3:64:85:D2:8D:DB:9B:46:91:37:23
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:78:22:9a:00:f0:5c:da:1d:72:9e:c8:8c:ad:01:05:a5:
c7:f8:77:da:63:c4:fc:3f:bc:ec:d3:1b:72:10:0b:2c:91:3d:
aa:68:df:f2:e1:d1:b4:72:d6:f1:9a:32:71:ba:e6:15:33:3d:
39:cc:80:6a:34:c8:80:56:f0:f9:0e:c2:ef:1e:fa:9d:1b:1d:
31:4f:e5:40:16:d9:6c:c4:b7:b2:f0:3f:75:1d:2f:d8:ab:2c:
3d:1f:4c:01:0c:77:a9:3e:a7:b5:7c:78:ec:aa:0a:75:0a:3a:
7f:17:ce:b7:92:11:b3:2f:08:01:8e:aa:e5:8b:b0:ff:ff:4c:
3c:c2:1e:4c:f6:69:90:6a:9d:d0:a0:d9:1b:79:d4:f9:24:b4:
1f:b3:ca:c7:66:70:bd:23:13:a9:92:0f:bf:b4:ee:e6:85:f2:
e5:e9:06:8e:1a:ab:00:7e:d4:dd:7c:f3:d5:37:01:dc:42:82:
62:08:38:06:c0:a1:84:57:e7:0a:2c:13:f6:7b:a2:a1:88:84:
4a:9c:d5:d2:ec:5e:81:fa:01:30:67:8c:4a:f2:5e:c9:a7:50:
a5:fd:e5:0f:b7:6b:7c:bc:f6:dd:54:b1:84:ee:ec:22:d9:6b:
26:70:90:b9:c0:09:bd:15:42:aa:b9:68:6d:f7:80:4e:e1:7a:
f3:7a:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:42 2025 by rpki-client