Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: f1hrnKAnPlbLH5WKpHBYNJjA+yVwS4mbWZhFxXoCHng=
Subject key identifier: 02:8D:40:49:72:2B:71:D6:42:08:17:F2:95:E5:FF:1C:38:09:2E:EE
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 0198879FC1E0E4EC3BE184707514D5F7182A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 057D
Signing time: Fri 08 Aug 2025 03:00:50 +0000
Manifest this update: Fri 08 Aug 2025 03:00:50 +0000
Manifest next update: Sat 09 Aug 2025 03:00:50 +0000
Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=)
2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: L9S7ytWc03lDveSKfT7BKmt1y4CFXAzTjs1tgrX1uXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:c1:e0:e4:ec:3b:e1:84:70:75:14:d5:f7:18:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Aug 8 03:00:50 2025 GMT
Not After : Aug 9 03:00:50 2025 GMT
Subject: CN=028d4049722b71d6420817f295e5ff1c38092eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:32:43:44:69:19:a4:65:60:a2:11:e3:8b:
96:b8:6e:1e:4c:51:f0:9d:ef:aa:85:64:04:f7:43:
43:a1:b1:a2:16:07:33:64:9a:c3:51:fa:42:c6:59:
c9:1c:63:de:18:ed:dd:66:bb:94:77:85:11:74:9e:
12:13:f8:7e:01:c9:e6:32:b7:3e:40:80:e8:76:e1:
d0:12:b5:9c:45:40:c3:e4:2e:cc:e7:5f:24:3e:c1:
9b:4a:02:7a:60:2e:e1:ab:9c:19:b5:dd:ff:f8:cf:
c6:67:c3:24:1e:2a:91:d6:7d:be:e6:32:71:55:22:
20:84:43:42:87:af:34:39:4a:57:39:50:46:c2:30:
3e:cf:20:70:b1:b2:0c:22:e1:84:15:4f:73:55:04:
86:fe:b6:fc:88:9c:b1:49:29:64:1c:64:df:c1:f9:
f3:97:45:1b:7a:b9:2b:81:67:b8:df:0b:99:72:11:
6a:24:3e:84:e8:31:bc:40:46:35:3b:15:ae:d0:34:
9f:5f:8d:0b:cb:08:93:4e:80:cf:83:36:e4:dd:b9:
56:7e:ac:21:f5:2c:25:21:92:1c:f7:61:b4:23:eb:
f8:4e:ed:77:96:77:be:30:82:9f:53:20:45:50:15:
c1:7f:42:7b:36:7c:56:d9:aa:b9:8a:8e:c7:e0:43:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:40:49:72:2B:71:D6:42:08:17:F2:95:E5:FF:1C:38:09:2E:EE
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:99:5e:5b:d5:98:2b:3a:a7:1e:21:84:a5:56:16:53:b8:b3:
fd:88:b1:23:79:0e:22:08:13:14:e5:b7:f5:64:05:24:c0:e1:
89:a9:f3:5c:3d:24:09:b6:39:5e:3b:57:2a:34:f6:a8:6c:43:
b3:33:c9:82:03:56:79:60:d9:2f:a5:dd:11:81:f0:65:a5:5a:
89:ee:f7:a4:14:63:19:1b:93:fe:e2:8a:6c:6d:d0:c2:98:9b:
03:e1:f9:47:d2:9d:98:7d:1d:48:15:57:9a:04:36:93:49:2f:
c2:63:f8:ed:f4:10:9c:44:be:7f:bc:46:c5:4b:a4:b8:4a:9e:
b2:2d:a2:7f:26:31:17:38:90:a0:0e:ca:46:e0:81:c5:12:f0:
3a:37:06:cc:2e:39:f2:de:ff:50:43:0d:5c:0c:cc:34:ed:81:
40:cb:26:9c:6e:b5:00:ea:18:c8:b2:d5:9b:62:1c:cf:4b:9a:
a3:df:ca:f4:24:bf:a1:43:14:97:64:19:7e:ce:e4:c5:2e:26:
f3:4e:30:31:ba:c6:fe:8f:53:83:28:bc:78:d3:6f:3e:ed:a5:
78:0b:8e:4d:46:4d:51:64:4d:96:6c:90:4e:08:bf:5b:24:ab:
cd:b3:cf:77:cc:43:2d:36:0f:6b:5e:51:b0:80:48:1c:1e:4e:
30:1d:fe:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:33 2025 by rpki-client