Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: s+zWbrcWNewQCb1ryxS8MXkdaSOBgEK1biOYzGulL0Y=
Subject key identifier: 8D:F1:CF:54:4D:7A:FE:C1:85:84:06:7C:29:5B:28:8C:FD:B2:50:EC
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 0198D515E9CB4DBC4FBB26B31593F1BA57E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: AlzIBe5ABJRYUO8BqY/8k8GeHVTNflUcP6mhvNZXma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e9:cb:4d:bc:4f:bb:26:b3:15:93:f1:ba:57:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=8df1cf544d7afec18584067c295b288cfdb250ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:e5:51:a6:0f:3e:81:27:12:2e:42:ea:24:
08:b4:2d:e3:17:39:69:11:31:f7:46:d4:69:1f:28:
be:05:84:ab:52:2b:95:7d:1c:3b:9a:d5:16:7f:2d:
a0:cf:15:1e:a9:e3:26:d2:55:8a:53:06:7e:0a:89:
c1:1e:ce:54:f8:e1:8f:df:c5:84:50:5a:04:ff:40:
2d:97:8c:34:94:00:28:1c:fc:15:6c:50:0e:9a:ed:
03:1c:21:b3:d4:66:83:7f:cf:87:1e:70:60:a7:c1:
66:a3:70:31:f4:da:71:08:06:f6:5b:18:ff:88:61:
d2:d9:40:b0:b9:cb:73:66:ee:58:e6:0a:32:9c:ba:
35:76:bf:4d:c7:54:f5:7c:9e:71:a2:29:85:5d:2e:
7f:a6:34:6f:af:28:ff:32:44:5e:0f:cf:0d:81:8a:
3b:19:1e:4c:38:ef:f5:da:bb:e1:4c:32:a2:0d:45:
a4:25:29:0b:67:f2:5e:3a:32:10:46:b2:03:63:17:
8c:72:cb:f5:e3:db:7e:46:ff:a2:ba:4d:7b:77:60:
05:27:ba:ac:cf:86:81:27:92:f0:6b:73:15:b6:ed:
f6:51:f8:38:7b:d3:2b:be:75:fb:63:fe:49:4c:8f:
42:3f:49:f0:c5:71:32:c1:ed:70:76:b9:9c:be:b6:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:CF:54:4D:7A:FE:C1:85:84:06:7C:29:5B:28:8C:FD:B2:50:EC
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c3:b1:13:bb:d6:3f:c5:7d:d2:1f:24:ba:11:80:0c:f0:7d:
50:0f:b8:91:12:56:b3:be:5e:53:0e:41:ce:f0:8d:fd:5b:59:
9f:bf:99:50:21:8b:42:97:dd:4b:23:ef:de:bb:0d:fe:cc:27:
15:45:59:0d:96:23:aa:59:34:ef:a6:c7:32:c1:31:c6:76:cc:
05:3e:27:fa:ee:a6:f4:d1:1b:ae:f6:5c:8a:40:fe:df:3a:c8:
3e:9c:70:42:19:c3:5b:74:4a:62:33:e9:01:c0:22:0e:a4:49:
ea:3d:98:ea:15:04:c7:16:85:e7:f0:c9:eb:7d:72:bf:76:6a:
0f:76:d7:78:7d:37:70:2c:73:77:40:b7:80:3e:96:2c:d2:20:
13:f7:8c:47:8c:34:97:97:0b:d2:9c:e1:a6:47:3a:8c:9d:fc:
dc:99:95:f5:42:39:22:91:6c:71:b1:6f:ad:2f:6f:f0:d7:96:
d8:90:37:cc:76:8e:3c:e8:48:b2:dc:6a:5f:7c:c5:7e:6e:7c:
7d:33:be:f0:4f:2d:88:f6:6d:9b:1a:a9:e7:71:e8:5e:54:99:
50:a3:3c:98:09:2c:2d:49:71:cd:65:ef:e6:fa:ed:29:63:e2:
3d:15:cc:44:a1:36:9e:45:db:bc:ad:5e:3b:55:79:0c:a7:fc:
2a:9d:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:49 2025 by rpki-client