Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File: NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier: SNhV0c+I6ZREcfesrAvpjZiHt2sgkQuC7Jxa21IQiVY=
Subject key identifier: 72:B3:F9:28:CF:70:8F:EB:F5:04:FA:16:BE:07:0C:50:8E:89:3A:95
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial: 01988B7D0F5B1B57269B7F974450498891D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number: 0395
Signing time: Fri 08 Aug 2025 21:01:25 +0000
Manifest this update: Fri 08 Aug 2025 21:01:25 +0000
Manifest next update: Sat 09 Aug 2025 21:01:25 +0000
Files and hashes: 1: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: Fen7UIWOfWX0q0OGiQJpjrFYdn3LtUa8Z7UXmLrupc0=)
2: x2Xaez7Ra9vjvF4FG3Er4hO4ovk.roa (hash: T67Ch/iuLueDDibfJIFSKnLQW9UiEIt+71JVmL/jUzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:0f:5b:1b:57:26:9b:7f:97:44:50:49:88:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
Validity
Not Before: Aug 8 21:01:25 2025 GMT
Not After : Aug 9 21:01:25 2025 GMT
Subject: CN=72b3f928cf708febf504fa16be070c508e893a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:ea:57:f6:79:7a:a2:15:7f:06:dd:ad:88:
6f:43:a1:e9:f3:0a:de:34:e3:19:eb:95:ad:8c:4b:
bb:6c:93:0b:b7:28:c6:80:c3:80:30:ce:8a:07:cf:
3f:f0:54:01:fd:c0:5a:97:c7:d7:0a:72:bc:40:ff:
c3:f1:15:57:f1:78:b0:e4:42:a0:c1:5f:83:98:52:
60:a0:92:da:98:75:ea:df:81:1d:1d:f1:68:72:2b:
5b:3c:32:94:8d:43:2e:d8:a2:9f:c0:c1:b7:49:a5:
e0:88:81:4d:26:0c:14:03:6a:a6:03:90:1d:21:53:
70:59:06:d3:18:9c:99:01:1c:35:a3:7f:99:5e:98:
c1:82:cb:af:5d:09:a2:28:d9:46:7b:35:86:f8:fc:
1f:ce:9a:6a:6c:ba:ac:3a:f9:fb:f4:57:ba:18:0b:
fc:ca:60:b3:4b:b5:73:6a:0a:61:ea:c0:4f:53:d0:
3b:03:2e:69:48:7b:32:40:cd:af:9a:23:86:db:ee:
dd:5f:2a:61:0b:25:4e:58:c1:ac:5c:7c:28:01:33:
d0:8c:23:b4:b9:b4:7c:a5:f2:d4:6e:bc:c0:70:ef:
8d:e8:2e:50:29:00:14:20:16:53:38:a6:29:92:66:
7c:da:7b:7e:79:e5:11:84:cb:7b:28:64:9d:eb:7a:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B3:F9:28:CF:70:8F:EB:F5:04:FA:16:BE:07:0C:50:8E:89:3A:95
X509v3 Authority Key Identifier:
keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d3:04:7a:6f:21:c2:9b:ff:84:3a:4f:de:6b:5e:d1:74:71:
57:ce:c7:e9:7a:d5:d2:52:d5:44:cb:eb:33:a4:bc:15:93:2a:
03:e7:54:b2:51:a5:60:72:68:40:4d:88:f4:13:65:ff:f8:58:
a2:d8:0d:c1:98:2d:af:6b:33:3d:15:3a:87:bf:6d:c6:02:a9:
96:ac:72:14:63:f6:54:54:a5:57:ac:b8:86:e3:7d:3d:f9:a1:
50:db:8c:c2:dd:2b:ab:4b:94:7c:67:85:3e:9a:8a:0c:2c:6e:
2d:d7:a6:9f:93:c7:f6:0c:e0:2c:7b:bd:56:82:46:df:ce:38:
e3:ee:24:16:1e:6c:44:97:3c:07:cc:f8:9e:f8:9e:81:7f:6b:
df:4a:df:46:0e:87:02:45:48:91:97:c1:48:5a:cd:2f:09:a8:
90:ff:b8:d5:fe:11:fd:97:90:37:13:84:89:c1:7e:09:2f:dc:
c2:9e:1b:d5:b1:8b:e4:cc:f7:6d:08:7f:a4:fe:a5:74:02:69:
91:6a:b5:97:ff:30:37:e8:f4:2c:bf:93:8c:ad:13:28:43:bd:
cc:19:bc:3b:83:74:95:d3:66:84:8e:f3:0c:c1:e8:78:06:57:
2e:09:bd:2c:c6:bb:d6:13:b9:59:c4:70:ff:f8:c0:27:7f:e4:
cd:cd:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:50 2025 by rpki-client