Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier: Q39+EvWq4qlpoznhW0LicjTU4kibjpeU6TppejoYCw0=
Subject key identifier: 1A:0F:66:74:B1:7E:EA:47:81:11:1E:40:BD:FE:ED:29:BA:3C:B7:54
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 01988D6B24CD41820DD9FA2313EFD0ECD94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number: 0EF8
Signing time: Sat 09 Aug 2025 06:01:05 +0000
Manifest this update: Sat 09 Aug 2025 06:01:05 +0000
Manifest next update: Sun 10 Aug 2025 06:01:05 +0000
Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=)
2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: P3Yy4q7UkzcmHYeVgPhOCnJLUaRC/hpOCb1CbK2i5bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:24:cd:41:82:0d:d9:fa:23:13:ef:d0:ec:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Aug 9 06:01:05 2025 GMT
Not After : Aug 10 06:01:05 2025 GMT
Subject: CN=1a0f6674b17eea4781111e40bdfeed29ba3cb754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:4b:d1:8c:ac:2f:35:8a:21:f8:f6:f2:bf:
01:0c:0a:9f:f7:bf:a0:2c:1b:43:09:86:65:4d:56:
12:62:8e:07:ed:ac:7c:c2:13:5e:8f:4d:08:c9:2d:
0b:e5:7d:66:14:82:1f:31:9a:61:16:2d:e3:04:38:
6f:54:f5:ac:d4:d4:f7:93:18:03:e0:31:87:17:6a:
3c:72:95:44:2b:ad:98:0e:20:35:87:b5:3e:82:92:
65:08:c8:42:5c:4a:f5:f4:e3:bf:84:ad:27:74:d3:
54:d2:ac:f3:b2:ac:b2:70:e5:52:3d:eb:80:74:29:
2e:f0:e8:b7:fb:5b:fc:11:80:5f:8e:aa:9f:e6:61:
9f:26:7c:e1:92:dd:2e:fc:fe:69:a7:fa:4a:0e:8a:
d5:bf:01:65:a4:9b:c2:5a:cd:e6:1a:77:83:23:45:
03:1f:6b:99:79:89:05:e9:80:67:24:97:14:43:5f:
5e:70:e5:6d:11:cf:61:05:54:6c:36:db:5e:80:a1:
18:e8:a5:37:eb:f4:43:de:fe:2b:a4:fb:ba:6d:fa:
19:ab:ce:05:04:f2:83:11:1f:ee:c0:8d:58:07:0d:
7b:e3:cf:d8:07:00:74:6f:bf:5b:b7:89:ef:34:f9:
2d:d7:6d:1f:d4:ae:5b:21:bd:df:69:ff:c0:21:16:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:66:74:B1:7E:EA:47:81:11:1E:40:BD:FE:ED:29:BA:3C:B7:54
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:a2:27:6f:cf:5e:7f:68:49:53:57:11:e5:ef:ce:01:64:
bb:e1:1b:1f:96:9a:d1:43:95:88:93:10:46:f0:e3:51:86:0d:
2b:c9:8d:a2:10:9b:e7:df:9a:e2:e3:f4:5a:0c:ca:89:c2:b4:
41:98:04:25:7e:e8:a7:32:2b:42:3b:05:89:0e:45:61:cf:8e:
58:70:14:e4:54:f4:70:93:3d:11:5c:37:e7:74:0d:7a:90:e6:
60:b4:93:90:18:fd:a1:c7:32:9e:2d:ca:f4:21:83:ff:e3:34:
57:db:d8:9b:bd:f0:f7:df:76:6d:4a:e1:a3:9c:f4:ab:5b:35:
43:36:d4:97:ca:7c:0d:e1:3d:d0:7d:2b:01:34:76:14:a9:76:
9a:e1:01:21:35:7b:46:1a:62:01:8c:a4:cf:e0:95:c9:a6:d6:
7e:ff:6e:98:35:9b:0b:45:7d:4c:b6:31:f9:1b:fe:86:16:9a:
3b:4a:f4:db:8c:77:6f:5d:37:d4:33:82:6f:72:2e:38:64:b0:
bf:fa:b5:a1:17:15:ae:01:13:01:12:a7:89:7b:57:7b:f3:37:
fd:0c:14:39:b6:9c:d6:ac:bb:12:44:4e:76:70:19:d0:88:6b:
d8:ad:ee:2d:c4:5f:47:c3:df:2b:6b:e7:1a:e7:58:b8:d6:83:
ce:2e:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:01 2025 by rpki-client