Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: yz0D/pqqxYRICLQiBV9xdFhxir+9fFgXISEB2JRQSBc=
Subject key identifier: 39:7D:5A:7C:71:24:6E:60:03:C8:2B:E1:C2:E3:4A:6F:D7:E1:20:56
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 0199221F3A70D62CCB63B262A074AD0A180E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0B63
Signing time: Sun 07 Sep 2025 03:01:35 +0000
Manifest this update: Sun 07 Sep 2025 03:01:35 +0000
Manifest next update: Mon 08 Sep 2025 03:01:35 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: P+Bk6OGiAb0GY4JKqYfQVsKRCWmEg8S/T5IeJH4f6m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:3a:70:d6:2c:cb:63:b2:62:a0:74:ad:0a:18:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Sep 7 03:01:35 2025 GMT
Not After : Sep 8 03:01:35 2025 GMT
Subject: CN=397d5a7c71246e6003c82be1c2e34a6fd7e12056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:67:e8:11:68:a4:0d:e6:55:d6:5b:45:c6:cc:
79:a7:cb:47:69:7a:fb:0a:5c:36:7c:9f:bb:02:ca:
85:8a:50:b9:f6:e9:0d:79:d8:a1:9a:1c:b6:51:4e:
a8:76:79:3b:d7:cd:e3:c9:4a:c9:fc:62:80:a7:b7:
99:54:5e:41:12:d1:cb:d5:7b:6c:82:ce:2f:81:08:
f1:5c:ee:fe:66:75:13:a4:4c:f0:17:ea:94:3a:7f:
3d:e8:14:96:da:5e:47:d6:bf:a9:b4:66:5f:f3:35:
a8:dc:2f:8b:3d:d3:69:df:95:3e:42:1e:7e:31:d5:
57:2d:94:8a:0a:12:2a:5b:ad:d3:c5:b3:7b:b2:0a:
a4:46:55:b3:5d:c3:ff:9d:a4:fb:36:c2:26:c4:90:
fa:32:b1:9b:5c:e8:86:76:3f:b7:e4:fe:12:b5:9a:
4b:e5:56:72:99:c7:de:32:9e:b2:fc:3a:90:32:b4:
1c:28:70:dd:d2:9a:17:7c:a7:68:39:ec:db:fa:fc:
b2:3e:b1:e5:7c:89:a4:46:d4:c1:47:b3:60:90:83:
1e:61:82:0a:d1:6b:0b:32:5e:0c:19:95:27:48:53:
04:76:27:43:c6:6c:df:3f:26:3d:f8:8d:be:a5:e7:
5c:f7:63:9d:e7:6b:7b:fa:22:e4:08:e5:02:96:15:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7D:5A:7C:71:24:6E:60:03:C8:2B:E1:C2:E3:4A:6F:D7:E1:20:56
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:64:0e:86:c9:6d:cd:b2:49:89:56:56:72:85:78:35:1f:ed:
25:27:60:28:fd:e4:9a:8d:d8:1d:9b:f4:8d:22:23:37:ff:50:
00:83:12:0a:ab:f8:c3:62:77:50:0f:aa:8e:e1:c7:dc:50:f6:
1e:c9:34:94:cd:0c:da:90:06:cd:18:1e:34:55:37:36:d0:6d:
86:84:59:7f:b9:da:73:0e:9b:dc:8e:c5:15:ae:57:c0:65:3f:
ca:fd:76:4d:55:67:44:ee:b5:b4:5b:13:9f:39:af:e0:49:3c:
ac:cf:b6:a0:01:1e:6a:f1:f3:ec:11:a2:8a:09:73:f5:94:c2:
39:f7:fb:2d:ad:42:bb:10:82:0e:6a:72:38:04:33:12:5f:a2:
bf:df:b2:9d:d9:ba:ce:ad:7f:2d:42:42:01:b9:a5:ab:a3:82:
e9:cc:78:f0:5c:71:ac:e0:de:e5:b0:2b:ee:2e:e0:c1:66:31:
0f:8d:1f:4f:a5:cd:8e:ac:01:b4:8f:80:34:6f:90:70:96:c4:
8c:86:38:84:f2:aa:8e:2c:85:eb:20:ab:62:d6:03:ee:16:31:
b6:98:7c:36:19:cd:ed:35:74:be:ea:09:18:4a:60:d9:be:93:
8b:52:50:5f:16:2c:f1:92:53:8c:4b:b4:46:86:59:24:8a:3f:
57:ff:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:27 2025 by rpki-client