Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: wl+G1dgwtHB5wy7woT3pkCppH6tshFBq1w3a0Sk73e0=
Subject key identifier: A0:46:82:EE:7A:F3:AD:57:04:E4:82:F5:A8:62:EE:26:09:25:74:49
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 019918096DC51E289DD7C9597B592522693A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 1144
Signing time: Fri 05 Sep 2025 04:01:34 +0000
Manifest this update: Fri 05 Sep 2025 04:01:34 +0000
Manifest next update: Sat 06 Sep 2025 04:01:34 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: TUdOhXJQIy1Kyjz7ymJ4PQ6wvICtmvDBDzfm5w9E0Jk=)
2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:6d:c5:1e:28:9d:d7:c9:59:7b:59:25:22:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Sep 5 04:01:34 2025 GMT
Not After : Sep 6 04:01:34 2025 GMT
Subject: CN=a04682ee7af3ad5704e482f5a862ee2609257449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:08:2b:29:0a:35:12:e1:9f:c4:e0:ff:6a:
07:f0:b1:ed:76:86:a2:7a:93:b1:92:df:a0:77:2f:
80:bb:2b:de:a6:4d:cd:16:cb:b4:81:9b:18:ba:e9:
73:24:64:45:dc:cf:68:f0:c9:d2:6a:7f:26:f6:53:
83:cc:29:67:08:8b:8e:55:06:77:14:cb:9b:55:40:
32:fb:b1:ac:db:36:6f:dd:b1:81:36:c7:34:9a:ca:
fe:5a:51:21:5c:e3:c3:c1:c3:4f:c5:d0:7b:18:a9:
48:69:10:ca:cd:07:c1:fd:90:d4:0a:e9:7a:43:52:
4e:a5:4f:af:6d:b7:6b:e1:ae:88:55:41:cc:81:5c:
92:e2:75:ca:93:28:2e:74:da:35:69:52:a2:29:6a:
c9:d8:2b:ac:5a:14:77:9b:35:b8:8e:5a:c8:7f:e1:
7b:a2:73:34:17:8f:33:05:5f:e0:cb:98:e0:7a:ec:
b2:3a:41:b1:38:32:a3:84:97:5c:de:e2:92:f7:78:
d9:9d:90:71:12:60:4f:e8:09:e5:b3:11:e1:a0:43:
cb:e3:2b:c6:d3:1e:e6:d8:8e:40:ae:e8:f4:04:8f:
4d:38:11:b7:2e:7b:fd:d3:8e:16:dd:35:53:ad:0b:
2a:b2:1b:af:1e:42:55:46:7e:ca:02:89:c6:2b:7c:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:82:EE:7A:F3:AD:57:04:E4:82:F5:A8:62:EE:26:09:25:74:49
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e1:8c:09:c3:e9:d5:6c:ed:e7:c2:e5:d3:0a:30:d7:e4:b9:
7b:70:fa:a5:4b:ca:8b:c6:1d:f6:be:3d:41:28:db:d5:64:3f:
4a:c1:38:3a:21:27:32:c6:ff:6e:c4:20:8c:da:78:53:f1:6f:
93:3b:2d:1d:56:40:6d:1a:2f:a6:a2:48:91:b4:e9:46:a4:a5:
e2:67:75:af:4a:9a:51:fd:74:4e:8d:d6:e7:67:de:63:e7:dc:
31:0c:05:37:31:69:f6:f2:e2:12:fe:c7:0a:cc:fe:d0:59:36:
60:16:d8:f2:0c:19:7b:29:c3:25:af:9e:95:f6:54:a2:33:0f:
5f:17:f1:f4:ed:25:86:d4:ed:16:ea:1b:41:dd:b0:63:9a:a6:
38:30:f3:50:01:85:2f:d1:8d:f0:ae:bb:63:2b:38:6d:e1:54:
a6:b5:42:95:03:09:9b:af:d8:40:53:58:19:16:ea:a2:bc:5e:
88:a6:5b:e1:00:89:ea:f2:07:88:ec:9f:16:9c:ec:c1:e6:72:
59:3d:e1:0c:b2:a5:9e:2c:11:94:e3:3f:10:fd:88:4c:0e:0e:
06:42:f8:b9:db:a5:a7:4a:83:c8:72:38:28:40:22:b3:f4:10:
2d:fb:99:99:c7:7e:ec:1d:46:8a:5c:0f:af:21:8f:d5:5f:ab:
f1:1d:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:22:40 2025 by rpki-client