Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: f+TK7NjfmyPD//4LvkJ+EJ1bsQB9vIXaqDxPXhSCiwA=
Subject key identifier: 40:97:77:62:85:1E:BF:27:F6:7D:7B:12:81:8E:2F:9E:92:21:43:EC
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01988168C2FFB0EB709DD09F376C57F043A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0937
Signing time: Wed 06 Aug 2025 22:03:03 +0000
Manifest this update: Wed 06 Aug 2025 22:03:03 +0000
Manifest next update: Thu 07 Aug 2025 22:03:03 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: t11X8BqpJSGE0uINnDc11z1i9UBSmNWcazFUU06ehbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:c2:ff:b0:eb:70:9d:d0:9f:37:6c:57:f0:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Aug 6 22:03:03 2025 GMT
Not After : Aug 7 22:03:03 2025 GMT
Subject: CN=40977762851ebf27f67d7b12818e2f9e922143ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:f2:ab:95:84:05:73:c2:05:d4:2e:74:36:
f4:a6:a4:13:f9:d1:d8:47:8f:fc:7a:fc:0f:21:9f:
bc:da:ba:ed:64:93:e0:0b:32:a4:ef:d7:33:b3:29:
cd:f0:1e:d6:75:2e:f2:9c:d2:58:b5:e7:90:31:bf:
60:0b:22:d4:e9:98:a6:ee:de:27:e8:02:85:5a:d5:
54:5f:c7:42:88:94:72:9d:19:b4:4d:f4:6f:ac:0a:
45:a8:2f:be:ed:af:a6:29:a5:c8:e3:b1:18:e7:17:
e3:34:93:0d:1e:26:49:13:91:88:d7:7c:fb:e3:a2:
d4:00:6b:b0:bf:42:81:0a:01:06:31:4e:19:12:86:
64:39:42:bb:22:0b:e9:2b:0e:1b:aa:9c:41:4c:f4:
59:74:62:0d:7e:58:f9:88:50:27:5a:24:47:d4:be:
54:22:01:94:6a:07:b8:6c:fd:9f:e5:47:cd:9c:b3:
43:9a:d4:99:6d:29:60:7b:04:31:17:f8:25:9f:7d:
a9:b7:81:55:6d:d7:3d:78:db:1d:53:bd:6f:eb:95:
99:f5:14:c8:28:ef:36:b7:68:e9:0e:7a:51:8b:7b:
33:c6:c1:39:ae:03:ea:26:6c:11:f0:07:a6:22:cb:
97:1d:13:80:f0:2c:13:f4:95:5d:fb:72:3c:16:82:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:97:77:62:85:1E:BF:27:F6:7D:7B:12:81:8E:2F:9E:92:21:43:EC
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:74:2e:82:91:ea:2b:f9:ea:82:20:11:27:1d:50:3b:c7:66:
b2:9f:c7:d2:97:fd:7f:7a:8c:45:55:0d:7e:fa:43:2d:a5:2d:
0f:e0:e9:7b:c8:6b:47:80:e2:9a:57:5c:dd:4b:1d:0b:12:91:
93:7d:1b:cb:05:82:1c:b2:09:58:cc:60:63:2d:e6:45:4a:2a:
8f:b4:a4:1c:95:64:89:a0:84:58:94:30:9d:62:99:1f:b4:fa:
c4:3e:15:42:c7:e6:f4:39:74:2b:3a:a2:38:ee:ad:23:9e:c2:
0c:3f:b0:0f:27:bd:18:5b:50:6f:03:96:d4:b6:69:5d:57:51:
e9:55:1f:3d:b5:39:f2:42:fc:77:5d:87:26:87:f3:8b:20:93:
3e:40:64:04:04:01:a4:96:38:d8:06:4d:1a:ea:30:d9:0e:ea:
7c:cd:67:51:3b:e2:01:5b:e4:c4:71:fd:29:fd:3c:8b:66:9d:
5a:60:a0:f3:d9:7f:c2:dc:a6:94:67:8b:a7:87:d5:1d:23:c2:
2b:e3:79:57:37:43:9d:2b:7e:fd:2f:64:ee:4a:f4:47:70:89:
66:5f:c3:bb:b5:01:c6:ac:92:db:68:e4:d9:73:c1:fe:bc:b8:
48:cd:bc:0e:e9:bf:46:1c:92:6a:0a:9d:e5:39:7e:d4:56:45:
28:21:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:13 2025 by rpki-client