Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: HAdRD1EMjJ7LWiRQhueg3Yw4UyJdvfo4QvccfVb7J4g=
Subject key identifier: BD:63:6E:94:5E:AD:01:F6:08:5C:6E:80:DF:03:7F:91:D2:E9:DD:A1
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 0199221ECF52E5DF5CD7E1C70AEBA192A574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 03:01:08 +0000
Manifest this update: Sun 07 Sep 2025 03:01:08 +0000
Manifest next update: Mon 08 Sep 2025 03:01:08 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: 43zrrcWHhq4RnYNdJWyXMRAdMiMmW8LUoA3hp7LGUnU=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:cf:52:e5:df:5c:d7:e1:c7:0a:eb:a1:92:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Sep 7 03:01:08 2025 GMT
Not After : Sep 8 03:01:08 2025 GMT
Subject: CN=bd636e945ead01f6085c6e80df037f91d2e9dda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:5e:45:bc:c9:99:8e:84:eb:58:43:4d:55:
5e:43:20:ae:0c:0d:71:72:1c:91:a8:cf:40:b6:c9:
5a:ac:1a:15:b9:a5:33:22:73:5e:36:64:f0:f5:e3:
19:e7:46:66:88:75:42:19:48:7e:7f:0c:cf:72:fe:
2d:15:6d:17:0c:55:9d:1e:e9:2c:62:6c:0e:0c:8a:
c6:30:5e:84:b4:e4:60:09:a4:b2:f7:c6:da:0e:14:
17:6c:04:75:30:c2:77:87:6f:92:24:ff:75:d9:64:
f0:5c:c7:62:a0:f4:86:23:7b:4b:b7:bb:ea:d6:9e:
0a:ed:2d:64:df:5e:b1:c9:8e:49:ce:c9:2d:bf:7b:
ad:ae:c5:e7:cc:90:7a:f4:39:47:9e:11:6a:a7:48:
f5:5d:27:8e:ae:1d:d5:ef:84:cf:b7:87:74:78:7b:
be:96:6a:02:9b:80:be:a5:9e:5f:91:46:3f:1f:b0:
2c:0a:3f:46:34:7a:1d:53:c4:3c:8e:d9:0f:6f:93:
0f:a8:bd:87:23:45:3e:bd:9f:50:ff:4c:f6:6c:4c:
10:94:c7:ea:7c:40:e8:f5:6c:3b:8b:b0:68:3a:71:
a8:23:3c:1f:b5:b8:22:a2:0b:25:68:66:ff:5a:0d:
39:fa:c7:e6:1b:d5:f5:c8:3d:eb:15:7a:c4:9b:2f:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:6E:94:5E:AD:01:F6:08:5C:6E:80:DF:03:7F:91:D2:E9:DD:A1
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:50:53:49:db:ba:1b:a7:86:03:1d:6a:bb:51:bd:3a:78:fa:
96:cb:84:d2:74:3c:df:42:e0:74:07:93:b3:47:fc:cb:43:ad:
1a:3e:fd:80:5f:f3:d9:4d:7f:2a:c6:91:b1:7a:50:9d:c7:84:
56:ab:78:36:f6:5e:50:02:b4:29:dd:68:48:3a:fc:cc:69:58:
57:92:3a:d0:bf:c3:11:d0:48:3b:30:f8:29:98:33:5a:4b:b2:
c1:35:88:78:97:72:51:91:99:47:89:cb:68:a4:5b:a5:96:4c:
c5:dc:96:9d:2e:a7:9f:ba:9d:3e:1a:80:e0:54:f7:51:27:8c:
bc:d8:46:c2:53:04:7e:57:93:4a:21:03:f4:c4:30:3a:93:d7:
3d:59:99:d0:4a:e7:8b:dd:c6:15:a6:c5:8f:d0:44:dd:3c:4b:
d2:12:e4:22:c1:30:bf:9e:b8:65:79:0d:c4:2d:bd:ff:91:21:
44:d1:81:27:41:ae:a7:15:e4:36:05:d4:87:20:fe:56:1b:4a:
81:78:45:6e:f2:16:4f:14:f8:11:61:ef:36:dd:90:43:d9:1e:
1d:26:de:a0:08:e9:d8:b2:12:ab:fe:37:df:f4:1b:90:92:fc:
6d:7f:95:53:bd:7c:9c:db:25:ea:92:9f:1e:e3:ad:0d:89:45:
78:84:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:32 2025 by rpki-client