Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: j4QoSGmYpU7ZiWsu68BVCPnbyZAjZIqwMLi10vlVWy8=
Subject key identifier: CA:19:BF:70:E5:20:1F:53:6E:E4:74:A3:0A:D0:FA:95:19:B7:7A:65
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 019921E7B69A93EC81D6280B4B06FAA76E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 02:00:57 +0000
Manifest this update: Sun 07 Sep 2025 02:00:57 +0000
Manifest next update: Mon 08 Sep 2025 02:00:57 +0000
Files and hashes: 1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: rV2PQaim46TR5U/OCEUWS7KcerJp5o0COm9iAPRGiq4=)
2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:b6:9a:93:ec:81:d6:28:0b:4b:06:fa:a7:6e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Sep 7 02:00:57 2025 GMT
Not After : Sep 8 02:00:57 2025 GMT
Subject: CN=ca19bf70e5201f536ee474a30ad0fa9519b77a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:41:ad:e0:f1:c5:25:ae:c2:4d:dc:d4:e4:
88:cc:4b:0f:93:cf:aa:55:3b:4f:3e:b5:eb:af:55:
17:52:48:fa:a7:6f:63:9a:a3:55:02:ee:b6:3d:11:
b4:97:84:c8:34:f1:7f:2a:04:a1:2c:f5:8e:94:31:
b8:b3:29:dd:66:f6:d8:b2:5d:10:f9:cc:26:01:ec:
58:43:1d:45:24:96:7f:57:47:c0:60:d7:7d:77:da:
82:a9:2e:1e:d6:45:72:e3:92:8a:9b:9a:9f:6b:cb:
3b:ba:60:1e:32:61:9d:f6:f1:57:36:0b:58:c0:70:
c4:d0:92:37:30:82:b3:40:1a:46:24:a3:ea:28:32:
a4:ac:18:2f:b0:44:49:2e:f0:20:ae:8d:b1:c7:81:
77:ba:31:f8:c0:e4:c2:95:fe:9c:00:bd:bb:63:05:
86:7a:97:3e:6a:a2:79:9b:2a:a8:62:f4:c8:cc:be:
89:8b:ee:e9:3f:21:40:dc:7d:13:5d:78:3c:a6:4a:
c0:b9:5b:14:45:0a:f6:30:a7:98:81:b2:cb:05:d4:
8a:ee:77:2d:52:7b:6a:64:94:77:a7:61:bf:60:ef:
4c:5a:e9:cc:ee:87:57:80:09:80:44:c1:c7:75:ef:
74:05:1e:7e:ef:3e:37:d1:2b:ff:1c:92:09:f9:9c:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:BF:70:E5:20:1F:53:6E:E4:74:A3:0A:D0:FA:95:19:B7:7A:65
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:04:04:48:d8:d7:05:fe:be:46:75:6d:bb:07:2f:ed:2a:b4:
cf:08:d2:8d:7b:9a:63:13:5b:9d:f0:1f:c1:be:7f:92:1d:3b:
23:d9:62:fa:81:b9:00:41:5a:bc:45:a9:44:95:bc:d8:b6:c7:
f3:3f:7b:e0:29:a8:a8:85:64:e6:92:b5:f3:84:81:ba:a4:ef:
28:fd:1d:45:a5:65:09:09:a8:f0:1f:39:2e:7e:ea:89:dd:a1:
b6:1d:39:82:9d:bb:a6:a4:98:e9:e5:e3:d5:45:78:41:89:be:
59:0b:0a:f3:bb:9d:14:02:f0:9a:1c:5c:3d:4d:97:f1:77:64:
99:c3:d5:ec:5b:53:a3:a7:43:ab:63:98:eb:f2:35:c3:6d:f6:
a4:bd:a2:42:e8:2e:68:57:a4:27:a3:32:b7:a2:45:a9:e5:da:
f2:3f:2d:f9:7e:63:a6:58:28:a7:31:ad:d9:1b:a8:dc:42:e7:
59:e5:c2:0d:19:5a:5f:d6:ab:b4:e9:21:1e:b6:6c:3e:a1:fc:
16:91:4d:d8:6a:9a:63:47:25:bd:73:a1:04:dc:7c:17:61:fb:
64:c5:63:18:88:43:82:c6:21:7a:e0:b1:06:5f:76:de:b1:0f:
bb:58:ce:bb:43:4a:4e:af:29:7b:ba:bf:cd:61:75:39:4f:21:
1d:e6:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:26 2025 by rpki-client