Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: AVPjAumtrkIPhQ0IL3En1kZuYXwuw+IjN1r5G2EKv3w=
Subject key identifier: D5:58:AC:91:68:F5:90:51:45:60:A4:FF:F3:F2:E0:60:A7:A7:04:D1
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019847E4CB0075B87D1569C7012924E2D65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 091C
Signing time: Sat 26 Jul 2025 18:00:33 +0000
Manifest this update: Sat 26 Jul 2025 18:00:33 +0000
Manifest next update: Sun 27 Jul 2025 18:00:33 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: kleH2eByYvE1v5FnqkpySiXLjDd5pbblGadfrvei+Tk=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:cb:00:75:b8:7d:15:69:c7:01:29:24:e2:d6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Jul 26 18:00:33 2025 GMT
Not After : Jul 27 18:00:33 2025 GMT
Subject: CN=d558ac9168f590514560a4fff3f2e060a7a704d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:eb:fa:fc:e7:b5:d2:00:e6:4e:5f:1a:77:
56:40:dc:aa:42:7f:35:6e:eb:d3:86:8e:4c:0a:05:
65:81:ee:41:80:ba:7a:ff:46:90:86:e2:a1:c3:10:
58:29:f7:7a:bc:9c:4b:ba:34:f7:9e:b2:5b:55:ce:
15:f2:21:b7:a4:c9:91:2f:8b:00:87:9d:12:61:69:
15:57:91:63:e7:99:fe:4f:b2:49:3a:6b:06:fe:92:
03:b2:65:ef:36:29:fc:63:ca:7a:ac:68:bc:3f:d5:
3b:29:ac:73:a4:4b:82:a2:3a:32:11:cf:03:a7:13:
58:3e:9f:37:ac:14:1d:9a:f6:2f:fd:9a:35:1f:79:
12:c7:b4:6d:0a:af:29:2b:2d:72:e6:42:63:99:e2:
3e:2c:46:a2:f8:46:56:c1:be:a6:f2:49:f9:45:99:
7d:6f:df:78:1c:7f:34:2f:86:7e:93:44:22:f2:70:
46:7e:db:0b:8b:b6:98:ef:34:91:ac:1c:4f:20:d9:
d9:ff:7f:3f:68:15:e8:e5:b7:6c:9a:ac:20:84:d2:
37:1d:7e:75:af:42:e8:fa:ad:b2:bc:d5:4a:cf:d8:
76:e5:41:af:d7:0c:54:38:88:02:7f:2b:ed:e7:ae:
e4:68:de:e3:da:f0:50:0b:5b:fc:20:0a:e5:92:ed:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:AC:91:68:F5:90:51:45:60:A4:FF:F3:F2:E0:60:A7:A7:04:D1
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:8a:85:ae:c1:6a:3f:df:3b:a3:32:c3:a1:d6:79:59:f0:
08:c0:22:81:e4:90:ed:60:4a:c2:ae:6f:db:38:f9:92:6b:a4:
79:14:73:3f:89:ed:fc:2f:12:85:11:a2:4f:59:29:f7:a6:f3:
eb:e0:20:4e:12:4f:1d:fc:c1:cf:25:ff:74:61:d7:be:a0:34:
69:d4:c1:fe:d0:cc:2c:5e:f9:d0:63:f8:d4:02:39:5a:d2:26:
c7:97:c8:f8:a9:b3:15:89:00:a5:64:ee:66:9d:e8:0a:6e:d7:
e4:28:18:aa:3c:a3:42:11:39:49:92:95:86:8b:d1:df:27:61:
7f:26:22:d4:2f:5f:b1:b4:72:2f:f3:0b:fc:96:a9:ff:4d:5c:
86:e7:81:69:f7:ee:1f:02:df:88:f4:93:81:5a:b1:0e:20:d6:
4d:45:44:7a:c4:5b:09:58:11:31:f5:1b:15:20:3b:a1:c5:98:
be:9f:46:3a:7f:a5:92:84:45:0e:8b:21:1b:a9:d0:80:18:30:
0c:ae:bc:09:bd:1d:cb:20:ef:6f:ac:0b:b7:aa:80:4b:f8:c2:
2f:f0:92:40:a6:71:98:9d:4e:eb:ec:58:92:b3:9e:e8:d6:96:
7e:c1:c3:83:cb:05:88:0d:6a:17:34:14:db:ee:f7:ab:ac:bf:
26:e5:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:16 2025 by rpki-client