Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: RWQRTPxcuJVwWNjqGySyjCc8nbvkY0+H06nWNXGbSaM=
Subject key identifier: 51:91:6A:AF:FA:92:A1:6A:D5:8F:55:25:B2:F5:65:A2:9F:71:28:46
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 0199228C68BB725E99AE27421FCAF9B61C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0D00
Signing time: Sun 07 Sep 2025 05:00:51 +0000
Manifest this update: Sun 07 Sep 2025 05:00:51 +0000
Manifest next update: Mon 08 Sep 2025 05:00:51 +0000
Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: nxLzdzKKsuKrKoOgKngrU4SMazv7MGwJeYPaGSR1el8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:68:bb:72:5e:99:ae:27:42:1f:ca:f9:b6:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Sep 7 05:00:51 2025 GMT
Not After : Sep 8 05:00:51 2025 GMT
Subject: CN=51916aaffa92a16ad58f5525b2f565a29f712846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:22:1b:90:b9:56:99:1c:72:34:d9:31:4b:
84:9f:26:8a:bb:2e:30:cf:a5:64:2d:7d:54:c0:ea:
5d:14:e4:7e:e5:8c:1f:04:20:0a:6e:e7:c3:a9:9c:
52:57:d1:97:b2:0a:93:1c:bc:af:30:28:0c:bf:ba:
4a:85:13:2d:4a:45:54:ee:b5:09:11:d9:7e:a5:26:
6b:e0:e5:72:1d:ac:50:09:d4:04:e5:51:59:7c:79:
38:60:3b:79:85:74:e6:32:cb:4c:2c:27:5b:bb:34:
45:75:64:21:28:a3:c2:d8:19:1e:2f:41:37:6f:c9:
f5:c8:72:f5:00:48:ac:4d:56:47:94:10:01:1f:0f:
73:e6:ec:73:87:e0:96:d6:0f:da:2a:f6:80:a4:a0:
ca:63:c7:88:1f:56:b9:a3:e7:ae:67:ed:67:8d:6e:
4e:e6:18:6c:e4:a3:4f:0b:f9:fe:c4:c1:7b:68:d9:
93:50:eb:47:ae:5a:e5:02:11:cd:ba:ac:c1:cf:f6:
28:80:e0:42:d6:fb:1b:66:94:62:94:3e:b9:94:6a:
74:ae:85:4b:d7:72:37:4c:aa:9e:40:65:0e:24:63:
e9:3b:95:fe:12:05:e4:22:e7:b8:83:82:66:18:f3:
7a:73:bf:68:53:01:d2:8f:f3:7e:9d:9a:49:f4:4c:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:6A:AF:FA:92:A1:6A:D5:8F:55:25:B2:F5:65:A2:9F:71:28:46
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e9:ee:a9:b1:0b:52:ce:be:9e:0b:80:9f:99:cd:7a:84:28:
a8:26:83:44:fd:95:8d:b2:be:24:54:bf:b0:47:e1:78:85:86:
56:25:ec:0f:54:44:e2:70:1c:e8:69:00:3a:b6:0e:a9:4f:40:
8b:7c:d0:db:0f:1b:53:95:64:77:16:2b:3d:e4:09:37:ac:1b:
2f:f6:57:f3:36:14:3c:ee:03:b6:c7:a4:a6:94:ff:52:01:54:
20:f5:b0:4b:0c:a4:ae:f6:5b:84:24:ad:09:cf:44:65:c4:64:
24:bc:4f:32:88:9e:0e:c7:02:86:80:08:f7:ab:5f:43:3a:fc:
ad:57:1c:bf:47:d8:b9:c5:10:6b:12:ed:0e:1d:3e:4c:67:97:
3a:3f:6c:6d:4e:92:5c:90:0d:01:15:54:d2:af:6d:98:bc:44:
5d:2b:48:86:c9:df:35:eb:c4:28:4b:e8:c7:1c:0b:57:d0:9d:
24:e6:7d:ed:df:1f:63:ad:82:aa:78:4b:29:2b:33:64:7e:68:
57:29:e9:c3:94:d5:e8:19:a3:bb:1b:25:3a:db:a0:b4:d2:70:
d7:73:be:57:33:90:0c:31:88:28:c5:df:2d:c5:58:66:82:84:
3e:f8:c5:11:68:c3:0b:9d:60:45:b0:93:9f:16:f4:71:e7:ea:
98:fd:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:11 2025 by rpki-client