Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: lxirKcuuvh5Ip4JVI8rNb0IKulAlnzeGB/xc3lZSmgE=
Subject key identifier: F2:BD:16:CD:F1:12:F3:30:94:F8:7A:A3:5D:85:6B:63:CE:D5:44:F4
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 0198D5F1C86DF0ECBB294655BC41C1604FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 1424
Signing time: Sat 23 Aug 2025 08:00:48 +0000
Manifest this update: Sat 23 Aug 2025 08:00:48 +0000
Manifest next update: Sun 24 Aug 2025 08:00:48 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: Ar56dcoMZpweWC+/8dvQ+/WEICt2RMEa5Bb0O4HgbWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c8:6d:f0:ec:bb:29:46:55:bc:41:c1:60:4f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Aug 23 08:00:48 2025 GMT
Not After : Aug 24 08:00:48 2025 GMT
Subject: CN=f2bd16cdf112f33094f87aa35d856b63ced544f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:1c:ef:ab:6c:c6:91:98:cd:0b:da:26:0e:
e6:a5:a2:44:83:3f:e4:06:6d:37:79:6f:82:6e:52:
56:db:a4:69:73:d3:03:8f:12:74:63:ba:33:04:75:
b4:c1:60:33:98:1e:b6:b8:ef:65:43:ad:b1:1b:2d:
fa:ba:74:d0:09:96:d8:17:bc:0c:e6:c5:e6:fb:c7:
b8:81:01:65:9a:67:25:e0:66:be:8c:c9:c9:91:66:
e6:a1:e7:91:de:81:6c:f9:b5:32:d8:7b:c4:d1:34:
91:1c:04:a2:4c:74:0b:f4:f6:40:27:83:6b:3c:37:
9f:44:a2:5f:2d:5b:6f:46:8f:e5:4a:a1:6a:ac:ef:
a4:53:6b:6b:64:37:32:61:95:d4:78:79:b6:c8:67:
44:06:31:ac:49:cd:b7:94:51:ab:59:ab:a7:e7:a0:
4f:f7:63:fc:9c:48:97:e2:f6:9f:37:02:63:27:bc:
b6:8c:8b:aa:70:d7:ad:33:d2:1d:e1:9f:42:dc:85:
36:03:cd:ca:7d:cd:2f:eb:de:56:9e:67:c6:4e:b7:
7d:71:d2:16:22:2a:da:c0:ab:2a:20:2c:a9:75:74:
82:bd:da:3d:1d:dd:3b:04:90:a4:81:f2:8a:a9:28:
2e:7e:3b:dc:eb:79:6f:69:03:50:c0:27:d8:0a:e5:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BD:16:CD:F1:12:F3:30:94:F8:7A:A3:5D:85:6B:63:CE:D5:44:F4
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:28:33:17:5c:2b:0f:13:71:67:71:a9:94:fd:32:da:53:af:
d8:c1:e9:00:56:5d:39:f5:c7:56:26:86:c9:e1:2a:17:1e:96:
25:23:54:d3:09:3a:14:78:0e:93:d0:00:68:68:ec:a2:33:f9:
96:91:95:78:27:4d:ce:73:cd:cf:4e:c2:81:26:a7:25:94:f0:
bd:e7:65:d7:55:7d:7b:87:62:4f:71:da:04:a2:06:7c:32:9a:
1d:64:72:37:30:01:59:f3:af:50:54:27:cb:62:b1:d5:77:0b:
1c:d8:9d:72:20:0c:02:fc:ea:f5:81:5f:39:39:75:9d:fe:65:
94:a3:9a:3f:4f:24:2c:a9:83:97:8f:58:65:8b:5c:9b:49:c8:
24:1e:be:41:4f:73:47:ec:12:71:b0:13:d8:88:26:55:ee:2b:
07:05:f2:d9:58:dc:02:fe:c7:fc:2f:61:24:fd:47:86:29:90:
da:ed:ec:69:91:77:96:29:e7:bb:ad:15:e5:9d:30:02:ca:b8:
ac:4e:be:c5:76:a5:94:5d:06:62:16:b9:13:4f:e8:ac:9c:c4:
30:b8:67:7e:b8:8c:18:e9:ac:0f:f4:af:89:03:a9:83:86:be:
6d:1b:8b:43:ad:6d:85:41:b1:b7:23:22:71:73:f6:f5:b5:b7:
58:b8:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:20 2025 by rpki-client