Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: NMipNvnOV7piT/1bgREkRrS1ebfheqYOHI+0HjLocJ0=
Subject key identifier: 49:94:C5:F6:D5:AB:52:FD:17:A7:7A:7F:E6:88:61:A4:67:AA:1C:E6
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 0198D58360A30143DFC92407DA1B150D293F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: E77kRcUSTLZagDtNePCDrt5wl2eh5KBjtH0PmZZw+aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:60:a3:01:43:df:c9:24:07:da:1b:15:0d:29:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=4994c5f6d5ab52fd17a77a7fe68861a467aa1ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:91:05:05:75:cf:dd:d9:5f:6e:41:02:82:
2f:b8:bc:7d:a5:cd:37:ad:4c:9c:89:a6:ab:36:07:
bb:87:e7:0a:d7:84:f7:8a:1b:97:eb:8c:8c:80:f8:
26:e9:6d:89:2e:94:78:d5:f2:81:7f:a3:1a:f5:e5:
e0:72:c2:05:8b:bc:e7:e6:7f:91:89:11:bd:31:e4:
c4:53:dc:18:59:34:a2:f4:a5:7e:f9:ba:09:10:4e:
d4:3f:25:1e:1c:cd:2f:f5:ca:4d:ca:17:93:1e:f1:
86:98:96:0b:f8:29:3f:9d:87:50:6d:bc:dd:f6:c4:
19:02:ee:ce:5c:6b:86:f4:ab:ae:07:de:ea:2b:a1:
2c:89:a4:0f:92:0b:9b:2d:ce:57:a5:fd:61:5c:b8:
9c:f5:5f:11:a6:a4:4f:7d:be:3f:3e:ad:41:85:aa:
6f:40:f0:5f:cf:eb:9c:2e:2d:29:13:55:e3:d4:6a:
1a:ab:a8:d2:4c:2d:e2:10:66:62:23:d2:74:64:75:
41:dd:45:a4:3b:35:0b:42:d4:f2:66:a5:5a:26:dc:
28:c8:37:fc:bc:ca:1d:f9:af:50:17:59:9e:d4:fa:
78:64:30:ae:ab:b5:e0:24:00:e1:be:ef:29:82:e5:
a9:11:28:4a:bc:fb:a6:c6:86:a4:cc:ea:85:92:44:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:C5:F6:D5:AB:52:FD:17:A7:7A:7F:E6:88:61:A4:67:AA:1C:E6
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cc:f4:ab:14:61:88:c5:a4:56:11:fb:fc:29:5d:7d:b2:c3:
0d:06:36:24:9e:22:ca:33:c6:cf:15:b9:b7:09:d0:da:2c:c9:
c8:0b:7b:30:34:e4:2d:e6:aa:e8:fb:82:95:4b:92:9c:ff:5d:
08:92:60:32:4b:21:8f:55:5d:59:17:f2:c8:ba:91:2f:1b:e1:
e2:7c:00:cc:f0:88:05:17:b9:75:54:06:29:9b:0b:ae:0c:d8:
39:46:88:88:0a:95:e6:51:a0:d3:1f:5e:a8:09:bf:b0:b9:77:
6a:0d:97:5d:b9:d9:62:80:9c:64:cf:a9:55:5f:0e:ad:7f:32:
af:98:68:a5:4e:2b:f5:64:d1:51:3d:62:fd:47:99:82:ae:54:
49:8c:ec:d7:69:4c:fa:9b:e7:48:b5:5d:28:97:bf:34:82:c6:
38:33:29:30:c0:49:9f:75:d1:c0:db:6b:46:4c:77:b4:d5:9e:
cc:3e:66:38:fc:20:48:3f:b6:4f:97:47:c7:f5:4b:e4:56:8d:
9d:fb:eb:8a:10:85:7c:96:5b:a0:7d:c6:fd:cf:10:bc:22:33:
e1:06:71:01:8f:0f:c8:f8:22:ce:3a:a8:2d:3f:c1:57:67:6c:
c5:88:32:17:bc:94:51:7b:26:41:d4:18:8e:9a:ca:5d:96:bb:
74:9a:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:01 2025 by rpki-client