Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: GOzTcy5r4xG/ZLi4YwjtEiLsYNSFlJKHxelRo3m1Wqk=
Subject key identifier: A3:EA:0F:7B:A8:09:91:3E:2D:D2:05:85:5F:E2:68:56:32:41:D2:B9
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019854FCE6395B38ACB948BD6D825DEE3009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 07:01:56 +0000
Manifest this update: Tue 29 Jul 2025 07:01:56 +0000
Manifest next update: Wed 30 Jul 2025 07:01:56 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: vfpF2is9ZJl4OAR13SYv2h4HpYoetmWC4/ti2MorSxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:e6:39:5b:38:ac:b9:48:bd:6d:82:5d:ee:30:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jul 29 07:01:56 2025 GMT
Not After : Jul 30 07:01:56 2025 GMT
Subject: CN=a3ea0f7ba809913e2dd205855fe268563241d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:f3:a8:47:50:b7:17:03:58:07:c4:b3:18:
57:10:5e:de:c0:c7:46:d0:92:63:21:17:f4:e9:b8:
ca:b3:fd:55:fa:7f:21:e6:4b:77:d8:5f:f3:0b:49:
f5:69:86:42:85:97:d8:de:dc:a9:21:92:e2:34:d3:
57:60:f7:34:8a:3f:02:cf:92:17:9f:cc:6b:4b:c1:
2e:09:8b:14:31:67:5d:a6:09:e6:56:03:3e:23:f0:
ba:1b:6a:1f:8e:84:53:f7:cc:c6:50:01:c3:d8:7b:
46:fd:e7:a4:5b:7a:d9:98:dc:50:0b:de:6c:9a:85:
44:a1:e5:35:e5:50:f7:78:25:f8:34:59:7e:3f:36:
24:14:7c:5b:d8:bc:7d:14:28:27:04:6b:8f:eb:ea:
5f:1c:82:7f:b9:6b:54:40:68:fb:51:c6:7f:7c:95:
66:b8:9e:43:4d:60:b4:86:2d:47:21:af:d8:e8:48:
d3:b6:4f:d3:4a:7e:f4:89:ab:aa:1c:5e:9b:aa:be:
d7:e6:9d:7c:47:67:e2:60:9e:81:ff:73:54:34:df:
92:5b:d0:26:a2:5c:ab:1a:68:a5:e9:11:61:5c:20:
8f:13:a2:c6:a1:30:2f:c4:11:1d:c5:b0:ec:d6:cc:
53:ab:46:ec:92:04:e0:a9:0d:33:29:9d:a0:7c:b2:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:0F:7B:A8:09:91:3E:2D:D2:05:85:5F:E2:68:56:32:41:D2:B9
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b3:61:ff:a0:67:20:cf:ef:75:64:60:67:d5:7a:d4:ef:d4:
01:3c:1c:b0:94:09:f2:f3:27:67:80:3f:1b:57:44:2e:5f:74:
ff:4c:c4:07:d3:0d:7c:37:89:38:92:08:ec:44:5d:14:32:dd:
19:67:8c:7a:35:d0:6b:ca:51:39:e0:97:18:2c:66:07:5c:ce:
39:aa:a8:40:2a:fa:5d:65:67:60:7b:43:cf:ce:db:4e:65:02:
0d:36:e2:6c:55:b8:11:7f:9b:e6:41:af:38:76:13:cf:cd:26:
c6:0b:14:f6:13:53:8d:42:fa:5c:c3:95:9d:58:10:f9:4e:11:
0b:83:e4:0d:09:a8:16:f7:78:10:c9:78:df:83:33:b6:6b:3e:
f4:15:81:66:7e:c1:54:e5:5d:45:05:86:69:7e:46:e9:d9:35:
ed:80:83:fa:eb:2c:94:68:76:f3:60:6a:a6:54:4d:7c:f2:d5:
9a:36:b6:17:93:be:d1:a2:d3:ab:0e:8e:0b:5e:ff:7e:4f:26:
7b:28:6b:ae:15:ff:c1:f8:2f:6f:ab:0d:66:ce:5f:9a:60:74:
a1:65:4a:4c:bb:87:0f:20:c5:1f:e6:5c:cd:32:fe:a9:de:54:
e0:85:39:58:ec:0d:01:8e:06:ac:76:6f:fc:b2:50:2b:4b:30:
db:0b:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:52:49 2025 by rpki-client