Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: bdXY7EZGNpV4qDDjms+kxe8N9EKl1OG/ZQBEL18HdJU=
Subject key identifier: B3:D5:C9:52:20:C4:6B:CB:5C:58:3D:BC:62:8B:0E:CE:3F:F1:6B:80
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 0198D583A5BD51A7BC8B49142542C5EFDA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0C5B
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: pjQ4r5kwKlfD8EOQ2x7nsA7A2fbOzEQgucqyFB7IpYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a5:bd:51:a7:bc:8b:49:14:25:42:c5:ef:da:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=b3d5c95220c46bcb5c583dbc628b0ece3ff16b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:e2:cc:d8:a4:af:c7:c1:51:ad:0d:86:72:
06:2a:fe:da:c0:e6:10:fa:61:9a:2f:fa:40:04:e2:
e7:59:97:4c:fe:8b:0e:26:33:2b:66:a9:de:50:26:
2b:fd:33:6d:b6:e9:bb:3e:63:7a:12:c0:69:17:b9:
14:e6:d0:4e:08:cc:e4:d9:24:f7:f5:50:d0:34:cc:
b6:11:b1:c1:c0:81:37:a1:3e:ff:b4:e0:3d:15:9b:
00:6d:2d:56:e4:f2:03:99:de:2f:36:9a:8b:55:cf:
61:b9:e6:c5:81:03:17:cf:7a:da:cb:18:72:35:a1:
36:2c:f3:85:fd:58:76:16:6a:14:a7:be:38:c5:18:
23:09:22:e2:9d:1e:fb:46:be:72:06:23:c0:93:8e:
62:07:7a:62:6c:9d:fb:f9:be:40:63:f7:5c:91:75:
8a:f1:d0:26:50:b8:76:52:8c:25:6f:42:25:02:67:
57:0c:79:b3:01:38:3b:15:53:27:d6:5a:b7:ac:6a:
09:b7:88:f0:25:7e:a7:a3:35:dd:c2:64:f3:ae:b9:
55:b3:a8:0f:7d:48:17:d9:3d:52:54:65:b0:80:3f:
ac:3c:a1:ec:fc:3b:43:ba:fa:04:86:ac:24:11:87:
7c:34:72:2c:71:d8:5f:b1:bb:a3:51:b2:86:d6:e2:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D5:C9:52:20:C4:6B:CB:5C:58:3D:BC:62:8B:0E:CE:3F:F1:6B:80
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5a:0f:6e:6b:ff:d2:67:ec:07:b0:5c:13:3f:b2:5f:7f:8a:
04:0f:ce:bb:04:15:62:6d:c6:23:a1:97:2d:da:b7:8b:34:84:
76:71:d0:0e:db:dc:97:b4:64:90:12:65:c4:4e:da:32:8b:e7:
47:2f:ae:8a:5b:29:bd:9a:e8:0e:dd:67:47:79:6f:49:a7:df:
55:59:69:83:ce:27:c5:6d:80:f6:4f:a6:37:64:77:9f:88:d9:
58:92:d6:b9:d1:11:61:cf:c5:da:32:f8:ca:8d:44:b4:44:d4:
85:90:47:0d:b5:9e:f2:61:90:3c:ba:4d:e9:93:a6:a8:10:cb:
07:27:37:0e:48:22:57:0d:59:e0:80:ae:25:c2:ab:57:0f:45:
32:93:d9:4c:4f:36:f1:a8:2a:f9:7a:cf:fb:2f:e6:8c:cb:bd:
a2:07:18:b7:05:5b:80:5a:59:e2:15:2a:de:fb:28:93:a3:bf:
33:24:9f:a6:d0:be:c1:30:3c:af:5a:6c:3d:fb:ba:d0:9b:b6:
ab:29:66:cd:d0:bb:cc:bf:4b:60:ac:0e:7b:33:14:e6:8c:e2:
80:52:20:94:ab:6d:67:c9:cf:b4:21:33:8c:a5:96:47:2e:ad:
be:de:e7:8c:b8:97:7b:1e:f2:6d:cc:21:84:63:b2:eb:ff:ad:
34:13:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:03 2025 by rpki-client