
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier: NCkCL4iiuwXAUiaRoTMmUdOtAwsq3Q7xATzfhn1qfBc=
Subject key identifier: 4A:88:AB:E2:2E:A3:02:87:78:A8:D2:B1:69:61:E5:68:EE:7F:0A:FF
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 0199228CAC3ABDDBFBBED86F89CE24701387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number: 0484
Signing time: Sun 07 Sep 2025 05:01:08 +0000
Manifest this update: Sun 07 Sep 2025 05:01:08 +0000
Manifest next update: Mon 08 Sep 2025 05:01:08 +0000
Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=)
2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: phgvGb+IIS4ZstltzUBAzXfGtbL2OoRd0fOE0JgihVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ac:3a:bd:db:fb:be:d8:6f:89:ce:24:70:13:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Sep 7 05:01:08 2025 GMT
Not After : Sep 8 05:01:08 2025 GMT
Subject: CN=4a88abe22ea3028778a8d2b16961e568ee7f0aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:92:8e:f1:6b:7b:df:db:2e:15:fd:b9:65:
6d:43:33:d7:01:31:1c:6f:ef:18:e2:6a:b2:df:8b:
0e:e5:de:ec:ce:87:e9:ab:7b:91:4d:11:7d:ae:e7:
e9:97:b7:c2:a4:21:dd:76:bd:7d:66:3f:8b:e1:fa:
c6:99:7a:2a:1b:9a:19:42:5b:4c:44:92:03:69:aa:
61:65:14:f3:b6:f7:38:7c:a7:94:8c:ae:d5:60:d8:
40:1f:8d:0a:8f:05:d1:66:75:34:45:62:43:4c:e7:
e8:40:22:95:08:a8:22:12:f5:60:f3:8e:ba:04:87:
98:b3:a3:4b:74:80:ec:70:fb:e7:0b:d9:d9:19:01:
39:49:1d:8f:f2:3a:af:a8:cc:87:00:23:20:4f:0d:
88:33:8d:ef:3c:73:64:9c:57:5e:d4:bf:30:99:eb:
04:ff:a2:56:6d:59:38:18:c6:50:98:a8:02:69:8c:
09:30:63:93:8d:f7:ed:df:92:c1:cf:00:ff:08:43:
33:ad:15:9b:a7:fd:13:b3:d3:e6:fc:9f:c6:05:cd:
4c:80:56:c5:78:74:cf:07:d1:50:e9:7c:62:57:03:
f8:11:5f:53:99:d1:c9:11:a5:75:c0:84:67:cc:a4:
19:93:8b:8d:d4:ca:fa:1c:7e:a6:0e:bf:a9:73:b0:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:AB:E2:2E:A3:02:87:78:A8:D2:B1:69:61:E5:68:EE:7F:0A:FF
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5c:8c:c9:de:c2:d5:7d:ac:ca:a8:65:e2:a2:e8:dc:09:18:
c6:83:b1:f6:48:7a:10:f9:8c:a3:cd:51:36:fe:c4:28:df:7e:
4e:67:aa:02:e6:f8:bc:fd:39:af:33:5e:ad:6e:c6:17:f7:f1:
a9:fe:f2:33:fc:39:98:12:a7:f4:75:29:36:2f:21:c1:c6:73:
95:af:48:8b:d1:84:20:28:d9:c8:00:2e:91:cb:d3:d2:48:f5:
4b:2a:14:ed:a9:49:6f:9e:91:32:61:68:87:73:51:2c:1f:6d:
84:8b:e4:c7:08:d3:e1:ed:10:e2:95:a6:f0:cd:50:96:87:3d:
7c:96:4d:bf:c5:81:ac:ec:d3:f2:ad:4e:d4:c7:36:19:f3:66:
45:40:29:ec:74:ad:92:75:9d:81:a8:86:5b:af:b2:fd:ab:f8:
06:8e:c7:ce:9f:bc:12:ef:ad:6b:10:10:96:c7:b1:cc:98:13:
8d:37:7e:b5:9c:eb:d5:d5:74:89:bc:96:5d:a1:9b:d0:8a:be:
a6:66:6f:0a:4e:fa:13:c6:50:e6:83:d0:37:4e:9d:5c:2c:03:
79:1b:55:3b:9a:bc:47:d7:41:f0:1c:0a:63:0e:f7:22:06:2e:
84:07:de:a1:0f:8d:97:f4:f7:e9:d9:e5:2d:25:3e:a1:52:e4:
44:e9:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:40 2025 by rpki-client