Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: 4mCBHuQJAc0tEZ8nrdeRHZKJz8fsl0a+W6Ff8iEa2C8=
Subject key identifier: B5:DF:95:16:5C:6B:BE:CE:AE:22:83:9B:02:50:7B:63:1C:0E:28:AA
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019840D05B276E4E7B2D71F89DEED94BD2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 021F
Signing time: Fri 25 Jul 2025 09:00:53 +0000
Manifest this update: Fri 25 Jul 2025 09:00:53 +0000
Manifest next update: Sat 26 Jul 2025 09:00:53 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: zXORarIJnXjOtTXz6YG7rqDQoJHE98WOA+vvrpisPCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:d0:5b:27:6e:4e:7b:2d:71:f8:9d:ee:d9:4b:d2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Jul 25 09:00:53 2025 GMT
Not After : Jul 26 09:00:53 2025 GMT
Subject: CN=b5df95165c6bbeceae22839b02507b631c0e28aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:49:16:bb:8f:2a:50:5e:0a:46:7c:8a:cc:
34:24:c0:05:65:55:56:74:0a:ef:16:60:14:02:29:
ce:b1:a3:92:61:cb:90:71:73:b6:1f:53:ad:e9:fd:
42:ce:08:9f:be:8b:1d:3c:64:da:c1:7d:81:79:67:
b9:b4:80:f0:18:b8:65:1f:5a:d5:a4:5f:c3:de:40:
99:e5:28:eb:e4:6f:7d:14:50:f1:6d:a5:00:2e:a6:
d6:c5:d2:7c:6e:4d:1b:48:a0:19:e2:dc:02:b3:1d:
bd:49:b5:02:1c:4b:97:8d:35:bb:c6:64:2e:18:e2:
8d:c4:32:be:ca:89:67:85:ef:5e:ca:31:87:cb:66:
60:c8:82:34:ff:5c:e2:27:a5:43:bf:b9:dc:22:13:
0f:67:eb:aa:23:c7:20:a8:9b:48:01:ef:8b:2c:a8:
78:53:ee:c4:81:e5:7f:af:c6:a4:cc:5f:77:12:81:
c5:91:15:99:3f:39:13:b7:34:f3:b3:48:c5:4c:c7:
be:0f:12:b1:2c:b2:35:05:29:f2:90:13:c6:96:8a:
8f:9e:48:8d:15:5d:71:b3:2b:bd:15:12:a6:5c:06:
3c:fe:65:fb:8e:cb:29:51:bc:b2:21:43:21:21:a6:
c2:4e:51:39:8e:50:10:3d:c4:75:97:77:ad:d1:59:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:95:16:5C:6B:BE:CE:AE:22:83:9B:02:50:7B:63:1C:0E:28:AA
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:10:01:ee:d4:5c:61:8b:b3:8e:d8:50:81:0d:c0:8d:de:c9:
b0:c1:95:1d:4f:73:57:09:06:fe:c1:86:53:9c:28:bc:6d:9b:
26:bd:b1:df:74:f1:66:5f:12:00:86:df:8d:43:f5:db:ca:ea:
56:a2:ff:80:1a:51:aa:43:40:fa:32:2c:34:63:d4:75:7f:c1:
dc:0f:47:65:5e:f7:7c:cf:d8:7b:e6:c9:c4:88:30:48:30:41:
69:e9:f3:2b:0a:fb:98:da:65:5c:67:49:89:09:d9:6e:3b:fa:
42:06:11:1b:c6:f7:76:56:70:d5:4c:cf:41:2a:ce:c2:c4:8e:
be:c1:bf:91:d2:7b:54:d8:19:02:1f:3a:a7:3a:a4:d7:c4:26:
92:9e:c0:83:b1:d1:5e:5e:4e:ce:5d:2c:b6:0e:46:70:03:32:
84:dc:51:99:65:54:7e:11:9f:86:6e:74:a5:83:17:7e:a9:9d:
16:43:b4:a3:b8:ad:20:ff:29:2d:f3:cf:20:c2:b7:96:f4:e2:
01:3a:3f:f0:78:86:be:dc:22:c9:e4:6b:13:7b:ee:81:61:b5:
f6:0d:38:39:9b:8f:c5:ab:81:e4:81:26:6e:72:c4:3c:18:d3:
c1:d9:eb:dc:3a:3a:46:cd:ca:f4:fb:08:fe:2c:a8:ef:3e:33:
d3:ec:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:57:16 2025 by rpki-client