Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: 9BmmCBXltZK7s59rQvAhDZxUcd+2MG5B6wGi3cxLKKE=
Subject key identifier: 27:4A:5C:88:E8:8B:80:30:8A:13:52:8E:C8:E1:F4:E1:48:95:84:BA
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019844E3B5F1C9142C2043918680BBCC1FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 01F4
Signing time: Sat 26 Jul 2025 04:00:30 +0000
Manifest this update: Sat 26 Jul 2025 04:00:30 +0000
Manifest next update: Sun 27 Jul 2025 04:00:30 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: mYO86dFKO/Y3BxWb5yRKwBx3tSEFiASANDqd2K6mZRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:b5:f1:c9:14:2c:20:43:91:86:80:bb:cc:1f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Jul 26 04:00:30 2025 GMT
Not After : Jul 27 04:00:30 2025 GMT
Subject: CN=274a5c88e88b80308a13528ec8e1f4e1489584ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:24:bc:50:c0:26:fc:4b:57:60:e4:b8:f4:
f3:e1:2d:2a:32:8a:8e:37:d7:e3:fe:54:b3:6b:28:
81:e8:5e:3c:1b:d5:bb:92:56:06:44:7d:3f:c2:e0:
b6:1a:b1:24:33:1f:71:d5:cf:90:ce:26:32:5d:79:
ae:62:66:be:05:e1:d2:0d:5b:b3:0c:b5:39:29:56:
0c:c2:23:75:52:85:f7:18:22:70:f1:55:53:85:7d:
62:76:db:fc:0c:3e:2d:c5:4c:6c:a4:8a:5d:73:3d:
8e:78:e4:aa:15:d7:03:eb:c8:6f:49:29:f1:9e:87:
30:b5:0c:c1:3a:01:9b:bf:32:58:6c:0b:e4:fb:9a:
ab:92:d2:85:e3:21:f9:3a:14:91:a6:08:34:14:ea:
e8:31:08:a5:54:20:5a:4a:dd:7f:a2:01:28:d3:0f:
01:13:71:f4:d2:52:5a:f6:3d:df:2b:e9:3d:23:6e:
79:8e:82:47:fe:5c:ac:2e:52:15:91:45:8d:29:6d:
08:c3:fe:1f:36:d7:d1:06:0c:b5:ad:65:fb:09:21:
37:f0:c1:85:b1:da:2f:8d:62:4c:09:0d:a1:7c:2c:
b1:e0:27:0c:9e:31:2f:29:a4:30:e2:ed:56:75:67:
c5:94:ea:bb:18:ef:45:2d:eb:e6:85:9a:5f:fe:9a:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4A:5C:88:E8:8B:80:30:8A:13:52:8E:C8:E1:F4:E1:48:95:84:BA
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7b:38:6e:ec:90:3e:aa:53:cb:42:b1:31:91:d8:9a:8a:90:
f6:ed:41:c6:51:db:10:f4:4c:6d:10:6d:d5:60:95:af:a0:db:
b0:49:d0:1f:38:92:ee:8b:9a:85:d6:f8:b7:ec:3f:14:88:39:
b2:6c:e5:15:e7:e9:b0:6e:82:41:da:b4:ad:df:d9:b4:b2:5a:
ac:3e:09:5f:72:0a:c9:29:b9:6c:a8:04:ee:b2:72:b8:f1:7f:
fc:55:ed:51:76:06:00:74:85:8a:a6:36:72:ab:f8:69:95:77:
9f:d7:1b:12:16:3a:ed:f4:07:45:d9:09:2e:27:50:80:82:1d:
d0:d1:ce:db:c5:5b:4c:40:b9:8f:8e:35:fc:01:ec:1f:72:73:
36:ff:9c:aa:ef:6d:72:1a:ca:5a:cc:9a:17:a9:11:20:3f:98:
1d:6f:48:bf:bf:6b:0f:84:c5:6b:75:51:01:60:8d:d8:c9:a9:
ae:49:cd:34:2c:2a:c2:b2:eb:5d:31:21:b0:c9:0b:2e:99:a8:
3e:b1:a9:72:48:ca:62:df:97:5d:74:0a:e8:b7:38:11:66:db:
94:c7:82:4c:e1:09:57:97:f1:ac:fd:d4:b6:8b:be:12:23:de:
a8:b0:48:71:5e:a8:8d:e2:51:e6:ee:ae:f4:84:2e:6d:00:c4:
ec:3e:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:21 2025 by rpki-client