Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: KXjBMtDxXEr55mN/SENhHxSuFMBHeRMP1gtgxOg/IeI=
Subject key identifier: 42:09:54:50:C8:21:B4:83:FF:79:F2:B5:5D:C9:74:1C:DF:1B:69:7D
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 019852683254C5406414E90BB5B5184085DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 19:00:17 +0000
Manifest this update: Mon 28 Jul 2025 19:00:17 +0000
Manifest next update: Tue 29 Jul 2025 19:00:17 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: SL1ugZKpA7WAhwTQJB5MlsTXyDHkJvp4h8H6horJLcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:32:54:c5:40:64:14:e9:0b:b5:b5:18:40:85:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Jul 28 19:00:17 2025 GMT
Not After : Jul 29 19:00:17 2025 GMT
Subject: CN=42095450c821b483ff79f2b55dc9741cdf1b697d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:74:1f:ba:2f:e5:69:7e:ff:34:44:0a:8f:
bc:74:f3:8e:10:07:c2:5a:06:64:28:fe:a1:31:04:
cb:04:c2:77:98:3d:c2:87:e7:de:d1:1b:ac:19:da:
b2:76:3f:b4:aa:e5:be:35:af:3a:72:c8:37:fe:49:
a0:cb:87:b5:c6:ac:a1:47:c0:5b:91:87:67:db:68:
09:9d:53:21:24:25:20:77:c5:08:8e:4f:c6:9b:6e:
37:f6:06:44:5a:ec:00:18:32:54:23:61:6f:89:d0:
f1:97:2c:77:8b:07:d5:89:d7:e0:e8:63:ff:95:0a:
a8:7b:69:d5:1a:c8:2c:3f:ae:87:3c:a8:25:1e:91:
a1:2a:a4:ac:08:02:0d:7f:14:b5:f5:01:a8:c3:08:
fe:51:00:87:7d:a4:9f:f8:69:aa:cf:7b:5c:73:3f:
d4:a4:01:ee:f2:b1:e4:66:d8:4d:fc:2b:2e:19:0e:
88:95:7d:95:5f:86:e6:ba:26:0e:48:14:34:b5:0c:
8a:3e:23:54:39:20:1b:76:61:9e:57:75:48:88:f1:
41:0f:8a:9d:42:b8:44:95:aa:42:52:0e:26:3a:da:
c1:2b:1a:87:9d:37:40:21:a0:95:22:a1:6e:a6:9a:
27:86:77:c8:f6:d2:24:d7:17:18:f7:28:22:0f:f9:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:54:50:C8:21:B4:83:FF:79:F2:B5:5D:C9:74:1C:DF:1B:69:7D
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c7:c7:fb:a2:60:c3:1e:0f:5c:73:de:96:74:5f:5b:ad:ea:
f6:2f:a6:64:81:51:06:33:2b:bb:ff:3c:38:29:a8:84:6e:1e:
6c:56:ab:c9:86:1d:d9:6c:56:ca:30:71:50:f7:1c:c5:f1:73:
09:7b:f9:4f:ad:e2:4f:e0:12:51:95:32:10:0b:70:11:97:09:
da:a9:61:53:34:15:b1:52:8d:8b:49:a6:d0:ab:a4:4d:04:c6:
e2:4f:f5:d2:b6:90:ce:26:2f:80:0c:87:03:e7:b3:06:ef:42:
91:e8:de:4c:30:20:c3:1a:22:97:43:e5:63:1d:51:0d:ce:62:
a4:67:2f:f3:69:46:39:5b:38:90:63:3a:36:b2:c7:80:09:c2:
f5:91:6a:2a:ed:12:91:ad:55:58:ca:16:c7:be:cc:8c:b3:60:
a4:44:c1:f2:b1:18:3f:1b:11:88:76:e4:08:d4:a7:67:fb:b8:
2f:11:56:4d:26:25:0a:ff:a6:c5:30:5d:03:29:63:3f:22:f2:
8f:c4:c4:63:a5:5b:78:65:b5:2c:80:f3:70:be:8d:fb:3c:cb:
f9:52:24:f4:a4:0a:1f:11:a1:e6:b0:98:ba:d5:6b:ba:ed:1e:
06:bd:64:94:c2:b4:80:59:4d:38:bc:2e:73:e6:f5:cc:fc:f2:
5a:f1:c5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:37:51 2025 by rpki-client