
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier: QF1jEKY1P+khn3IgyrzfeCHyfNsBy525gyoQ+f4wxmc=
Subject key identifier: 91:4A:FF:E0:55:4D:A0:70:47:BA:02:0D:80:AD:F9:87:48:08:F6:A9
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 019926D6E831800F3E3A7AAD6BE218A9A606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number: 11A3
Signing time: Mon 08 Sep 2025 01:00:42 +0000
Manifest this update: Mon 08 Sep 2025 01:00:42 +0000
Manifest next update: Tue 09 Sep 2025 01:00:42 +0000
Files and hashes: 1: 5yK2af_g5CTlXz9q-R5Ey4S2raY.roa (hash: LxU9aJpGxPnyOcQ82YucJ2+C9wvejuknSWDM/RouRtA=)
2: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=)
3: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
4: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
5: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
6: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: Ycb64RlNjdl3OFRwvxc4nCkci3sLLjLHRwhsFh1O1ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d6:e8:31:80:0f:3e:3a:7a:ad:6b:e2:18:a9:a6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Sep 8 01:00:42 2025 GMT
Not After : Sep 9 01:00:42 2025 GMT
Subject: CN=914affe0554da07047ba020d80adf9874808f6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:ae:26:68:3a:8d:86:13:68:7d:f3:7b:91:
f5:8b:d3:18:60:64:e5:40:c1:1e:2d:48:4c:e3:4d:
49:bf:82:03:64:ae:59:ce:fe:8b:4d:bc:20:a1:3f:
44:a0:1f:73:83:ec:12:53:26:65:72:ba:88:ca:6d:
7f:9d:64:5b:dd:e3:44:54:23:85:68:90:a6:f4:e2:
db:65:93:46:04:89:a4:8d:fb:ad:68:b1:9d:62:70:
f8:ac:17:90:e7:7f:07:c8:a1:a9:ff:76:c1:2d:7d:
30:c5:3c:4e:03:dc:76:21:11:a5:51:1f:61:38:56:
34:23:7a:c8:54:6b:99:a2:46:d0:7b:9b:ef:1f:fc:
5c:aa:e7:19:9c:40:0e:eb:33:0e:47:8d:8e:33:70:
71:f2:37:a2:8c:d6:a7:d0:46:6a:96:02:e9:b0:8f:
7b:d6:49:9c:27:17:1c:89:45:65:d7:17:8b:ef:53:
5a:39:32:8f:ef:f5:f9:81:5f:68:1c:83:f7:69:9e:
fa:7e:e0:9f:72:8a:47:32:f6:f5:07:be:90:95:73:
27:35:00:94:3a:ed:09:4a:f1:7e:46:17:0e:f8:38:
26:04:45:19:e2:58:fe:a4:f8:6e:a8:11:32:4a:49:
08:66:b3:bb:7f:59:f5:26:eb:72:f6:70:39:76:67:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4A:FF:E0:55:4D:A0:70:47:BA:02:0D:80:AD:F9:87:48:08:F6:A9
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bf:3b:15:d6:f9:d6:5a:3d:26:46:49:07:1a:8f:d9:3e:31:
d1:81:9a:f3:e3:49:8c:ff:ab:53:5c:60:38:60:43:87:86:fd:
f7:60:aa:ff:ff:cc:46:d8:50:9d:56:ec:aa:0e:cd:27:a4:a8:
da:fb:41:d1:77:ae:31:1f:c4:cc:73:8b:12:32:a2:88:02:42:
88:72:37:21:84:71:07:77:a0:86:cd:d3:3d:80:9f:6d:59:3d:
41:46:ba:a8:e9:7c:be:a1:11:68:ad:01:94:f8:4d:33:df:fe:
9c:9e:57:ba:53:0d:47:58:cf:26:86:e6:48:eb:85:c4:ee:d9:
b0:dd:e3:94:41:a5:b5:c0:5a:de:0f:c1:60:65:3f:0d:06:92:
47:5b:9e:20:18:d6:11:15:24:26:85:c2:a1:99:c7:30:30:a3:
22:b3:c2:ff:e4:ef:d7:4e:e8:cf:ff:39:04:56:95:97:08:4a:
56:13:23:78:c8:ac:91:f5:6d:c6:61:87:46:24:d2:71:22:71:
b1:11:7a:b3:27:53:3a:6f:ac:8f:ce:b6:36:ef:fa:f9:a9:9c:
39:de:d0:e8:b5:99:3a:b7:05:bf:5b:b4:8a:0c:8a:64:29:ad:
79:8b:bc:24:a4:7b:b6:af:74:68:e1:82:3a:07:6d:1e:90:e3:
34:f6:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:54:46 2025 by rpki-client