Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier: Cj5+uJh2uMPQEVDcQyrN+uhSPiL1GXk9457G+Rcv59w=
Subject key identifier: A0:94:62:10:CD:ED:7F:DA:D5:F7:02:27:08:62:BB:60:F6:65:59:63
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial: 01988167C9DCA5597C18B0AA9A095FCFAD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:01:59 +0000
Manifest this update: Wed 06 Aug 2025 22:01:59 +0000
Manifest next update: Thu 07 Aug 2025 22:01:59 +0000
Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: b7Wgo43cJ4rkH6WkzoqPyqsbEiW20JJEARBvVrPhrT0=)
2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:c9:dc:a5:59:7c:18:b0:aa:9a:09:5f:cf:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
Validity
Not Before: Aug 6 22:01:59 2025 GMT
Not After : Aug 7 22:01:59 2025 GMT
Subject: CN=a0946210cded7fdad5f702270862bb60f6655963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:d2:32:52:7b:55:2b:b6:85:f4:f6:82:87:
90:b6:83:5c:eb:cf:01:2a:05:0e:0e:a4:dd:d9:99:
20:ec:2d:af:87:ee:73:ba:ff:94:85:7b:2c:c4:f6:
aa:a4:62:1b:ca:a8:1f:ae:73:7a:38:e4:ad:7f:16:
da:43:40:95:87:44:45:64:f3:93:cf:87:52:93:cd:
63:8a:bf:ba:cc:e7:3e:01:1c:e5:40:16:58:45:a8:
90:5e:1c:97:df:0c:17:47:17:e1:bb:18:ce:39:a4:
6d:ff:ad:f4:ae:79:e3:1c:60:00:38:4b:27:08:23:
de:62:14:b0:f5:e9:b2:61:64:92:9f:7d:12:1c:65:
8b:58:ec:f6:2d:4d:42:c5:1d:b9:71:c0:82:63:5c:
4b:4d:93:17:8a:79:ff:fd:c7:5f:50:6d:ff:1a:fc:
c8:59:49:c4:bf:2c:4c:49:94:05:de:4f:1b:d1:e3:
24:ea:35:89:26:f1:94:0b:ae:4f:38:3f:02:5a:ef:
0c:0e:44:50:4b:4a:bb:f9:e3:cd:5f:86:97:99:47:
cc:91:92:01:5c:36:81:93:05:8e:b0:4d:74:f5:e6:
1f:c8:82:d6:c8:5d:e5:62:6c:85:44:d9:85:2d:3c:
fa:9b:db:f9:ab:dd:c3:95:7c:b2:8e:62:8d:46:4c:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:62:10:CD:ED:7F:DA:D5:F7:02:27:08:62:BB:60:F6:65:59:63
X509v3 Authority Key Identifier:
keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:89:fd:68:14:a5:18:51:f3:98:8b:28:25:08:03:3f:27:d1:
be:12:c3:f2:99:57:cd:8e:0e:a9:3d:a0:cb:53:f0:dc:8f:2e:
33:0c:d6:91:ac:88:44:6a:34:95:49:ca:98:c5:6a:ac:60:d2:
45:5f:8b:86:30:2f:53:25:02:50:f4:0e:0b:9d:ad:7d:c1:4b:
f3:35:5b:2b:7b:eb:a4:5f:00:ed:be:f9:2c:78:f7:44:ef:af:
8a:d8:f3:eb:4f:0e:3d:67:63:36:9a:ce:18:a0:5b:65:02:f4:
c0:dd:f1:84:53:24:95:5f:30:18:32:53:94:d0:dd:a4:8d:12:
40:2f:42:35:7e:63:f5:fd:16:56:6d:4e:1a:35:3e:77:9a:25:
5e:9d:e2:79:e0:bf:41:aa:d9:e9:98:59:ae:c0:fd:3a:dc:65:
84:3b:5f:3f:67:5e:7b:ca:15:a8:d4:f2:0d:a3:94:93:6c:1e:
51:b8:2f:68:61:e5:28:f6:65:a2:4f:d5:55:5c:bd:bf:c4:46:
ad:5b:36:79:a3:08:9b:c3:85:b3:b1:fe:cb:a4:a5:e0:4b:50:
3a:eb:a5:ea:4a:e1:e2:81:6e:02:46:e8:ee:d4:ee:de:4f:b9:
34:8f:4e:24:84:d0:2c:fc:17:92:a5:bf:b7:41:e3:d4:d2:36:
48:02:49:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:34 2025 by rpki-client