Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: hzuN30R9aYzweP5kYU9aPe3EijVDIDr3ZceZwvzUxkM=
Subject key identifier: C8:DE:DE:92:73:9C:95:7A:5B:50:F2:03:61:B7:98:71:30:4C:6D:40
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 019835712B80E7EED03FDEB49C3294D20C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0CC7
Signing time: Wed 23 Jul 2025 04:01:05 +0000
Manifest this update: Wed 23 Jul 2025 04:01:05 +0000
Manifest next update: Thu 24 Jul 2025 04:01:05 +0000
Files and hashes: 1: MxLcAgXC0vRpPyT-3NXtB6NlTcM.roa (hash: glwD9i/+OFABXNduZaHp2v7di44Ewcx6kWVCmGzy8h8=)
2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: rnYtKmgXOnt5HeE/wdjYbQlz6zO9YL0aTEBa5CIan8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:71:2b:80:e7:ee:d0:3f:de:b4:9c:32:94:d2:0c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Jul 23 04:01:05 2025 GMT
Not After : Jul 24 04:01:05 2025 GMT
Subject: CN=c8dede92739c957a5b50f20361b79871304c6d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:be:2a:aa:70:9f:c1:9a:9e:9b:cc:ff:c9:
6e:d5:f1:ea:2b:5a:ee:9f:0c:f8:2e:9b:86:b6:9a:
d8:92:1f:84:0d:18:90:99:8c:da:f1:0c:89:b8:ad:
ef:f3:61:8f:42:7e:80:1f:3c:dd:17:72:7f:0c:71:
b2:42:3d:c5:73:7a:12:70:10:31:43:21:f5:cc:2a:
5f:59:7c:63:ff:2b:55:69:d1:c8:95:c0:ec:0e:77:
4e:48:d2:47:ab:3f:be:b1:4a:38:1f:df:07:4b:e8:
63:55:53:14:35:9e:c7:a1:11:eb:7f:85:c1:6b:27:
77:e8:1d:fc:3d:79:16:53:84:a2:2f:63:35:98:c2:
51:f6:4f:33:d5:1b:84:d7:42:1a:f7:32:38:c5:f3:
a9:89:24:38:82:9f:7e:8a:ef:b4:42:b1:ab:c8:e6:
34:f8:51:4e:60:f4:0a:8c:c7:a9:1e:ad:ca:d2:dc:
34:19:a5:a5:a4:87:07:85:41:07:93:91:8f:19:c7:
84:d7:09:16:37:87:d8:1f:d6:e1:b9:4e:b9:a4:b8:
fa:1f:e5:c9:6a:8e:ba:a6:c2:c6:f7:c9:3e:0b:2d:
39:d8:3f:9b:8a:6f:ea:c8:84:28:29:ca:77:03:d7:
5a:ce:0d:1e:a7:26:30:f8:63:3b:f4:50:3b:65:cf:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DE:DE:92:73:9C:95:7A:5B:50:F2:03:61:B7:98:71:30:4C:6D:40
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:0a:b0:33:da:65:99:d7:e0:ff:a4:94:45:5f:6b:b1:77:
d7:f5:9a:a0:38:03:9f:66:69:6e:b4:07:1d:d1:62:1f:99:ff:
e8:f9:a5:39:68:d9:7f:83:6a:b5:ff:fa:93:9e:1b:ee:37:c0:
a3:be:c6:b7:90:aa:bc:3e:00:61:bf:37:28:52:9c:ad:0f:6b:
e2:76:1d:f1:fa:71:58:bd:36:36:d8:58:6d:1b:a0:39:2a:b9:
df:0e:56:37:bd:61:3f:a6:35:46:47:5b:e0:34:9d:45:65:ee:
25:11:07:94:20:48:1d:29:94:a1:ad:44:b0:1a:01:b3:ac:77:
46:4b:5e:85:26:02:b8:47:dc:71:2b:57:18:c6:98:7f:f8:93:
2e:60:76:9f:6b:b1:55:20:43:a2:08:ea:a8:72:42:77:99:3b:
45:dd:45:7b:0e:05:8f:ba:b1:d3:b4:52:97:ed:36:d1:b4:16:
56:a8:88:29:57:f8:7b:d9:b5:1c:6a:65:69:8f:3c:7a:6f:19:
05:ac:8c:a6:2e:05:d4:a9:a0:27:3e:fa:8f:24:2b:43:38:71:
23:eb:cd:49:d8:36:7e:0a:8e:bc:fd:b4:60:73:a3:66:9c:57:
be:b4:63:41:46:37:0f:ab:2c:bf:4f:be:15:82:4a:57:cf:52:
4f:9b:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:59:06 2025 by rpki-client