Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: hvEUDynC3+osNClZWpyHL/+1ogkQsAbmrFyyuJkhozc=
Subject key identifier: FD:D1:8E:85:1D:2D:45:D0:B3:F6:B6:40:62:01:29:9F:55:73:18:4E
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 019923A0C8450DEA2736955F89CDCF398CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 0F75
Signing time: Sun 07 Sep 2025 10:02:43 +0000
Manifest this update: Sun 07 Sep 2025 10:02:43 +0000
Manifest next update: Mon 08 Sep 2025 10:02:43 +0000
Files and hashes: 1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: i5QAZPpD+1czjaPKV+8U2FpARGGW7vWFVuGanGWuUqQ=)
2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:c8:45:0d:ea:27:36:95:5f:89:cd:cf:39:8c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Sep 7 10:02:43 2025 GMT
Not After : Sep 8 10:02:43 2025 GMT
Subject: CN=fdd18e851d2d45d0b3f6b6406201299f5573184e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:dc:d7:04:f8:88:f4:c2:cc:f9:4c:d4:0a:
bc:1e:31:48:e8:48:42:5d:c6:69:d3:a0:08:00:93:
d6:70:47:1d:68:cd:af:bc:c1:07:e9:99:6a:c8:a1:
b7:61:60:7e:36:6a:59:ba:af:23:7b:b9:10:c3:d2:
dd:27:bd:1e:36:d4:3f:2e:ec:34:02:b3:ae:68:72:
c1:cd:4b:90:a2:30:92:68:d0:8e:8c:fe:8e:ed:d3:
3d:6c:dc:c4:fd:a2:2b:e0:6a:55:63:1c:fa:82:35:
ad:98:1f:fc:43:f8:67:9a:a4:8f:e2:e6:00:ef:32:
bb:75:4a:5a:f5:e6:00:41:ce:bb:00:fa:1d:be:45:
d9:08:c0:8a:91:d2:8b:85:2b:ce:17:96:27:fb:d2:
71:2c:eb:bb:f6:5f:20:d6:4a:53:ba:8c:95:11:cd:
15:44:8b:87:92:3a:06:99:df:3b:95:a9:7e:88:1f:
12:96:99:46:42:89:6a:ed:86:02:8d:63:41:af:04:
a3:2d:35:a0:bf:d7:7e:bd:0a:db:17:c7:e6:2d:68:
f3:58:cc:26:13:20:24:de:a7:e9:35:be:4d:2b:eb:
70:31:fd:1e:ab:95:80:ad:d8:29:41:18:41:93:89:
2b:1b:f7:62:54:46:92:22:e6:88:e2:e3:df:e5:7f:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D1:8E:85:1D:2D:45:D0:B3:F6:B6:40:62:01:29:9F:55:73:18:4E
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:80:f9:30:cc:1b:a9:ab:9f:dc:95:df:80:15:71:9a:92:75:
c0:c9:16:71:37:50:d9:2c:c6:15:7e:b5:34:00:ac:56:fc:2c:
8c:67:29:0b:1d:a3:bf:b3:66:96:19:e3:20:57:ba:6c:87:32:
8b:73:31:7c:48:bd:4b:b3:bb:c6:8a:71:fa:5c:ae:64:4e:58:
75:d0:be:97:a6:b6:4b:86:8e:c8:1f:54:89:7b:8c:3b:24:25:
67:5e:b0:85:b4:c2:d0:86:65:7d:61:69:38:cd:08:92:9d:2d:
b2:06:2c:43:a1:22:c1:3c:7d:9a:71:fd:b0:1c:78:3c:9a:67:
41:02:3a:df:b3:e8:8c:1c:dd:af:88:75:03:70:9f:a0:86:4c:
d4:c0:2a:03:b8:9e:4d:6b:97:62:4e:76:3e:f2:5b:38:9e:22:
89:f7:22:08:55:1e:60:c3:53:c7:b9:3d:54:74:f3:e4:0a:5a:
d9:bd:5e:89:7c:c8:28:85:b8:43:e8:c4:fc:e2:61:5b:2a:12:
a2:04:76:09:cc:1e:12:b6:bd:fa:1e:2d:3e:af:37:17:79:63:
ba:17:ff:cb:47:80:63:e9:b8:f4:e4:dd:d7:65:55:ec:70:5b:
2b:0b:96:42:9b:4c:73:f2:96:79:f4:6a:57:2e:2d:dd:23:f7:
37:f3:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:31 2025 by rpki-client