Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: xFqLlIf9omUN1+90TaCKV9md1Iy/2/Zyl9hBEgBvuMI=
Subject key identifier: F7:42:4F:17:98:56:D9:54:F1:E9:F7:1E:D8:1F:D6:15:66:71:4B:6C
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 019854FBC37AF552246763B9E188168ECE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 020A
Signing time: Tue 29 Jul 2025 07:00:42 +0000
Manifest this update: Tue 29 Jul 2025 07:00:42 +0000
Manifest next update: Wed 30 Jul 2025 07:00:42 +0000
Files and hashes: 1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: XDHLKSBTvbVW4er8iAtSIgyNBFQwuTg9H4UTKqIYFcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:c3:7a:f5:52:24:67:63:b9:e1:88:16:8e:ce:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Jul 29 07:00:42 2025 GMT
Not After : Jul 30 07:00:42 2025 GMT
Subject: CN=f7424f179856d954f1e9f71ed81fd61566714b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:44:50:01:9f:8b:28:09:1e:84:fc:af:a9:
6e:b8:6e:bb:56:c0:f1:87:7e:4e:57:f7:93:6e:80:
b2:fd:05:af:e5:84:0d:ea:64:b6:52:20:5f:8b:ce:
47:b1:48:c9:a6:48:cf:25:c3:fc:6d:bd:36:49:89:
7a:fc:03:39:f7:14:54:01:70:39:35:cd:a0:69:03:
98:62:bf:4d:e4:7c:71:92:4e:ae:d6:20:4d:e9:ec:
e2:e9:c3:4a:b7:48:b8:48:82:0f:16:e1:da:13:bf:
e2:98:2b:b0:fe:87:2e:8f:98:fd:8c:9e:53:d6:d5:
15:d5:18:2e:eb:8e:4c:cc:1b:91:37:a0:e1:9e:d8:
80:f6:47:30:a6:c9:78:62:52:d4:73:03:2c:60:6e:
6f:ff:e0:83:29:ef:87:98:ee:ac:dd:c8:10:8f:86:
4b:82:28:91:66:23:06:35:07:46:12:ac:25:a9:f5:
a1:aa:40:ec:87:e9:d5:dc:78:59:49:a8:e3:c9:01:
2d:4a:b8:16:07:64:32:e7:0f:f4:f5:36:75:3c:df:
76:0f:cc:5c:8e:e0:b3:af:6a:e2:c9:35:7a:99:c1:
d9:df:71:46:ad:f4:46:50:57:69:a2:ad:eb:62:36:
b5:ed:c5:ff:b1:82:1b:6f:b5:42:0b:78:7a:3b:c6:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:4F:17:98:56:D9:54:F1:E9:F7:1E:D8:1F:D6:15:66:71:4B:6C
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:02:cf:96:75:0d:27:87:c3:55:b6:72:8c:67:f5:95:f2:32:
9f:f5:35:a0:67:c5:de:90:53:d7:a9:18:29:f9:4e:86:b4:c2:
83:e2:bb:d7:9b:50:c5:7f:13:6b:ce:23:05:00:4e:5e:32:bc:
d1:a2:eb:7a:1a:94:90:94:00:80:3b:27:3e:ce:d3:27:b9:77:
f5:cb:bf:86:4d:5b:88:08:3a:a0:41:1f:e3:d6:d9:5c:60:47:
63:cc:ab:a9:60:28:dd:b3:49:e6:9f:9c:84:31:bd:42:89:12:
f4:c9:0d:a0:78:fe:94:a9:28:0f:da:ea:d8:e0:75:c1:74:ad:
df:59:04:77:9b:e6:cb:eb:9a:ad:87:b8:b3:17:e4:0c:da:b7:
0f:50:be:8d:22:9a:b6:44:5f:a2:c5:25:5f:50:67:b6:62:2e:
7c:3e:cc:cd:2a:4a:f8:dc:00:7c:91:3d:70:7d:9f:9b:6d:aa:
3d:92:33:ca:93:12:24:90:bb:db:13:4f:32:95:b2:d5:df:cf:
a3:3c:54:b1:b0:4b:12:ef:13:91:97:6b:96:1d:18:cd:bb:a6:
91:cb:bc:13:4c:f8:d2:ef:da:47:bc:3a:8c:39:77:71:09:f3:
16:ff:b0:18:9d:b1:a5:85:9b:52:18:0e:fe:da:70:db:b7:05:
a7:66:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:18:25 2025 by rpki-client