Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: G6LCCMBWR8VWdyfC6PEZv1yKnq5Ohr3aUiATo/TkC9Y=
Subject key identifier: 82:5C:9E:11:F6:B0:B9:80:F9:2F:BE:FB:90:CF:1F:41:05:DD:2E:E7
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01983CBC571D7435D86FF5ED49D8C4EC016D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 15FD
Signing time: Thu 24 Jul 2025 14:00:32 +0000
Manifest this update: Thu 24 Jul 2025 14:00:32 +0000
Manifest next update: Fri 25 Jul 2025 14:00:32 +0000
Files and hashes: 1: 1W9zXul869RZscsvs7l5z3KjagI.roa (hash: EcxA9lzR2QkCH8ycmVrRxS2eQO5K8wXyLJAAeSf93c8=)
2: 3NRb9X1EKhOfFj7W1iZuXgUl__c.roa (hash: uat5CyrD021kDb22T/rEGSo6dcpWqYuVdcsqucMCWpU=)
3: AWMfWviNywiou7vcfcntqdl-hKo.roa (hash: a1Kd8HUSNMKFctyJDa6Wjjq1nah5PsW35BpRbQ1fKHY=)
4: D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa (hash: FQWh81XYEPS1XmDh6Irb063J9GhFKg9biAGn32Ht5ds=)
5: LEzl9Qk7MYNbOqPpMlU1Ohh8PNA.roa (hash: UHP2n+X3SSu6vIRko8Q/5h8jCVqX5aAXirgs1zpJmP8=)
6: iT5JpsMQzoMkf4XPO_VvntnOa0w.roa (hash: VTobQYz4A3NOi/P7D09YiSGAxG3/JaBEWHaxO+F1IFg=)
7: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: cHIjLwoM2GJ7E2q4cBBlZKCvyVcqfdiDG8b1PhRth9I=)
8: wNwYQ8mCvTdznk-R9cIS2uXjf8g.roa (hash: K+cjCT9KGnhV7mdPVbb2wa5gxtLw72aubK2ACr6NLQ8=)
9: ykvaDunnWrInYG8JYdl8FUnhb8E.roa (hash: Ow01zePEbOrkUb4yW1o1FSsU+vG0+EPGDtmmuCC0/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:bc:57:1d:74:35:d8:6f:f5:ed:49:d8:c4:ec:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jul 24 14:00:32 2025 GMT
Not After : Jul 25 14:00:32 2025 GMT
Subject: CN=825c9e11f6b0b980f92fbefb90cf1f4105dd2ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dc:30:5d:f7:d1:15:66:40:7d:6a:ff:32:93:
32:96:fa:7f:b7:8d:9b:0f:1e:24:26:ba:01:12:0e:
0b:0a:bc:01:0a:bf:18:b3:56:70:4a:07:47:8c:64:
b5:15:2c:ed:3a:5a:4b:56:3b:de:17:6d:e3:73:ee:
b1:ee:06:76:6a:f9:48:74:21:b8:e7:e6:0b:9f:cc:
3d:54:98:45:bf:e3:6d:fd:35:0c:03:bd:94:83:db:
83:bb:d8:79:9f:91:16:0a:a1:58:2a:6a:ea:de:ef:
6e:57:2f:9f:7f:d8:6f:00:ca:12:b2:19:9c:60:a1:
58:26:e8:ff:87:02:f7:2e:66:4b:9a:21:0c:35:b6:
22:6b:f8:dc:97:bb:20:d0:bb:11:b4:56:42:6a:32:
10:7c:e0:bb:61:d2:93:4e:94:f5:f1:62:5e:58:7f:
cc:53:f3:b0:68:71:8e:bd:f6:61:f7:6a:aa:70:df:
65:ba:e8:86:cc:6f:95:38:4e:81:c0:5a:1d:86:02:
e3:1f:e1:86:a6:89:53:ba:f8:7f:9c:1e:04:60:59:
1e:ce:6f:53:72:36:47:84:e0:76:02:ee:cf:cf:3e:
39:41:65:ce:5e:ca:86:cd:4b:89:67:30:4a:f5:f8:
7d:41:a9:82:35:fb:d2:96:2c:b1:ff:43:71:38:31:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:9E:11:F6:B0:B9:80:F9:2F:BE:FB:90:CF:1F:41:05:DD:2E:E7
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:be:c7:6a:c5:3e:46:23:3c:a7:80:00:9e:b8:2c:2e:6f:8d:
6b:e6:f7:40:74:6f:da:30:a1:9c:e9:5d:c2:4b:59:da:b8:41:
69:9e:7c:23:60:af:bb:77:aa:b4:ee:44:8a:13:9c:e3:52:fa:
f6:95:7a:e3:d9:5b:3a:81:46:da:96:43:7c:a1:c0:24:fc:f7:
13:ea:74:7d:f4:70:fb:ee:15:63:ac:c2:39:5e:88:af:08:05:
d0:b9:75:28:ba:81:8c:c0:a9:7a:6b:17:b0:28:04:64:ff:84:
b9:74:07:70:85:fa:54:5f:77:8b:64:64:b8:d2:38:f2:ff:ef:
cd:64:35:75:d3:77:6a:de:2d:00:e7:0d:b7:b3:71:41:95:37:
3b:49:e4:f5:63:da:ab:1f:e3:2f:24:6d:26:6d:1a:53:93:c0:
3f:cb:4c:39:1c:9b:25:f9:95:28:77:be:30:3c:20:fe:2f:80:
0d:00:1c:ab:57:34:25:fb:f9:69:dc:52:b1:2b:6a:8a:bc:40:
3d:e1:e7:47:05:e8:4b:e2:04:d0:45:57:20:0c:ec:24:3a:4d:
19:7c:c3:a2:ec:13:27:68:1d:ef:9b:9c:ad:87:f9:db:ca:26:
eb:9f:2d:40:4d:3d:64:7e:f5:4c:d4:1e:43:d0:c5:b5:a8:74:
b5:13:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 22:59:46 2025 by rpki-client