Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: 1C3r9wFXxU8NGm/meVGX6a2+GFGBRJt0Vjc/hFuua0g=
Subject key identifier: D2:EC:51:8E:1C:4B:5E:DC:F5:2D:15:4C:53:F9:12:FF:7C:97:35:33
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 019881D59696741CE3BBDA18D1DA04FF276B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 1120
Signing time: Thu 07 Aug 2025 00:01:55 +0000
Manifest this update: Thu 07 Aug 2025 00:01:55 +0000
Manifest next update: Fri 08 Aug 2025 00:01:55 +0000
Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: DUcvK/Y4s/gZ2bgAZxSCTzuOxrQCEQ9Cg6jMK+JSSPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:96:96:74:1c:e3:bb:da:18:d1:da:04:ff:27:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Aug 7 00:01:55 2025 GMT
Not After : Aug 8 00:01:55 2025 GMT
Subject: CN=d2ec518e1c4b5edcf52d154c53f912ff7c973533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:a7:cc:a9:7a:9b:e5:43:b5:4e:ef:01:c0:
c1:eb:0b:b6:8e:1d:a4:18:09:b0:10:b0:0d:b8:03:
97:ae:ce:5e:90:1b:6f:bb:64:97:11:db:d6:90:c6:
64:31:7d:4c:07:09:70:77:81:a2:72:61:16:e5:2f:
98:a0:a6:a0:ca:57:70:b4:d6:8f:6f:82:e9:1e:26:
0e:5b:ed:ed:4d:5f:46:0d:65:70:41:f4:f5:68:e3:
4c:b6:64:65:30:9c:bd:15:07:a5:8a:ce:bc:07:b2:
11:eb:07:bc:bf:55:98:99:60:68:71:86:b2:45:31:
51:ed:f5:06:18:a5:5a:42:26:3e:96:97:48:e3:49:
b8:7e:3b:62:4c:ce:2a:a1:18:9a:6b:67:52:7d:bf:
91:90:17:0a:c2:10:a2:b9:cf:e6:75:d3:71:a8:a7:
31:ad:33:1c:25:14:ff:81:41:f8:43:82:eb:35:41:
b6:34:ba:c5:c5:81:ab:45:c7:71:d0:1b:91:f0:d0:
ca:8d:11:f5:40:5a:68:4d:62:bd:0d:ed:39:a2:7a:
c4:b3:5d:e1:2d:39:90:1e:10:0c:38:66:31:5e:ef:
3a:91:05:61:7b:b2:a9:eb:33:68:27:70:3c:b8:da:
f6:a5:70:cf:09:08:2e:7e:c6:cd:a5:38:db:a3:9a:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:51:8E:1C:4B:5E:DC:F5:2D:15:4C:53:F9:12:FF:7C:97:35:33
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fc:5c:24:2a:60:66:49:23:8b:9a:e6:4a:6e:a2:44:20:2c:
ab:aa:b7:68:00:41:84:05:c1:20:08:e3:bf:d4:21:c5:72:96:
9d:96:42:08:b8:63:95:b7:2f:99:75:2d:59:1b:22:7d:55:d3:
0e:ba:9f:ec:ea:e1:ad:5a:1b:81:80:85:c8:92:18:ec:de:42:
9b:6b:12:31:31:ae:e5:ef:d2:9f:bb:70:36:d1:59:2a:c2:9d:
01:fa:8d:cf:31:cf:9a:5b:9d:7c:19:42:61:53:58:c5:57:6a:
95:ac:00:bf:74:55:1e:b9:a1:c2:4a:c3:56:2f:b5:c1:07:89:
30:3c:d4:cc:6e:ed:56:72:69:f8:25:2e:c6:de:46:9e:66:97:
1f:af:7d:e4:58:6c:91:dd:d9:6b:85:2c:8a:f8:c2:eb:f5:84:
b7:6d:2c:4d:b4:4e:9d:10:d8:61:14:3a:62:7b:2b:ca:29:ec:
69:4c:b8:92:d2:4a:2b:a2:28:03:97:20:aa:aa:9d:b1:ee:5c:
70:c3:41:27:58:a7:48:52:20:fb:c3:ce:c9:0b:04:21:a1:2b:
d1:76:e9:7e:fb:32:d3:b5:6b:5d:8d:28:a5:ea:b7:94:22:91:
4a:6a:0c:92:c0:b4:74:8c:4d:1a:b7:a4:5c:70:93:36:36:70:
6a:08:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:54 2025 by rpki-client