Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: Ius+I6Jklg5S5OO1yjGBuLsv65VqThGPNpJD4TJ+ycA=
Subject key identifier: 06:07:2D:05:3F:A2:AD:8B:30:D3:58:94:DD:F8:DE:63:EE:47:78:9F
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 01987450B5532E502FFE002104F9D74C72A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 12A9
Signing time: Mon 04 Aug 2025 09:01:42 +0000
Manifest this update: Mon 04 Aug 2025 09:01:42 +0000
Manifest next update: Tue 05 Aug 2025 09:01:42 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: WL06od7/554QQ/kkNnCNZOJQNTSKJJq5BmrmyppUx+g=)
4: m01g-CBC5mmua20tUAtJoqGt3ww.roa (hash: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b5:53:2e:50:2f:fe:00:21:04:f9:d7:4c:72:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Aug 4 09:01:42 2025 GMT
Not After : Aug 5 09:01:42 2025 GMT
Subject: CN=06072d053fa2ad8b30d35894ddf8de63ee47789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:32:87:91:e4:ac:11:fb:f1:53:e7:76:75:
7b:3a:81:f8:2e:ab:4f:53:f2:3c:21:a2:c2:00:f9:
00:f6:11:fa:68:e1:01:5e:85:01:d3:6b:d1:70:8b:
0c:cd:0b:a6:12:8d:fd:3d:fb:39:3a:f2:01:ba:f0:
5f:69:9e:f4:f1:ab:c4:24:97:ce:4f:45:37:88:0d:
3f:f3:74:76:88:5a:cb:54:9e:07:72:92:c4:38:79:
c3:80:3f:22:51:f3:02:bb:76:65:48:a9:6e:7b:dc:
43:2f:f2:d7:9d:9b:ce:85:ea:93:8b:9a:b6:8e:9d:
f3:42:39:a4:e3:bf:2d:3f:ef:9f:5d:a1:a9:e7:5d:
9f:b8:61:ba:42:3f:14:5a:3e:a4:2c:8f:1d:1e:b9:
a4:a9:e9:5a:22:cc:5e:b0:44:94:96:38:d7:f7:d9:
39:b1:71:e4:2a:f4:d1:6f:dc:3d:88:bf:65:2e:a8:
d6:12:34:ec:3c:13:48:af:fd:20:d4:d8:e2:77:fc:
a2:95:f7:e9:ea:86:a8:70:79:d7:ec:ae:51:7f:87:
b1:17:64:a7:de:e6:80:86:83:b2:76:b8:59:7d:b7:
fa:3f:5f:a6:35:1e:fb:70:a4:b6:83:8c:f9:fd:f3:
40:88:ef:9d:9d:21:c0:40:fc:39:19:a1:52:17:d7:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:2D:05:3F:A2:AD:8B:30:D3:58:94:DD:F8:DE:63:EE:47:78:9F
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:99:e3:d0:df:e5:5a:ba:48:38:10:4f:73:0a:bb:7c:75:6a:
a8:83:bf:18:87:aa:dd:e6:98:4b:d5:f8:3f:7b:64:c4:ce:64:
81:aa:31:65:eb:b0:9c:6b:0a:49:20:ed:5e:1b:d7:47:bf:d1:
f8:90:41:a3:c9:a2:84:e5:0f:15:88:3e:bc:8f:be:e6:5e:2d:
58:bc:06:de:79:f7:4f:fc:aa:ce:d7:3a:2f:0c:3c:c5:93:e3:
d8:c2:6c:58:8d:f5:eb:4d:7c:c1:a0:50:dc:35:6d:f7:28:d4:
8f:87:34:7e:43:99:b7:c1:f5:3e:a3:7a:bc:73:99:6a:7d:30:
83:87:e0:8d:e4:f6:45:c9:04:de:44:39:61:e9:f0:8c:f3:62:
7a:44:0c:33:67:5b:c8:6a:52:f4:c1:5f:82:29:41:fc:d8:79:
3b:ab:b8:0e:1a:c5:36:a8:c4:be:97:36:c9:d4:24:a0:33:36:
20:d0:6d:c1:3b:21:60:c3:07:19:17:6a:73:7c:59:c8:2e:43:
92:06:59:c2:84:1d:71:3d:ae:23:0f:b0:26:a4:aa:8e:34:d9:
ad:ae:6d:af:dc:7c:ec:fa:14:f8:80:00:60:20:44:e7:3d:5c:
5b:0d:25:8e:b1:6e:e4:f6:18:b1:e0:52:32:a0:64:df:81:66:
2d:18:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:24 2025 by rpki-client