Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: oi/Y7ALmdNiVOtmumuRGaojFwn2AoZAsOEligOpECMs=
Subject key identifier: 47:7C:0D:47:0C:D6:42:03:42:0A:81:E4:51:D4:97:10:3E:91:E0:07
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 01984965AEEC576466CEF84AF16BFE2D33D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 0550
Signing time: Sun 27 Jul 2025 01:00:57 +0000
Manifest this update: Sun 27 Jul 2025 01:00:57 +0000
Manifest next update: Mon 28 Jul 2025 01:00:57 +0000
Files and hashes: 1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: TSBnXWhHSTNWO4VR6Feh6OZwIfnllBgQlfJ1jW+jKr0=)
2: zCy2TEUINZmipMaXJF_ZJiCXKXs.roa (hash: kFNybXZv7aLQUvfMaX6TQe+E+VLOfa/7bi5eq9XGzik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ae:ec:57:64:66:ce:f8:4a:f1:6b:fe:2d:33:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Jul 27 01:00:57 2025 GMT
Not After : Jul 28 01:00:57 2025 GMT
Subject: CN=477c0d470cd64203420a81e451d497103e91e007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:5c:b6:4b:3a:62:8b:db:b6:f8:ed:fd:1a:
14:5f:c7:ad:b1:ad:e0:51:7b:e1:a3:e2:9d:f7:3f:
a2:d6:ca:6a:0c:57:01:59:dc:47:a8:86:14:53:76:
57:cd:1b:dc:99:12:4f:e0:93:45:0f:ef:cb:95:52:
79:74:98:07:83:1b:7c:18:c2:f1:67:37:de:7c:fc:
fd:9a:a2:fd:12:18:0d:6a:f2:ca:d0:32:a5:87:d7:
cb:58:59:b5:ec:59:23:47:22:1c:b6:9a:a2:96:48:
ce:3f:f2:5a:51:00:86:3d:bc:69:49:63:5d:48:fd:
b3:26:06:37:59:d2:e1:df:af:11:08:11:ee:7f:cf:
9b:fc:37:62:50:03:fb:44:a3:b3:28:99:cd:24:b2:
7b:6f:d4:99:b4:f1:87:d8:b3:12:84:a5:a4:ed:f9:
88:1c:e3:52:99:0f:1a:69:c8:fc:8d:dd:75:1e:4d:
2f:6b:72:3b:9a:bc:dc:2b:3d:7d:ad:20:24:83:ff:
e6:05:2c:73:25:bb:1a:7d:8e:e2:c6:7e:34:86:98:
35:f1:f4:26:bb:cf:d5:70:df:2f:b9:83:d5:e3:14:
26:a9:3c:e3:ba:b5:5c:ae:0b:03:92:a2:86:6b:eb:
bc:70:57:6a:e4:c8:60:a4:88:a2:b4:8f:58:2d:61:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:0D:47:0C:D6:42:03:42:0A:81:E4:51:D4:97:10:3E:91:E0:07
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3b:62:b0:65:8f:88:f6:ee:b7:b6:9f:1b:a3:66:f8:97:63:
9d:6e:ef:19:48:81:14:ad:a6:9e:52:a7:48:b3:32:bd:9e:40:
0c:18:43:eb:a2:51:d2:4f:55:8f:84:27:39:85:49:83:8d:08:
19:06:17:da:6c:63:d7:ac:4b:68:7a:85:eb:63:5f:ba:fe:8b:
b3:85:fa:a5:08:60:25:70:d2:6f:ac:3d:af:f7:d1:fb:61:d1:
08:15:53:52:41:a3:f9:e6:d1:83:d2:4e:31:2f:2f:55:4c:90:
07:5e:a9:54:b7:05:36:46:6e:86:49:6b:39:2b:c9:cc:a1:80:
94:49:64:6c:11:89:d2:50:9b:da:f4:04:62:01:ca:5a:9d:80:
af:42:54:00:48:13:2a:e7:82:1d:a4:c7:12:b9:7a:ed:ac:e0:
74:01:9d:04:07:69:05:75:ae:12:46:1c:b8:5c:f0:cd:fb:4b:
f4:9c:a0:ac:a8:6a:42:a5:b3:af:be:b2:bc:90:97:0f:0a:99:
e4:d8:ca:d4:4e:03:1d:cd:20:95:7c:0d:3f:67:c6:b8:68:16:
aa:b2:c0:46:45:8f:a7:1c:31:b0:1b:7d:b0:88:7e:b7:1a:c9:
82:9f:6a:8c:84:57:c4:5a:9b:1b:fe:10:50:00:36:8a:9f:d7:
c1:ad:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:36 2025 by rpki-client