Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: Kpnx7pyxy7WyQRnpHcde0HPHRmlPInPBDgrmPHoZzi8=
Subject key identifier: C0:26:C0:63:04:94:EE:29:BB:A5:9A:A3:E9:7F:35:2F:A4:2D:B1:EF
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01992A468DB663831F0DFE72524A0AC0366F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1678
Signing time: Mon 08 Sep 2025 17:01:30 +0000
Manifest this update: Mon 08 Sep 2025 17:01:30 +0000
Manifest next update: Tue 09 Sep 2025 17:01:30 +0000
Files and hashes: 1: 1W9zXul869RZscsvs7l5z3KjagI.roa (hash: EcxA9lzR2QkCH8ycmVrRxS2eQO5K8wXyLJAAeSf93c8=)
2: 3NRb9X1EKhOfFj7W1iZuXgUl__c.roa (hash: uat5CyrD021kDb22T/rEGSo6dcpWqYuVdcsqucMCWpU=)
3: AWMfWviNywiou7vcfcntqdl-hKo.roa (hash: a1Kd8HUSNMKFctyJDa6Wjjq1nah5PsW35BpRbQ1fKHY=)
4: D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa (hash: FQWh81XYEPS1XmDh6Irb063J9GhFKg9biAGn32Ht5ds=)
5: LEzl9Qk7MYNbOqPpMlU1Ohh8PNA.roa (hash: UHP2n+X3SSu6vIRko8Q/5h8jCVqX5aAXirgs1zpJmP8=)
6: iT5JpsMQzoMkf4XPO_VvntnOa0w.roa (hash: VTobQYz4A3NOi/P7D09YiSGAxG3/JaBEWHaxO+F1IFg=)
7: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: McxAY7d+pyEnXAiwrsvq+Fi12+W3sasO0V7Uh6GKr/k=)
8: wNwYQ8mCvTdznk-R9cIS2uXjf8g.roa (hash: K+cjCT9KGnhV7mdPVbb2wa5gxtLw72aubK2ACr6NLQ8=)
9: ykvaDunnWrInYG8JYdl8FUnhb8E.roa (hash: Ow01zePEbOrkUb4yW1o1FSsU+vG0+EPGDtmmuCC0/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:46:8d:b6:63:83:1f:0d:fe:72:52:4a:0a:c0:36:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Sep 8 17:01:30 2025 GMT
Not After : Sep 9 17:01:30 2025 GMT
Subject: CN=c026c0630494ee29bba59aa3e97f352fa42db1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:f7:11:2f:1d:49:e7:9d:49:6c:a3:1d:67:
20:08:66:7a:0d:08:33:a7:b2:a7:68:3e:32:90:3f:
e7:86:d3:69:be:ec:d3:37:33:2d:32:84:70:7e:2b:
20:8c:54:94:71:15:8c:80:05:07:a4:9e:c4:9e:7a:
38:9b:f2:4f:15:11:92:26:ea:1b:6c:17:b9:20:2b:
91:d0:b9:b3:77:76:ea:35:23:71:9d:ff:1b:51:4b:
fc:66:10:cf:63:7d:45:88:28:5e:3b:88:34:e1:0a:
97:69:58:47:15:ad:1e:ac:48:02:9e:79:82:52:9e:
12:bd:d0:b3:42:93:bb:73:dd:14:2a:9e:ed:13:8d:
3d:b2:eb:02:5e:40:5c:5f:16:d4:44:1d:73:91:dc:
06:46:0f:89:74:2d:15:4f:05:1f:a4:c5:b9:a9:c7:
c4:cd:cb:69:92:bf:41:84:56:0d:be:d1:cb:8e:4a:
3e:84:9b:42:b5:6f:87:be:e1:0b:a7:fb:62:e5:98:
60:1b:50:2a:84:03:d9:e3:46:dd:79:b3:3e:54:b1:
d1:9e:a1:ba:11:3c:13:d4:cd:33:a0:68:7c:ed:ac:
5e:f9:1b:72:d6:e3:07:24:b7:7e:1a:4c:ea:7e:ed:
fa:de:89:45:77:a1:5c:91:4e:de:db:b0:e5:23:83:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:C0:63:04:94:EE:29:BB:A5:9A:A3:E9:7F:35:2F:A4:2D:B1:EF
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:f0:cc:74:09:f1:2d:a9:d0:c5:92:5d:44:73:2f:e0:22:
74:b2:e4:72:3f:b6:98:45:47:37:e2:a3:db:65:6f:be:59:87:
0b:3e:a4:5f:30:49:95:2e:96:98:3e:2b:59:70:b6:d2:9d:0a:
1e:39:a9:8e:5c:4e:99:57:58:08:58:66:ca:8d:a2:8d:3f:6b:
77:82:ab:89:1f:47:8b:7d:af:ea:37:94:c3:12:9f:ea:e8:4d:
28:a5:a3:ac:28:f7:ab:6c:78:cc:a7:14:30:63:58:79:39:70:
9a:b1:28:f9:29:77:35:5f:37:6c:b3:d0:94:48:a2:b3:34:c5:
7d:03:5d:4a:53:6e:81:61:25:88:48:7c:86:a9:c5:39:87:d3:
3f:49:f3:5f:32:9d:d3:62:23:bc:cb:59:94:1d:6d:bc:99:1f:
1a:4b:0f:c6:ae:97:0a:a5:3e:f6:22:2c:cd:9e:65:17:9c:36:
7a:39:45:21:51:c2:bf:91:41:cc:d2:48:dd:5d:c4:d7:61:15:
e4:39:3e:4f:92:6b:7f:d9:90:58:4a:e9:81:3c:da:36:dd:18:
7e:bb:05:02:1b:d1:13:5d:86:86:00:16:d4:a4:31:48:ec:73:
1e:6b:e5:be:c8:ee:8a:b5:b1:aa:cb:6e:5c:a3:c4:a5:ce:8f:
05:52:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:58:22 2025 by rpki-client