Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: xZ9xta+pBwJzXEpWcVsWHb1u0YNlS2M4oXK0ONMvUy4=
Subject key identifier: 4D:B2:1E:28:A5:BD:EA:47:39:FB:DE:54:F5:B1:70:91:A8:A5:69:7F
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 0198737410E356D24C0249AAC7724DFC3C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0DC7
Signing time: Mon 04 Aug 2025 05:00:42 +0000
Manifest this update: Mon 04 Aug 2025 05:00:42 +0000
Manifest next update: Tue 05 Aug 2025 05:00:42 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: xJ9PyChNLHN9hAYb0ABY5ybapaHu2X576mk4/N5BrOw=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:10:e3:56:d2:4c:02:49:aa:c7:72:4d:fc:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Aug 4 05:00:42 2025 GMT
Not After : Aug 5 05:00:42 2025 GMT
Subject: CN=4db21e28a5bdea4739fbde54f5b17091a8a5697f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:b1:f7:2f:43:cc:95:2e:2f:31:69:55:70:
4d:27:b0:eb:ab:e3:c9:a8:cc:46:71:74:a2:e7:17:
12:96:55:21:a6:55:83:c9:56:82:da:71:9b:4e:78:
73:ad:b4:61:99:a8:21:c1:58:9c:72:c5:2e:7e:c2:
14:6c:34:bb:a4:a4:60:7a:7b:4a:6d:95:8b:c6:c0:
01:fb:e2:b3:51:83:66:f5:bf:ee:cf:51:20:1c:fe:
3c:65:c5:a8:73:47:bf:35:cb:c1:fe:61:12:ce:9f:
24:22:d0:65:96:77:51:50:5c:c2:14:e3:43:19:5f:
61:5e:90:44:02:0d:91:43:3b:a6:da:3c:8c:8e:79:
ee:a4:ad:47:dc:0b:f6:b2:4b:74:7d:98:dc:76:53:
e7:d5:40:ad:fd:20:84:62:42:c1:b1:71:a9:7f:3c:
21:e7:30:be:76:d3:c7:7f:5b:ed:52:d5:ef:35:27:
f1:ad:2c:4f:15:31:ee:0d:c1:08:ae:11:c0:2b:33:
b3:1a:28:cb:0b:56:92:ef:cc:ff:ad:07:71:e3:e3:
95:bf:c1:78:54:b5:5d:3f:f3:af:d4:ac:ae:77:68:
a6:4a:98:4a:b5:d9:17:99:9a:1b:b7:c4:cd:f1:cb:
1f:da:9e:03:6a:df:bd:4e:69:f1:89:3d:2b:9c:31:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B2:1E:28:A5:BD:EA:47:39:FB:DE:54:F5:B1:70:91:A8:A5:69:7F
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:40:6d:65:a3:99:99:7f:85:ef:65:19:23:62:70:fd:a1:93:
0c:6d:49:5b:76:dd:ac:ca:1a:3a:27:3e:48:4d:e9:f8:0b:b1:
ae:06:a3:32:4e:c7:cf:fc:9d:79:38:98:ab:fc:89:f9:e9:92:
6d:ae:b5:0a:31:3e:1d:65:17:60:84:0e:ea:b8:bb:3d:53:d0:
41:de:e1:35:06:c4:51:a6:32:65:ba:5b:d2:de:67:0c:d9:85:
a2:49:6a:b1:a3:1e:3c:a3:b4:7f:38:e4:7a:28:58:68:34:6c:
fb:1d:3c:e5:ff:e9:51:fe:a3:de:7a:98:0b:e8:f0:41:ab:03:
67:90:d7:35:ef:d8:d2:2d:ff:5d:9e:f2:09:3d:96:5f:c8:31:
7b:6d:a7:9b:5f:bc:95:09:26:b2:b9:f4:81:11:14:28:b4:d5:
01:27:92:cf:61:1d:47:ce:9d:8a:0a:c7:50:4e:5d:fe:ef:66:
91:8e:64:3a:c1:d7:6d:15:de:37:6e:42:e7:cf:6a:7f:a4:0c:
1d:a2:e9:30:2b:58:91:8d:77:27:76:a8:09:8f:c8:0f:41:bf:
87:54:7d:7a:54:a1:e4:04:d3:3d:0f:3e:1d:ef:85:9b:d8:72:
17:d6:43:ed:27:dd:49:93:58:c1:fb:8c:ab:5a:57:bc:ed:71:
78:56:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:06 2025 by rpki-client