Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
File: nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json)
Hash identifier: ByKGDVFfv0KJCqxbbVp3xraxkszdUDGZSVPSTcGzWEA=
Subject key identifier: 0C:37:E2:56:A1:73:B5:73:CA:87:62:1C:A1:E4:2A:AB:6D:7B:98:90
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 019892C7E0DD2C96018CBE02B22C72E7A93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
Manifest number: 0B4F
Signing time: Sun 10 Aug 2025 07:00:29 +0000
Manifest this update: Sun 10 Aug 2025 07:00:29 +0000
Manifest next update: Mon 11 Aug 2025 07:00:29 +0000
Files and hashes: 1: cmsoMlIRCcbLziNipTUjZc3lrew.roa (hash: a1CFCcY0jADOuS6DTKGkRSmsv5gzH4GzUcir7HG6pUE=)
2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: 4d4pM06jcxvsa3xNp/wrd4x+c5F91Y3K2UIwPGbXeJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:e0:dd:2c:96:01:8c:be:02:b2:2c:72:e7:a9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Aug 10 07:00:29 2025 GMT
Not After : Aug 11 07:00:29 2025 GMT
Subject: CN=0c37e256a173b573ca87621ca1e42aab6d7b9890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:37:df:d2:0b:c2:9c:16:9e:12:6c:a1:ec:
64:bd:2e:a9:f5:5e:b9:38:9d:21:c2:4d:69:f0:14:
ed:f2:95:b5:8d:56:d9:fa:15:07:ce:01:8f:33:e3:
81:19:65:ab:29:20:54:39:40:aa:f2:9d:02:dc:4c:
14:26:07:ab:41:70:76:fe:39:4c:bb:40:52:4c:84:
1c:2d:14:a6:da:f2:1e:84:17:9a:24:e1:11:7f:fc:
d6:2d:f7:7e:c5:27:51:d7:9a:2d:5b:7c:54:7a:9b:
ca:e0:ab:14:16:ff:38:3b:9d:11:2c:96:00:e8:82:
5a:a9:79:f8:cf:bb:09:01:b6:38:a8:11:64:4f:2c:
c1:a0:3b:43:b5:ee:1c:f6:8c:93:ae:8a:8d:f8:e9:
4c:92:65:d8:ed:67:48:e9:95:18:82:c9:39:57:64:
c3:8c:d8:17:a6:59:0c:76:26:a7:c1:8e:4f:ca:3c:
33:70:b7:8d:5c:17:3f:2d:6f:5a:7a:9e:38:20:ca:
b9:8e:35:cd:2c:a7:48:b4:bc:f3:71:0b:74:fa:ab:
36:14:9d:5e:1d:5e:ef:cc:3e:f8:c1:5f:53:5d:51:
b2:1c:de:6e:ae:81:17:5e:42:1f:66:3b:ac:6e:4b:
5c:ea:2d:bd:1f:2e:75:2b:19:76:58:27:2f:ae:6a:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:E2:56:A1:73:B5:73:CA:87:62:1C:A1:E4:2A:AB:6D:7B:98:90
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e9:ab:95:cc:f2:e4:84:71:fb:04:83:2a:63:83:33:85:0d:
e3:13:bc:05:72:2c:3a:f6:84:63:99:f5:74:fa:37:e0:31:97:
92:38:0c:ba:c3:9d:42:d2:fd:40:a8:c0:ba:06:2b:19:08:0e:
05:c1:b3:4f:57:b7:62:40:fe:e5:bb:0d:d7:97:18:9c:27:72:
f8:f8:af:4f:12:9e:3a:56:4d:f4:f1:79:fb:95:74:16:cd:ab:
e5:43:e9:b9:1f:d1:18:6d:7c:86:a7:d0:34:a3:c1:69:d7:0f:
74:78:9c:a7:60:11:f1:1e:3c:b0:80:23:9c:9d:a4:ed:0f:b8:
23:73:92:8d:2f:5d:6b:02:f1:76:a4:de:a0:e4:58:b0:e4:8a:
e2:e2:0c:f7:3f:c3:77:05:4c:b2:f3:c7:32:ff:18:99:f9:ea:
8d:fe:8c:74:4e:5c:b9:f4:ff:31:89:27:e7:88:57:0d:a5:98:
89:12:d5:94:e0:3f:fe:b4:28:ce:d8:06:b4:9e:95:5f:35:57:
d7:fb:72:81:64:d7:b0:d3:7b:65:73:89:95:dd:d3:e9:60:8a:
a8:3e:fb:aa:b5:fc:bb:8f:33:19:33:44:1f:93:b7:b7:2b:d3:
bf:3b:dc:c9:23:df:51:29:ee:5f:e3:ea:56:e9:c2:c8:84:43:
a7:94:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:20 2025 by rpki-client