Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: dtAaS06ub0jP5Zd8VvC0zgApCViFXCM48I2vfMTl2AE=
Subject key identifier: A3:68:D9:99:EC:14:B0:8A:0D:22:BE:FD:08:D5:11:2F:BB:0C:37:71
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 0198D54E55C09B29F636D36C1651B6D4B4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: 3/BZekDYVdGgv5IlCoWl/flAK6UkRMPr4iVtApTE91s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:55:c0:9b:29:f6:36:d3:6c:16:51:b6:d4:b4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=a368d999ec14b08a0d22befd08d5112fbb0c3771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:48:2b:22:a9:46:c2:38:ee:6f:27:ef:59:
24:23:03:c4:13:ef:f3:41:f5:66:bc:8c:fc:b1:d5:
78:4d:37:95:52:47:ee:be:86:6c:36:a6:2c:b6:da:
0d:d2:a1:37:d4:3b:3f:af:dd:e3:ca:aa:2e:42:56:
09:e3:21:7a:42:ff:a7:c2:a8:8a:bf:17:a8:b4:8e:
c5:d9:70:5b:6e:fe:5c:f1:c7:b6:17:07:b2:77:df:
cc:9d:3d:81:3f:a8:53:ae:5d:91:fc:91:f7:21:cc:
a7:4c:12:d7:b0:f5:0b:c8:54:ae:a2:89:19:84:4e:
1b:78:1e:ab:f1:bb:e5:65:5e:c1:36:03:1f:3b:a1:
08:a1:88:bc:82:74:77:67:e6:28:f0:90:64:7c:4d:
ec:26:c2:9a:c6:5c:37:de:79:34:c4:26:24:35:ce:
d8:58:45:e1:a6:07:47:38:da:bd:27:35:0c:10:d6:
0b:91:df:f6:ba:58:fe:24:39:f5:63:ae:fe:d3:fa:
9a:8e:99:46:e4:ec:f1:dc:b1:0c:8f:b6:92:26:ba:
c1:57:84:8c:87:0e:dc:76:ea:64:e1:53:99:47:3f:
3c:2a:bf:34:ac:fe:c0:05:6b:b9:57:63:62:65:0f:
f1:4d:45:04:bd:63:02:4d:87:12:f8:08:88:3a:59:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:68:D9:99:EC:14:B0:8A:0D:22:BE:FD:08:D5:11:2F:BB:0C:37:71
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:5f:77:af:35:56:db:65:25:d4:a5:83:60:5a:94:68:32:
28:f1:6b:b2:a5:a6:d2:f7:9b:7a:cc:2f:8e:3d:d7:b7:a9:47:
fb:72:c7:b2:09:fb:91:24:24:d8:1e:04:90:f8:e7:e1:40:6b:
18:ef:46:21:bd:76:e2:32:96:c4:bd:4b:a0:0c:39:b9:86:b0:
51:42:03:5a:3f:28:f9:0d:57:62:1f:1f:f9:15:7a:75:ae:e0:
a2:16:72:f6:52:1a:4b:c4:fd:a5:c8:83:d0:d8:49:4c:92:c3:
28:2e:18:c9:e7:b9:d9:07:c5:b4:29:51:19:8b:ff:7a:df:d9:
20:c2:7c:7c:18:f7:fa:95:cd:d2:67:25:48:3f:2f:f4:53:72:
f1:65:23:ac:d2:e1:b0:56:bd:c2:3d:5d:63:cf:07:fb:c9:00:
a0:f4:63:eb:a1:cf:2a:e2:ee:2f:a7:4c:8b:89:5c:ea:1c:93:
f0:7d:14:19:c9:d5:2c:d6:be:5b:d6:52:4e:55:6a:09:43:7e:
27:55:35:60:e2:43:41:91:83:3e:0d:00:3b:2f:e6:cd:98:5a:
82:6c:3c:56:de:bc:21:d8:b9:d3:15:a2:fd:8a:bb:f4:4d:4f:
ff:ad:ea:66:78:a5:a6:e3:59:d3:6d:eb:9a:79:43:cb:d9:a0:
c1:c4:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:19 2025 by rpki-client