Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: ShP1jBxf1DkUFxPMpe0L/t/FTvmWw5uswtEw9VY3tg8=
Subject key identifier: 93:DA:7C:F3:7A:79:DF:E2:91:F4:BD:A7:8A:CD:D9:3F:69:6C:C9:81
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 019921E7970822C3ABB44BD763F7DB27A100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:00:49 +0000
Manifest this update: Sun 07 Sep 2025 02:00:49 +0000
Manifest next update: Mon 08 Sep 2025 02:00:49 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: spOJ+eq3ddL/ql37XIiDPnXYOOz6DFPSgBxcZq9vPLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:97:08:22:c3:ab:b4:4b:d7:63:f7:db:27:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Sep 7 02:00:49 2025 GMT
Not After : Sep 8 02:00:49 2025 GMT
Subject: CN=93da7cf37a79dfe291f4bda78acdd93f696cc981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:c2:43:80:89:3d:04:63:7c:c5:ed:d7:a5:
e7:ff:b3:7d:1c:af:c9:aa:e2:56:af:60:16:03:a7:
7e:bb:ab:74:98:8c:af:9b:19:09:e1:0b:0c:88:e3:
04:7b:f3:b9:52:f5:0a:a3:21:da:a9:dd:a8:cc:f1:
92:e6:7f:19:e2:32:0f:24:b7:48:64:5f:fe:ef:58:
a2:f3:7f:56:36:86:66:ff:5b:69:de:ce:8d:54:a2:
92:28:bd:29:bc:c9:53:94:fb:3a:c5:6e:0b:c4:34:
df:d8:a0:7b:0c:b9:81:b7:6b:b3:a0:19:ce:ac:71:
bc:1b:42:e9:d9:42:4f:94:0c:4b:2b:6d:c2:44:da:
0a:2f:69:aa:dc:6b:18:f7:0f:30:78:40:c6:cf:10:
9c:52:ad:5a:a0:88:df:d0:7e:25:12:91:3f:30:2b:
e5:02:14:a2:e7:fd:38:03:47:57:07:6a:ee:31:d8:
ce:56:00:58:d4:2f:7b:c2:ca:76:c0:f1:4d:7d:ec:
2e:09:c5:cb:00:de:c0:a3:15:6e:23:00:2a:39:63:
c0:d2:26:97:86:39:d8:c5:1c:9a:cd:a7:9c:26:c7:
0e:66:3b:28:34:67:ed:90:dc:05:0c:5c:d0:b7:bc:
af:ae:9a:72:d3:89:5c:fd:c2:69:2e:bd:47:a2:2d:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DA:7C:F3:7A:79:DF:E2:91:F4:BD:A7:8A:CD:D9:3F:69:6C:C9:81
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:07:6d:a9:f9:78:a4:f6:ca:8d:c8:ef:2c:98:7c:1f:eb:e9:
79:63:16:89:44:c6:b6:7d:83:e6:19:2e:39:b0:a8:f5:93:50:
75:3e:c3:e5:33:a0:75:e5:9a:42:f1:c7:0e:44:01:df:30:48:
84:04:a2:66:5b:61:b6:39:50:60:e5:cb:46:e7:32:81:31:d7:
14:97:8b:a1:a7:96:85:f3:44:8f:8d:e3:e4:20:6d:28:3f:96:
a4:37:18:7a:0f:9f:39:20:09:19:78:70:0f:c6:2f:fe:46:ac:
bb:cf:75:f4:2a:8b:89:8c:e3:9d:b0:df:db:b2:1e:68:33:c1:
ae:cc:77:20:fc:fb:a5:d1:e9:d8:40:5c:d5:d0:ef:78:e5:58:
0f:26:cf:3b:0f:97:70:8f:b8:50:52:0a:a1:96:5c:b6:25:d9:
5d:6e:6d:ad:84:4a:bd:ce:ec:cb:2f:a4:4b:94:0d:2e:2e:07:
b2:00:3b:72:18:05:a6:ae:80:7c:b2:23:3f:a4:31:8a:20:c2:
e9:c0:d9:9a:4f:0b:c2:fb:7a:68:c0:f4:dc:4d:bd:db:5d:44:
24:ea:6e:5e:57:d9:3c:e9:da:0a:66:7d:c4:5e:9f:dd:56:f3:
14:f2:18:e5:ec:cf:9b:d4:6c:f6:18:a0:a7:22:0f:bd:80:89:
ba:ab:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:07 2025 by rpki-client