Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: HN1/IiOs2qzKLIBjPkO8LwOnjdNcjwFbZALBSZKunFw=
Subject key identifier: FB:C5:8E:EA:A8:3F:33:92:45:39:64:09:E0:53:03:3B:E2:B5:39:D0
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 019892C8EC45811283DD66832C6A4696005B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 0507
Signing time: Sun 10 Aug 2025 07:01:37 +0000
Manifest this update: Sun 10 Aug 2025 07:01:37 +0000
Manifest next update: Mon 11 Aug 2025 07:01:37 +0000
Files and hashes: 1: Hl7hSFZEHZrA1_ugH1WvtUr7hTI.roa (hash: uywWwGCKWj+Fn6qNY8dmQ39B3/vU6rK6HYsO/2wacYs=)
2: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: bW4HzBnHV5mu+AfeABbZjlE+X/vXJjZVgrsrhLLZHKQ=)
3: cekUNXzTWTu4gnxTXJJQQyW61Cg.roa (hash: ZDt6OkPV5Ex3Yi3FM3u0/RzjrLejRDKeTGQEGbNL8iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:ec:45:81:12:83:dd:66:83:2c:6a:46:96:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Aug 10 07:01:37 2025 GMT
Not After : Aug 11 07:01:37 2025 GMT
Subject: CN=fbc58eeaa83f339245396409e053033be2b539d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:62:b0:19:eb:c2:28:74:15:0f:53:80:bc:
18:97:f3:d5:8b:5b:92:32:ea:57:46:5c:39:ce:7c:
04:71:07:be:c3:13:9b:32:6d:7a:5a:24:0d:0e:c8:
a7:45:3b:2d:97:f8:e9:2a:2d:15:74:ee:60:47:70:
18:57:52:3b:4f:5a:22:e9:51:12:c0:be:10:6f:e6:
3f:f6:24:ec:46:91:1f:73:a6:a2:30:f6:50:42:5e:
a9:9d:0e:73:72:f2:be:a8:3e:3c:e0:d8:61:74:55:
2e:57:6a:a8:b0:32:36:47:22:46:55:94:fe:16:a4:
5f:89:e5:09:dd:71:d1:45:ae:6f:e9:a7:21:3b:b8:
5f:61:87:8d:1c:c0:c0:31:6e:e3:1e:3d:75:7c:67:
b6:58:f2:2a:2b:28:9e:47:1d:5b:d4:e0:a7:77:5b:
16:6c:bd:c3:44:b0:d4:1d:73:44:4c:f2:81:0f:1a:
2d:1d:fd:6a:7d:2f:b5:ff:3e:01:27:2d:4a:5e:66:
ab:cf:64:cf:8c:00:32:d9:60:0f:95:f7:b0:39:14:
d5:05:2d:fc:79:40:66:85:6e:43:ae:3b:b6:4d:40:
77:98:bc:2a:6b:4e:7d:60:43:f9:a3:74:2c:1d:02:
da:e6:35:78:7d:67:84:a1:37:36:ba:06:22:5c:48:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:8E:EA:A8:3F:33:92:45:39:64:09:E0:53:03:3B:E2:B5:39:D0
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:38:dd:46:1d:aa:98:2c:b1:91:db:05:6e:8c:06:47:90:ab:
c8:97:14:97:73:98:47:56:3d:b6:ec:e3:54:97:2a:6d:39:c3:
b2:b5:20:a1:76:67:2e:15:65:d0:6e:0e:3c:8e:b5:00:12:84:
ab:a1:46:3c:ab:2a:f1:bf:c9:53:12:d5:1e:55:8f:0d:82:cf:
e1:3a:4d:83:a8:79:67:06:8b:2d:fe:ac:77:60:23:f6:74:b3:
83:16:68:1e:6f:c3:f4:dc:e2:25:56:f2:7d:b5:eb:f6:8b:38:
ae:ec:d2:52:03:37:de:0a:d3:0f:83:8b:e6:df:34:d0:91:f4:
e5:5b:4b:0a:45:36:56:cb:b6:9d:b2:2f:5d:a4:e9:84:85:1d:
31:1d:fe:87:bd:d7:48:b5:b4:03:de:6d:3c:04:88:d0:ea:8a:
81:a1:b4:6b:48:e6:c0:89:d5:34:28:35:0b:2f:79:91:53:f1:
91:b9:4b:c4:e2:81:68:8e:0b:91:8f:4d:c9:2e:b4:80:f4:2c:
02:d3:5e:e8:dd:8d:4f:16:26:f1:0b:5a:87:13:08:10:78:62:
87:40:52:f9:d2:1f:f6:d9:b1:d3:ba:4b:41:79:6b:ea:bd:69:
e1:cb:b8:39:07:5f:5f:62:1b:87:cd:ff:2d:ed:db:03:81:0e:
69:af:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:24 2025 by rpki-client