Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: XCIlx2YntsgsN02FIfee0EcxWsSXKr1zu6APU+1dZTk=
Subject key identifier: D6:53:61:62:39:58:58:54:AA:1D:1B:2E:5F:06:CA:27:33:89:B3:52
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 0199228C3956C21555DC57E8EF2767331DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 0128
Signing time: Sun 07 Sep 2025 05:00:38 +0000
Manifest this update: Sun 07 Sep 2025 05:00:38 +0000
Manifest next update: Mon 08 Sep 2025 05:00:38 +0000
Files and hashes: 1: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (hash: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=)
2: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (hash: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: HQY0xnyocwV2StnsgbrXNR+KLar7brwG1E4wzAmYucM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:39:56:c2:15:55:dc:57:e8:ef:27:67:33:1d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Sep 7 05:00:38 2025 GMT
Not After : Sep 8 05:00:38 2025 GMT
Subject: CN=d653616239585854aa1d1b2e5f06ca273389b352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:5f:c5:02:67:6f:74:b1:8e:31:e2:a3:f3:
7d:3b:5d:62:20:65:13:c3:10:9d:94:e5:a4:4c:9e:
5b:65:1e:cc:e1:98:e1:9a:4f:8c:52:86:13:da:05:
06:b3:aa:b7:aa:a4:80:5e:df:c8:1a:c5:37:d8:2f:
b7:17:f2:64:1d:85:2a:de:ca:58:d2:d2:fc:7c:d5:
a5:ad:c8:e7:fb:38:01:99:28:53:a4:86:40:ac:c6:
d0:43:e2:84:a0:2d:a3:19:b0:8c:3e:dd:75:71:61:
29:dd:e6:43:48:00:06:d5:f0:72:36:46:aa:51:25:
58:19:30:8b:67:c7:24:74:4f:f7:da:14:b1:87:a4:
6e:98:8b:23:92:13:44:d5:ac:c7:bf:b9:09:56:a5:
18:22:01:77:fe:89:1d:2b:ab:90:df:7d:f5:e9:36:
fa:7c:9a:43:10:49:f5:3c:fa:e1:23:7c:ce:45:35:
59:85:75:85:1d:88:91:69:ab:09:85:20:72:27:f7:
18:62:4c:60:9c:0c:38:ef:97:73:c7:42:fa:49:b0:
c6:ce:b6:dd:90:a1:68:aa:c1:76:3f:b0:4c:52:a9:
98:68:ad:f2:27:16:62:2d:a8:a3:e5:14:49:2e:31:
7b:92:7e:f5:d3:3d:d7:0d:8e:d8:fc:6b:99:95:a3:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:61:62:39:58:58:54:AA:1D:1B:2E:5F:06:CA:27:33:89:B3:52
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:f5:de:e2:17:b2:0c:5d:fb:36:71:92:b7:18:dc:46:cb:
65:31:df:33:e8:eb:94:9d:e7:9e:63:23:91:0f:c5:2f:1f:48:
69:8f:5e:cc:13:5a:1b:b4:3b:44:e0:c5:57:17:5c:53:44:6c:
ef:64:52:0b:e2:ef:41:b2:ca:20:5d:9a:65:a4:eb:1f:f5:67:
14:b0:05:33:5f:22:9f:e5:83:ff:7d:84:f0:23:aa:16:31:0b:
4e:e3:e5:fd:11:b7:7f:30:55:fd:be:b9:d4:25:36:4f:d4:b8:
8d:c3:39:6d:9c:27:0e:5a:ae:81:89:4a:f0:ce:b1:02:b0:c8:
18:42:af:a1:79:c4:d1:77:18:5a:8a:d9:78:1f:a7:41:08:e4:
98:da:a2:64:8c:fd:51:30:ae:8b:be:a9:35:e0:b2:0f:34:36:
40:c0:ec:7d:c7:fe:7e:37:3a:18:22:14:78:bc:8e:8b:0d:50:
16:c3:a7:ae:60:23:dc:13:57:53:78:1d:04:9f:d9:68:78:b3:
d4:f6:88:be:e2:b4:76:71:41:c8:6a:e8:3e:f9:cc:ba:fe:dd:
71:c3:a6:80:bb:cc:e8:11:c8:a5:d8:9a:df:01:c1:bb:4d:aa:
09:24:af:91:1e:eb:a8:50:7c:4e:a3:25:04:50:93:3e:38:89:
00:f8:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:03 2025 by rpki-client