Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: nuB/HGyrsQKto5uANfVbruNSfOhtv3BLCk4weJCmdJc=
Subject key identifier: 4E:D2:09:B9:6F:D9:A7:FC:F4:49:69:C6:53:A0:73:9B:9E:E2:DC:97
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 0199319199B2484231508A0B826322691BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0995
Signing time: Wed 10 Sep 2025 03:00:49 +0000
Manifest this update: Wed 10 Sep 2025 03:00:49 +0000
Manifest next update: Thu 11 Sep 2025 03:00:49 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: x9Q8SrbbX4bDkqhW1G8rViFjrsHMCqeWPzRbWjwe5Zc=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:99:b2:48:42:31:50:8a:0b:82:63:22:69:1b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Sep 10 03:00:49 2025 GMT
Not After : Sep 11 03:00:49 2025 GMT
Subject: CN=4ed209b96fd9a7fcf44969c653a0739b9ee2dc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:86:08:78:2f:dd:72:c3:51:e7:af:7f:ad:
f0:af:cd:92:9f:00:93:d9:18:34:a4:53:2d:31:b9:
26:39:2f:dd:15:f0:ee:15:47:a1:25:51:65:fd:76:
c0:51:26:ca:ea:21:ff:79:c6:ee:c0:55:b8:bc:87:
a2:2a:68:86:47:8e:08:13:4b:d9:68:2a:d1:fb:ec:
40:9d:24:45:c5:f2:3e:8e:38:ed:0e:4f:9d:f8:71:
6a:21:ac:d8:3b:9c:0b:b3:82:69:0b:a9:83:40:a5:
3c:e7:2f:50:44:05:77:75:57:78:be:ea:19:57:97:
7c:4d:e4:5c:ee:f6:4d:5e:72:e7:8c:b1:47:a4:86:
40:11:42:61:74:fd:f7:fd:8a:64:04:b5:13:a8:df:
74:02:e5:cc:6d:98:74:39:a8:48:85:69:89:4c:2f:
c6:d3:32:aa:31:92:fc:05:30:72:86:6d:88:30:72:
db:0f:dc:16:e7:01:70:64:d9:3e:b6:b3:a0:ea:e5:
17:01:45:ad:33:58:cd:c7:e7:26:20:cd:ea:f4:2f:
c0:a1:d6:1d:a5:75:fa:e0:84:48:54:fd:3c:15:fc:
d0:cc:44:c0:13:a7:20:19:a2:ca:43:f3:c1:56:11:
12:a2:c6:15:5c:cf:0e:dc:46:47:54:de:13:a9:36:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D2:09:B9:6F:D9:A7:FC:F4:49:69:C6:53:A0:73:9B:9E:E2:DC:97
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:16:19:09:4a:79:44:27:a5:bc:e1:be:99:5c:b3:28:91:80:
7e:aa:40:ef:40:54:d3:a2:da:02:b6:30:64:89:5a:6c:5c:be:
b4:4d:1c:1c:ac:51:78:a5:8e:a7:73:5e:2e:59:a0:35:8c:82:
e0:8f:4a:2f:13:fd:9a:2f:ab:2a:d2:5f:1e:76:5c:a9:e8:31:
5a:da:e6:2d:5f:bb:bc:14:30:48:9e:2d:5f:52:a5:76:c8:70:
a4:c6:5c:2f:28:4e:29:3a:26:15:a3:38:dd:70:4c:95:3c:c7:
6c:9f:f1:33:0d:19:19:c1:54:8c:86:f5:db:88:18:ad:17:de:
97:0f:28:85:2b:1a:4d:a2:c0:f4:57:c0:a6:67:2d:9c:2a:03:
6a:c6:39:b9:61:d0:a6:a0:64:63:93:40:3c:d3:85:4a:af:75:
28:12:c0:1c:4b:ba:c5:be:a6:63:a6:19:c1:d7:90:e4:f3:f3:
68:02:db:aa:5a:a7:aa:88:2e:66:a3:a1:78:82:39:31:4e:4e:
c0:a2:0c:77:35:80:ca:aa:3e:74:7d:00:c0:bd:ab:7b:8b:6a:
85:1d:b0:98:d3:c2:0a:1f:67:34:75:50:48:e1:4d:d8:9e:7a:
24:61:5b:be:07:c8:ca:f3:8b:a4:94:02:99:f1:c5:19:a1:9a:
01:4e:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:34:00 2025 by rpki-client