Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: sDNYI/J9AaEWsY12xDXnvB9ifIqiUL+0KNWrM9wOttU=
Subject key identifier: CB:A4:FD:5C:82:2E:BA:B8:AC:C0:FD:36:92:46:51:AC:3D:08:0A:8C
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 01987D1C50294398A0590CC24BBD05A00098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 15D9
Signing time: Wed 06 Aug 2025 02:01:04 +0000
Manifest this update: Wed 06 Aug 2025 02:01:04 +0000
Manifest next update: Thu 07 Aug 2025 02:01:04 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: frl9LCoI+uT4t2eLtgkxh2wvhbJNFwkxQnVdvKJpCjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:50:29:43:98:a0:59:0c:c2:4b:bd:05:a0:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Aug 6 02:01:04 2025 GMT
Not After : Aug 7 02:01:04 2025 GMT
Subject: CN=cba4fd5c822ebab8acc0fd36924651ac3d080a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cc:69:6a:f9:72:27:88:17:19:08:79:b1:23:
5b:9e:2a:6d:e8:7b:ec:a0:24:49:ac:47:79:5e:aa:
24:59:75:5b:a8:45:70:f3:4a:b7:49:63:b9:f1:cb:
a6:f8:50:46:02:92:4e:ce:f9:92:d4:32:95:e8:eb:
de:fc:6a:c4:37:e7:c5:48:c7:d9:08:16:84:ba:67:
5a:84:36:35:77:f0:63:7e:e9:a2:e0:9a:7f:4b:c2:
98:7e:fc:84:7b:bd:3b:06:2f:c1:e4:eb:b5:cd:05:
9b:5c:84:cd:31:7e:e4:50:d7:4e:23:81:92:ea:10:
ae:c6:9f:3a:26:27:ff:20:e0:c9:34:13:8e:77:fe:
f3:38:d1:f0:a2:be:bf:17:e5:6c:68:f2:f9:9f:b4:
22:22:ce:c5:bd:cb:2f:31:45:90:2e:01:ac:cb:2f:
e2:19:c1:83:26:c4:4f:f9:d6:3d:6e:38:cc:64:fb:
f1:7d:17:c9:71:9f:9d:3b:f5:2f:57:c0:70:3f:bd:
a8:53:69:d6:f9:39:a3:7d:38:bb:93:c2:48:8c:81:
8a:2c:6c:cc:21:21:1b:2f:9d:56:f0:59:d8:23:c1:
f1:f0:e8:cc:10:16:f3:55:40:37:29:34:b8:83:43:
13:72:57:27:98:30:a9:4c:2d:a1:78:20:db:24:b2:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A4:FD:5C:82:2E:BA:B8:AC:C0:FD:36:92:46:51:AC:3D:08:0A:8C
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:02:7f:f6:4f:0e:5f:ef:8b:8b:8d:f8:73:da:74:11:f2:75:
3e:91:5f:40:21:bc:0d:ee:aa:d8:f1:cd:2a:cd:5b:45:08:06:
33:3d:17:61:65:b1:91:45:f5:3e:d8:f1:7c:6f:49:6c:76:2d:
6d:ec:08:d7:06:89:1d:50:59:63:80:64:24:fd:5a:4a:d0:25:
89:24:38:c2:57:9d:ca:bf:54:32:57:41:9a:0a:59:e6:9a:66:
40:66:78:df:e6:b6:d3:b4:f6:42:6c:b3:a3:bd:18:77:3a:d6:
d1:e3:cc:4a:40:1c:dd:f6:e4:7d:3e:8a:44:77:c3:f5:96:cb:
a2:3c:6b:a3:1b:a3:cd:d1:16:aa:9b:a0:9b:81:c6:cf:eb:f7:
40:cf:39:d8:42:c1:3e:c8:c3:ad:57:b4:db:f6:c4:49:51:69:
24:bc:de:f3:10:7e:70:ee:11:e0:e2:85:9c:c7:02:5f:95:68:
4d:93:72:87:d2:22:0d:df:2f:18:81:93:f1:73:c8:5b:d1:9b:
1f:f6:54:eb:eb:65:7b:1f:86:90:b0:64:ea:78:53:8a:7c:01:
26:2b:12:dd:6f:f8:2d:c3:5f:77:91:67:fc:ca:29:68:9d:6e:
fa:ad:c8:35:36:7e:df:de:74:19:f3:e2:2a:ae:6d:7a:7b:d5:
fe:e4:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:51 2025 by rpki-client