Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json)
Hash identifier: kuieUNL+rFizjfGIEVGnSApGe5feyJTUek/7qhYaTI0=
Subject key identifier: 4F:BF:17:8B:91:84:56:A7:B3:7D:6F:02:BE:D5:0B:49:D1:E1:8B:11
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 0199239FFDD2862D9B6E2292BD25A1C37EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
Manifest number: 065D
Signing time: Sun 07 Sep 2025 10:01:51 +0000
Manifest this update: Sun 07 Sep 2025 10:01:51 +0000
Manifest next update: Mon 08 Sep 2025 10:01:51 +0000
Files and hashes: 1: MJgreWjojTG3TWAm0IOsT3PX7yE.roa (hash: QQOCbVX4ydh8RHwVZnu9QI+n2Ns0Q1CadZGcMjFSReI=)
2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: ejky6vZ9dYk/YcbLzAuex3g5RiufqFOaIPZPiQs3JZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:fd:d2:86:2d:9b:6e:22:92:bd:25:a1:c3:7e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Sep 7 10:01:51 2025 GMT
Not After : Sep 8 10:01:51 2025 GMT
Subject: CN=4fbf178b918456a7b37d6f02bed50b49d1e18b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:86:2f:71:6e:28:25:24:8a:83:c2:0a:da:
7a:a9:41:6f:f8:50:38:c2:f1:4f:5c:11:7c:a1:5b:
02:31:66:25:71:bf:7f:4b:9a:c4:79:73:92:e5:a3:
d9:4f:b1:9a:1b:34:83:64:5f:8f:8e:58:cd:06:76:
b4:4c:86:04:04:4d:f7:a9:95:05:a9:29:44:df:cb:
c1:f9:dc:80:43:19:0d:1d:13:93:1e:3f:cb:7c:29:
ea:71:62:ba:7e:75:eb:da:7a:4e:b3:d9:ba:ae:29:
43:df:d8:bd:43:d4:d1:62:0a:8f:67:56:67:5c:3f:
0e:70:d3:26:c3:8a:15:86:7b:3c:7e:7a:9f:1f:2d:
8e:a7:41:e6:21:02:57:da:83:bb:ba:90:74:4f:04:
ed:99:c5:e2:7c:fb:2f:58:22:b7:34:ec:0a:5e:c3:
a7:fe:3e:0b:c7:dd:87:3d:73:6b:25:f9:95:64:99:
df:65:74:3e:54:d6:aa:ca:9d:1b:ec:df:ba:83:ab:
4b:b0:d1:59:39:ef:f3:13:be:c7:28:f0:85:a5:8a:
5e:e0:64:1f:83:9a:ac:c4:f1:9a:93:31:47:d9:10:
0c:d7:f6:f4:2f:7c:8c:0a:b6:34:c1:8c:e0:50:8f:
81:37:43:b0:0d:d0:58:3b:10:ff:ca:c5:46:9b:04:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BF:17:8B:91:84:56:A7:B3:7D:6F:02:BE:D5:0B:49:D1:E1:8B:11
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b5:50:ac:98:f6:20:bc:fc:e0:e9:b4:4d:13:e8:9a:7e:12:
99:76:3b:12:b7:ee:9b:f8:68:27:82:85:b6:2f:44:ea:dc:17:
f3:b2:47:a2:f5:df:fd:46:65:c4:63:f5:8e:80:a2:db:15:8f:
c6:a6:4d:09:5e:e5:6b:fe:32:12:bd:27:03:b4:23:70:4a:c7:
12:09:22:5a:66:24:04:74:cd:72:e0:f6:40:8e:0b:91:60:41:
8b:24:23:9c:0f:d8:4e:aa:b5:95:b1:22:c6:d2:94:44:0f:56:
c2:f3:9e:22:d1:cb:1d:51:d9:f1:60:54:dd:7c:95:7f:09:ce:
6b:f0:4f:4b:02:30:7c:71:0f:a2:42:32:43:90:28:98:1d:f0:
ef:fe:e8:be:19:3e:52:80:4c:40:d6:ea:88:21:ec:99:9d:96:
e4:c7:ab:bf:23:95:fc:13:b2:4d:7d:b4:e7:93:14:1d:7d:19:
d3:a2:79:ca:4b:fa:4a:04:be:17:1d:69:84:1f:66:d9:b6:75:
73:3f:86:35:12:29:eb:e1:9f:b8:e9:6e:3e:31:af:90:94:e9:
e9:46:6d:b6:02:38:92:53:c4:5b:f4:88:f6:db:99:86:aa:a0:
46:e6:6d:85:e4:52:22:81:e4:73:64:15:70:36:3d:ab:ae:4c:
bf:d8:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:23 2025 by rpki-client