Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: wh7ZoT5raUBhAb6GiFd1WaSycmrTUPSEEbUP3MLpaBQ=
Subject key identifier: 78:B1:72:45:46:55:16:9D:97:79:55:4E:89:D6:69:3C:21:FB:F5:19
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 0198D515EB19740EA057CF7B4902FD5D3D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0C3A
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: 0BpAK384y6OY3F48gqtPox2EPDJmLOohz0NkiUjeyfs=)
2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:eb:19:74:0e:a0:57:cf:7b:49:02:fd:5d:3d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=78b172454655169d9779554e89d6693c21fbf519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:3a:40:6b:d6:eb:98:8c:57:f7:88:3a:d9:
83:9c:98:59:ff:03:bb:75:04:4e:5f:49:74:ad:5f:
79:17:32:14:23:5a:57:91:3e:21:b0:b2:43:ea:57:
0a:89:71:42:fc:21:11:04:08:72:9e:97:3c:c5:48:
3c:77:ee:29:12:51:8d:c1:d5:60:4d:a7:5c:af:59:
6d:06:33:45:f8:22:39:ac:17:c2:07:0f:78:5b:ab:
f7:c2:69:9d:2f:d5:3d:c1:b6:98:21:f1:d6:d2:ff:
52:d1:67:28:7f:37:ca:38:9b:7c:1b:db:1c:28:3c:
0b:28:04:64:a2:9e:ce:74:5c:17:a4:84:c4:a7:35:
31:e2:7e:1e:ff:3d:4b:8c:6f:2b:05:50:ea:3e:f2:
db:57:6a:1e:fb:f7:ba:5a:02:27:fb:6f:f1:fa:f1:
a8:eb:e0:82:d4:5b:24:1d:78:cc:60:d3:e7:34:7e:
f8:b7:2f:ae:77:16:78:66:c0:40:23:9a:5f:98:7c:
45:fc:b0:36:20:e5:c9:ba:4b:e5:5e:f2:d7:b4:50:
ce:61:64:8e:30:e8:4d:cd:77:83:0c:25:c9:fb:8c:
5d:cf:cb:12:0a:ef:bc:82:97:11:e1:bd:cd:85:2e:
ea:c8:c4:59:2a:89:6c:d7:1c:b2:4c:e2:2d:e2:56:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:72:45:46:55:16:9D:97:79:55:4E:89:D6:69:3C:21:FB:F5:19
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:b7:30:cf:22:07:e1:a2:d8:e7:cc:27:83:f1:95:18:5a:
9d:3e:39:3a:1a:4b:72:89:47:03:64:ce:dd:34:e9:1c:28:fd:
19:0d:c1:8a:dc:c7:3b:5a:4d:b5:6f:2b:d0:51:6e:36:e0:0c:
6e:99:da:bb:de:d6:a6:ed:d1:89:aa:7a:92:3f:e4:41:e0:83:
b9:11:ab:2e:c2:a4:c9:e2:25:a6:30:9c:c8:f2:77:df:ab:6f:
f3:b2:b4:77:27:1e:e8:13:87:00:d1:2d:23:18:2a:d0:e9:54:
aa:8a:13:0c:d7:67:a1:ce:ed:6d:2d:77:76:96:41:6e:2c:06:
3f:b9:c0:b3:61:41:2f:f3:f0:52:ad:8e:52:e1:ef:57:12:b3:
a1:14:6b:8f:d8:7a:a5:33:61:d9:c7:ca:a0:b4:fa:b1:c4:f1:
d8:64:98:78:e0:ff:02:0b:95:b6:67:07:28:84:1e:a8:93:39:
68:e9:58:ac:67:5e:89:98:0b:8f:aa:d3:b8:14:92:ca:09:a9:
6a:78:54:1b:a2:75:c3:69:db:b9:a2:58:79:94:cb:e0:8d:b0:
0c:33:6b:72:ec:c4:a9:8b:d0:cb:4c:c5:68:4b:d8:f9:91:f6:
4d:fd:41:ae:0f:1a:0e:66:c9:28:38:58:75:1c:e0:57:e5:ab:
af:fb:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:34 2025 by rpki-client