Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: u0PN8iZ68IPTAvMOn/HUj8BJHVR/F6venjgOwnk4cO4=
Subject key identifier: C1:F4:E1:24:61:AF:11:BB:27:6D:5F:8A:A0:30:82:73:9E:8C:91:E2
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019847E4BFC3BF65695717D993873EF34FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 154E
Signing time: Sat 26 Jul 2025 18:00:30 +0000
Manifest this update: Sat 26 Jul 2025 18:00:30 +0000
Manifest next update: Sun 27 Jul 2025 18:00:30 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: AQh2RhtF2iq05htKk+7luWuEuktaJnPCx0ApF64JTo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:bf:c3:bf:65:69:57:17:d9:93:87:3e:f3:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jul 26 18:00:30 2025 GMT
Not After : Jul 27 18:00:30 2025 GMT
Subject: CN=c1f4e12461af11bb276d5f8aa03082739e8c91e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:e3:1e:05:77:a9:c2:05:6e:e8:91:2f:62:
a5:36:04:65:13:74:0f:83:91:61:bd:0c:f4:16:2c:
91:58:e3:0a:b1:00:13:6b:8e:fa:eb:bc:91:59:9c:
57:76:77:6f:c3:91:6b:86:ca:16:21:0d:c6:0d:1e:
14:10:47:c2:7e:f3:5a:45:67:6f:8b:2c:a1:ae:04:
88:fb:bb:7d:86:69:a3:c0:d1:76:e0:b1:6e:86:8a:
12:d6:24:8c:c2:57:ca:7b:31:cf:53:35:93:1d:58:
3d:5c:0d:fa:db:46:5e:5d:bd:78:a0:37:cd:8b:7d:
95:38:d4:ea:bc:85:11:b5:32:41:3f:ef:05:9a:3d:
a1:77:df:fb:da:44:db:a6:81:b6:c6:f2:8a:79:43:
04:8f:4f:aa:21:c0:7c:4a:d3:22:56:a7:b3:76:33:
35:9a:ee:04:89:61:5c:64:14:46:fa:63:f8:42:91:
92:10:bc:7c:42:e0:82:4a:d8:29:7a:ca:3e:bb:9a:
9c:96:49:98:f3:13:19:b3:56:73:af:e7:2f:e8:94:
75:35:e0:74:d5:52:d6:9f:d7:29:65:53:3f:dc:9c:
ae:d9:bf:51:22:96:1f:16:7e:39:72:e1:42:19:9d:
df:74:54:7a:56:d6:11:cf:03:98:e2:92:ff:30:c0:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:E1:24:61:AF:11:BB:27:6D:5F:8A:A0:30:82:73:9E:8C:91:E2
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a4:cb:97:2a:61:27:05:36:31:02:97:d1:79:12:f0:5f:a5:
a0:25:08:00:a1:13:c7:13:01:66:e3:02:19:b7:98:db:84:3b:
f0:a0:10:be:ac:ee:a5:a8:0b:a3:5e:da:6d:8b:c8:f7:07:25:
34:a4:dd:0b:1d:03:74:aa:97:37:e4:a9:83:07:ff:d0:87:1d:
1a:6f:b7:61:eb:4e:81:2b:57:7e:ee:b6:89:26:9a:21:76:fe:
95:2c:ff:a6:d7:7c:0b:dc:9b:e9:8b:40:8f:1d:ee:6d:1a:59:
ec:3c:a1:0e:92:6c:02:15:f1:10:a9:45:03:29:cc:21:d7:27:
81:62:4d:c4:0b:ab:2e:2b:60:e0:23:e7:cd:25:10:6e:8b:fb:
41:0e:5d:7b:c4:44:87:51:97:8d:11:51:b5:6f:dc:f8:5c:14:
b7:80:49:40:4e:96:ab:5e:00:f9:90:24:d0:f3:b3:5e:d1:a3:
40:30:9f:c2:a2:fc:d1:33:1f:66:3b:fe:bc:33:db:88:c4:e7:
49:cb:03:a1:85:48:f6:53:5a:fd:55:f0:fe:76:d1:ea:69:70:
25:f3:73:b8:6d:3c:67:74:d5:0d:c1:4f:00:3a:4a:89:32:9f:
7a:c0:50:3a:4f:22:0e:30:09:76:c2:c6:a8:6b:06:08:70:c9:
4b:ca:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:21:28 2025 by rpki-client