Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: R9UKMsXKykidFvc8J4VreV6twtf933xBCPR4axY45Dg=
Subject key identifier: AD:A9:CB:A2:99:7C:1F:C9:9A:8D:CD:C4:69:C4:93:93:A4:E0:55:DD
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 01987F7A4D9E5D8238E31F20B4466539B127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0C5C
Signing time: Wed 06 Aug 2025 13:02:58 +0000
Manifest this update: Wed 06 Aug 2025 13:02:58 +0000
Manifest next update: Thu 07 Aug 2025 13:02:58 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: 2bWE1LUNJrfPqwYdKrE1ELoERibbpUimIDR+1MhuIZk=)
2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:4d:9e:5d:82:38:e3:1f:20:b4:46:65:39:b1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Aug 6 13:02:58 2025 GMT
Not After : Aug 7 13:02:58 2025 GMT
Subject: CN=ada9cba2997c1fc99a8dcdc469c49393a4e055dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:93:60:36:07:7f:5e:55:95:d2:6d:47:25:
ce:20:bb:90:4c:1f:61:1e:3d:1e:d3:71:e3:71:6b:
cd:67:c0:a4:13:fb:e5:b9:ef:14:5b:e1:69:87:f6:
bf:10:cb:c0:f7:f1:96:9b:be:eb:74:74:90:cc:a8:
dd:08:64:2d:8e:0c:ac:cf:56:2f:50:18:67:e9:71:
ed:c8:c1:20:2d:34:b0:ae:f7:b6:4c:07:0c:90:53:
fb:d5:f0:4f:b1:37:64:59:c6:24:68:81:da:eb:9c:
47:42:0d:96:76:09:b6:48:31:3c:84:b8:03:6a:8a:
ce:3d:5b:56:93:a9:95:ef:5a:7d:05:17:b2:af:0c:
52:3f:c2:7c:2e:33:3a:d5:d4:af:32:49:77:7f:ed:
7a:45:50:31:92:89:a7:f1:7b:12:d3:d9:ac:32:f2:
0a:46:91:c8:a7:12:b0:d7:35:6f:c8:61:d0:22:c5:
4f:84:27:20:70:f7:bf:ec:07:19:12:4f:50:d4:c6:
a5:c9:c5:df:cb:46:f4:91:60:da:80:83:f7:ba:b6:
d5:5d:9d:56:d3:cd:d7:67:5e:fb:48:73:cd:52:cf:
82:63:8d:cd:0c:2a:5d:fc:9c:9c:c5:83:03:0f:04:
07:f4:16:10:9e:93:7a:16:14:69:e0:1f:9e:c6:d9:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A9:CB:A2:99:7C:1F:C9:9A:8D:CD:C4:69:C4:93:93:A4:E0:55:DD
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d2:4e:54:31:8d:56:de:ec:a4:a7:29:74:f1:83:0f:0d:66:
17:b2:d3:b1:5c:6c:6c:94:23:b7:ca:50:cd:1c:c7:f3:5c:b9:
cb:2b:e8:58:2c:4d:71:ec:f7:32:eb:f9:3c:de:86:ad:a6:24:
62:8a:7a:2d:01:44:e6:1e:71:1d:15:80:e2:35:c8:ca:c5:c5:
3f:2f:0b:e8:32:63:89:1e:9e:1c:72:a2:09:24:05:75:92:6c:
25:44:ea:2e:f6:c3:23:a5:11:f2:f9:82:52:ba:36:64:85:af:
db:df:0a:69:b1:d8:ca:a0:ee:a4:a4:6d:7f:ad:c8:a9:e4:6c:
63:fd:3d:31:31:8a:64:00:73:7c:e0:6c:a3:ca:6b:d8:53:9c:
69:de:50:6b:94:d0:e7:29:93:b5:f1:43:0c:d0:64:3c:ca:04:
ae:31:8a:ef:ed:d5:a7:4f:e0:84:25:c0:11:87:9f:17:39:a1:
83:fa:e8:7a:a8:bd:f2:be:01:da:2a:36:7e:41:b4:ee:b9:8b:
fc:77:24:34:8e:50:33:ec:48:3f:40:ed:80:d0:95:bd:e4:d4:
40:f1:d8:7e:53:b0:94:20:67:bf:a9:a6:dc:85:d2:03:40:df:
7e:ed:9c:63:eb:1f:e7:8b:0b:b6:40:80:29:ed:44:9b:b1:fc:
94:4d:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:29 2025 by rpki-client