Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
File: nzbQijzYpC9Goslt_XLtjO4nlHc.mft (raw, json)
Hash identifier: 9p9sM8ojq7V1php1t2A/sdyTkPxllBStPPYxYJQL4ug=
Subject key identifier: BE:30:EB:D0:4E:56:8D:C8:77:99:37:F7:9C:0A:7C:DB:10:0B:4F:B4
Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Certificate serial: 019897EEC0FDD9E7623D564ADA748CD389D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
Manifest number: 0C31
Signing time: Mon 11 Aug 2025 07:01:03 +0000
Manifest this update: Mon 11 Aug 2025 07:01:03 +0000
Manifest next update: Tue 12 Aug 2025 07:01:03 +0000
Files and hashes: 1: nzbQijzYpC9Goslt_XLtjO4nlHc.crl (hash: gDJCFBPSp5aSq0SeXnR0SC0IoQ/qUNXcXs81giBmF0M=)
2: twzQnUgBAT35ET2oNZWOjjEoBE4.roa (hash: HIWNIMTAhxf1Wnub1ymBGmdU28kJ6snFsV9+PWAEB7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:c0:fd:d9:e7:62:3d:56:4a:da:74:8c:d3:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Validity
Not Before: Aug 11 07:01:03 2025 GMT
Not After : Aug 12 07:01:03 2025 GMT
Subject: CN=be30ebd04e568dc8779937f79c0a7cdb100b4fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:04:f1:39:82:d9:57:f8:f8:22:b6:5c:43:
ec:cc:ec:35:34:8f:12:27:90:24:3a:20:1e:59:f4:
f1:6e:72:f1:55:9e:25:87:30:2d:0a:29:fa:f4:d0:
cd:a0:68:13:ef:ff:99:e5:0c:43:d8:63:3c:bc:9a:
f9:ab:7f:28:90:45:3a:c4:0a:38:28:07:5c:5c:05:
e7:53:4a:a6:57:ed:82:38:4e:6f:59:2f:20:bd:40:
54:97:3f:72:dd:71:25:a2:55:d7:42:32:6f:49:90:
47:23:15:09:81:ca:bf:40:55:63:74:0e:45:ab:82:
54:b9:30:35:a1:1a:f1:86:f6:f3:bd:60:32:85:01:
b8:6f:62:a6:83:73:5e:eb:ca:ab:23:38:19:3a:da:
e5:27:97:a8:f6:e0:4f:4d:6c:bb:cf:4d:00:77:63:
f1:8b:34:48:ae:07:a9:af:63:e5:de:86:93:f7:a5:
ea:c6:c1:63:ad:3f:09:67:f3:d1:5d:30:fc:a8:59:
2c:a9:2b:2d:35:a0:4c:d1:eb:18:6d:dd:b2:1d:6d:
e7:fb:00:e6:ab:f0:6d:61:84:67:12:a7:6b:d0:9c:
00:5c:36:1e:d5:a7:07:5c:e4:47:33:ca:1b:da:a0:
67:66:7c:a9:7a:d8:99:58:d5:d1:f0:5c:16:2f:b3:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:30:EB:D0:4E:56:8D:C8:77:99:37:F7:9C:0A:7C:DB:10:0B:4F:B4
X509v3 Authority Key Identifier:
keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6c:a5:cb:dc:31:9f:15:17:4f:b7:2e:a0:67:13:1d:99:eb:
f7:b2:45:49:ba:a3:d7:6e:41:a6:cd:0b:62:81:2e:55:46:2d:
2e:3d:a0:75:71:f9:19:48:17:ff:ff:41:a3:5e:14:e7:b4:c3:
e7:7d:d3:3c:f2:96:1f:fc:d4:ac:0b:32:9a:49:12:10:1b:34:
93:52:e4:a8:a9:9e:a2:86:1c:42:97:02:da:f1:66:05:cf:33:
46:16:0f:37:bc:77:c1:b0:69:47:f9:4d:36:ac:6a:bb:39:8a:
52:d8:6c:d8:0c:92:d7:66:43:57:e1:88:57:a8:53:73:71:72:
18:91:cd:69:90:4e:51:46:ef:f8:9f:b6:7e:5c:8e:9a:dd:1b:
c2:eb:4c:46:39:b8:07:2f:09:70:f7:29:be:2e:7b:22:50:90:
9b:eb:05:07:e8:61:7d:95:e0:a9:87:2b:11:81:3a:50:8c:d2:
2c:b1:ea:9c:a8:dc:b2:f5:cd:5d:aa:30:e7:34:2e:20:46:d6:
eb:33:0c:2f:28:6a:f9:b9:15:11:f8:98:47:0f:25:4e:fa:2c:
48:3e:a6:de:cf:5b:b8:8d:ef:ec:f3:97:48:49:0d:26:b2:b0:
43:7c:8f:f9:06:71:3e:89:48:13:e4:22:51:38:d2:88:54:d6:
25:d0:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:11 2025 by rpki-client