Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: tP6i6jZXKNU5r7rrqNpKMfFBLmikSNpX2jKWZRtWiXk=
Subject key identifier: EE:E2:C4:F2:C6:CC:74:C3:2F:33:9B:B5:4E:63:A1:BF:C1:C7:B1:31
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 0199228CE8E20573225B38CB0975864FCFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 148E
Signing time: Sun 07 Sep 2025 05:01:23 +0000
Manifest this update: Sun 07 Sep 2025 05:01:23 +0000
Manifest next update: Mon 08 Sep 2025 05:01:23 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: b4HUVgX4Zkr1wEZTO0HimbRsydLB/MYx6oqjvSNtMcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e8:e2:05:73:22:5b:38:cb:09:75:86:4f:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Sep 7 05:01:23 2025 GMT
Not After : Sep 8 05:01:23 2025 GMT
Subject: CN=eee2c4f2c6cc74c32f339bb54e63a1bfc1c7b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:3e:84:7c:16:ba:dc:1a:69:2f:cc:d5:d3:
ba:12:df:60:09:01:1b:ee:1c:d6:cd:b3:13:10:eb:
a5:04:02:aa:c5:7b:2f:84:26:bb:67:cf:56:8d:3a:
03:fd:96:c4:f7:a1:48:68:a5:f1:39:e1:5c:43:5a:
97:4c:41:76:7e:d7:c1:ff:ec:95:cf:c5:3d:b2:ce:
6f:ee:8c:db:66:20:28:8d:38:01:5f:df:97:dd:59:
7b:35:a1:f5:84:cb:17:a2:40:3b:49:52:cb:05:52:
86:94:47:81:8a:cb:34:c8:96:4c:20:4d:9d:81:07:
0a:77:03:7c:c5:d1:03:82:b2:30:8d:55:3e:06:a9:
33:5f:ec:17:a1:8a:af:40:8c:d2:de:fa:1a:08:7f:
6c:77:8e:13:f4:96:93:0a:6a:19:c3:e0:e3:40:d5:
fc:14:c7:c6:1e:8c:59:d9:07:66:b4:f8:e4:5a:59:
13:92:15:62:51:08:0c:7e:93:ee:2e:24:56:f0:1f:
69:33:47:b0:b3:fe:d5:66:32:ea:a2:34:20:33:50:
01:93:b0:49:6a:f7:c4:e4:07:c1:da:5a:cc:25:06:
2b:3e:ef:ac:f8:e1:2a:65:b7:0d:bf:f1:ef:65:d1:
62:24:81:da:87:fb:a2:3b:b2:b3:82:9a:e5:fe:be:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E2:C4:F2:C6:CC:74:C3:2F:33:9B:B5:4E:63:A1:BF:C1:C7:B1:31
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0a:69:98:a7:a2:00:36:e1:9c:58:6b:b7:eb:d4:cf:f5:6a:
bc:c6:62:8e:04:2d:30:92:40:7f:3f:5a:b9:38:de:34:dd:0c:
56:67:fc:46:20:f3:f5:25:39:de:ff:87:d5:f6:f5:79:71:24:
7b:60:7c:ff:4b:3c:de:ff:0b:91:19:c6:d2:e9:66:b9:88:c2:
82:e2:d7:31:53:f2:a0:03:47:f8:b2:6a:96:15:05:c7:6c:07:
80:a9:4a:0d:08:b1:55:82:3f:97:e3:e6:62:f5:82:1b:61:10:
4c:6a:98:b7:98:d7:80:c1:b0:14:84:f0:f6:96:9c:eb:c8:69:
61:ba:41:22:6a:78:ca:5a:38:f3:c8:d4:04:0c:9c:60:48:55:
98:1c:3d:cc:8e:ea:df:ce:71:42:a2:8e:31:aa:4c:f7:f8:b9:
2e:11:e0:0a:0f:8f:54:b6:88:81:0b:bf:25:52:4d:2e:6d:e8:
b3:32:2b:f8:bf:46:72:d0:11:3d:e6:cc:96:fe:07:c7:84:e8:
4e:a5:49:b7:b5:97:16:93:83:96:b5:0f:af:8e:07:aa:04:13:
c5:f4:99:81:5c:32:12:a1:f2:68:09:9e:29:56:0d:bb:5f:90:
63:13:28:1b:a9:8b:3d:1a:47:24:10:29:1e:34:df:55:29:62:
ad:64:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client