Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: 9X2BDWhqb+JjB4yYCTWxSiM7qtgVM9TNqHsx+4yhpWo=
Subject key identifier: 8C:6C:44:4B:F4:0A:7D:E4:0F:F0:9D:07:38:76:77:54:E8:AA:77:52
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 0199221E43E61C3AC9B7D53AEEC837917B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:00:32 +0000
Manifest this update: Sun 07 Sep 2025 03:00:32 +0000
Manifest next update: Mon 08 Sep 2025 03:00:32 +0000
Files and hashes: 1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: umpRUqtXyqYQLhY/gXVA57Udxv1wRMJHvrSaS5P1Kok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:43:e6:1c:3a:c9:b7:d5:3a:ee:c8:37:91:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Sep 7 03:00:32 2025 GMT
Not After : Sep 8 03:00:32 2025 GMT
Subject: CN=8c6c444bf40a7de40ff09d0738767754e8aa7752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:a5:7e:2e:fe:f5:e2:45:8c:21:a4:b8:ab:
1e:19:ba:03:2b:eb:6e:89:d8:64:73:68:d6:82:2f:
08:4e:0b:3e:54:87:02:eb:0f:b5:0b:3c:24:47:d8:
9a:dc:91:da:fe:06:a2:01:0b:0f:da:0a:98:06:30:
d3:eb:02:36:90:ad:d0:be:59:d0:eb:95:84:8a:f6:
f3:13:2f:8d:ca:7f:53:26:98:4e:01:43:db:a8:e6:
da:47:1a:9e:99:15:98:3f:89:6c:d1:c3:94:81:22:
17:8e:d1:4c:94:e5:c7:f2:82:77:8c:de:0d:ae:b0:
47:f4:2c:89:ba:9a:f0:ad:4f:dd:6b:fd:4b:8d:0e:
3a:ee:d8:95:b8:94:f9:4b:f1:10:4e:c1:b0:d6:6a:
39:44:bc:aa:84:03:7c:03:b2:10:ee:c5:41:b4:3b:
48:6b:ed:0e:5f:e4:da:d8:27:ec:8d:2d:a1:27:14:
43:0d:54:f9:1c:d0:56:ca:be:04:aa:86:52:ff:94:
ac:ae:61:11:1c:8a:f0:97:f0:0a:3c:7e:f3:bb:af:
1b:02:8e:7f:51:f0:de:2e:5f:c5:00:a5:86:56:05:
94:42:96:94:1f:8f:08:0f:fa:9f:af:bf:31:65:18:
7e:38:b3:5d:bb:10:76:8b:e2:1a:89:35:1f:90:6d:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:44:4B:F4:0A:7D:E4:0F:F0:9D:07:38:76:77:54:E8:AA:77:52
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:ac:91:9e:91:33:fb:d0:27:fb:c1:41:de:08:11:f9:2d:
0a:bd:45:ef:08:e5:fd:b8:28:20:ec:ce:78:ce:53:98:e4:28:
31:53:6a:c3:c7:8a:86:eb:bf:1a:bf:b8:15:e4:f5:ba:6b:eb:
60:ae:b4:43:e9:4b:66:b1:ec:85:99:7c:ff:a8:24:14:de:d5:
80:7c:4d:5d:df:18:0d:c8:f5:77:b1:00:a2:43:61:eb:9b:c5:
3e:fc:e2:0a:41:61:f5:59:85:11:06:db:11:7a:6d:2a:38:08:
bf:7b:e3:93:b1:16:21:18:5d:3b:de:f2:72:fe:fd:4f:33:5a:
4c:f1:8c:9f:b2:86:63:2a:b2:0a:05:13:fc:a2:d4:43:35:fd:
93:f9:d6:48:35:3c:cb:c4:69:dd:2d:26:ac:a6:84:c1:ad:47:
d3:2c:49:85:91:5c:d4:61:0a:c5:cc:0b:fd:d3:18:8c:b6:ea:
e1:d7:9a:96:60:0e:fe:43:3d:4f:c9:a5:17:cd:ec:ee:50:e7:
9e:ee:9c:93:af:3e:8a:a6:31:b6:98:b3:1a:67:32:b0:d4:3f:
8a:c1:06:df:4d:94:65:37:16:48:01:f7:68:07:5f:08:f6:ea:
18:95:cd:fe:6e:e2:7f:85:a6:45:8d:00:43:01:29:28:49:c4:
f1:fd:b8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:31 2025 by rpki-client