Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: kvbrqbPm4jgnuE7AHC5z+t+qgn3IgXR8tMTKeM9y/K4=
Subject key identifier: D6:DC:8D:C1:C1:93:02:04:FA:79:1F:FC:27:3A:0D:0C:BA:3D:63:2F
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 01988B7C985B651722527DA2F4EC57E86050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 10C7
Signing time: Fri 08 Aug 2025 21:00:55 +0000
Manifest this update: Fri 08 Aug 2025 21:00:55 +0000
Manifest next update: Sat 09 Aug 2025 21:00:55 +0000
Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=)
2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=)
3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: 58wufPcgVoinyCBc2Zy3jvpo4IPn05qaZfqdZpDqW9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:98:5b:65:17:22:52:7d:a2:f4:ec:57:e8:60:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Aug 8 21:00:55 2025 GMT
Not After : Aug 9 21:00:55 2025 GMT
Subject: CN=d6dc8dc1c1930204fa791ffc273a0d0cba3d632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:b4:37:bd:c2:ad:ae:f3:4f:b9:f3:11:af:
86:03:bd:94:09:8d:31:0b:61:be:60:69:78:40:8f:
3d:c5:e2:71:1c:f3:4b:0a:66:7e:f6:04:8f:48:e6:
bd:41:ad:1c:6d:d4:71:c3:d3:0b:cb:53:33:6b:f6:
fe:e2:27:6d:94:5e:5a:e0:24:f3:a7:60:f5:51:a9:
3a:33:21:31:bf:8f:8d:e8:3a:2a:1e:c9:04:9d:02:
b9:6b:c7:0a:89:10:1a:94:7f:7f:f7:da:16:b1:d1:
74:99:45:e5:c6:71:7d:95:75:96:1a:de:bf:ec:5a:
b3:2e:97:59:3e:86:4f:af:37:28:1c:b0:4e:8d:72:
4d:8b:c8:19:32:f6:e3:5a:69:10:c4:05:5f:99:0e:
8c:c5:d4:5c:e9:4f:c6:69:1d:53:0d:a9:fa:a0:6b:
94:ae:28:ac:97:82:30:cd:79:49:41:76:00:8c:37:
40:90:26:8c:0c:17:b4:96:51:a0:e0:cb:45:4f:ca:
43:27:5f:4e:27:f9:61:c0:10:d7:a0:7c:04:d6:60:
1b:84:db:fa:b3:6c:c6:bf:58:6b:6a:4b:e6:59:f1:
ed:5e:1e:67:e6:61:01:95:b2:80:a4:e4:86:94:74:
4a:a8:45:99:ff:10:82:aa:a7:69:89:d7:af:1a:b9:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DC:8D:C1:C1:93:02:04:FA:79:1F:FC:27:3A:0D:0C:BA:3D:63:2F
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:08:b6:5d:b9:41:4f:45:3a:b1:bf:a5:dd:e8:0b:6e:42:95:
a1:00:74:e7:0e:cc:e7:2d:57:79:f9:a0:47:17:24:7e:ec:2d:
bb:01:8f:e0:ec:50:a6:de:f6:cb:3d:7a:af:23:ab:28:b1:84:
4a:da:12:93:81:60:9d:e4:52:21:2e:6a:dd:a9:db:61:f3:97:
98:87:85:1a:df:33:60:05:86:ed:57:74:d2:a5:63:10:27:7d:
38:d1:e3:0d:6e:7c:3f:d4:74:3b:87:9d:73:dc:4b:f4:ed:bc:
e5:77:76:3d:5f:ea:0b:88:f7:a3:2c:8b:b9:9d:3c:0e:39:f0:
e8:87:14:fa:73:6a:5a:45:77:29:e2:92:c8:76:88:be:49:f0:
03:fc:96:d0:a1:7c:25:d7:f8:ad:54:27:6a:d2:d0:50:90:13:
2a:a6:26:04:c8:5e:44:66:a2:62:82:7b:07:8b:aa:b2:f9:85:
f3:89:4f:f8:ad:dc:2e:04:ed:26:5f:84:e1:fb:1c:75:19:8a:
9d:53:e1:de:69:a2:74:f6:bf:39:3c:86:7c:e2:9d:87:7e:2b:
2d:22:bd:2d:75:f9:8b:6e:94:69:59:95:07:26:af:2c:18:18:
42:cf:f6:5c:22:5e:61:bb:19:91:52:5e:67:6b:6c:57:68:2d:
fa:ba:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:53 2025 by rpki-client