Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: NuuCtHM5xF7AisFcJDztHhG2CPp6x6d5F69MbyzJNO4=
Subject key identifier: FF:5B:B6:E5:E5:32:5A:69:10:DF:10:B7:B8:11:C2:E2:24:4B:C9:1F
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 01987306EC5A897CD86357D53EE10F82349A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 05F7
Signing time: Mon 04 Aug 2025 03:01:30 +0000
Manifest this update: Mon 04 Aug 2025 03:01:30 +0000
Manifest next update: Tue 05 Aug 2025 03:01:30 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: r1fe+vdE1g9ZFPTe4qScNzRShcYXfYUyQqTC38EHadw=)
2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:ec:5a:89:7c:d8:63:57:d5:3e:e1:0f:82:34:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Aug 4 03:01:30 2025 GMT
Not After : Aug 5 03:01:30 2025 GMT
Subject: CN=ff5bb6e5e5325a6910df10b7b811c2e2244bc91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:95:96:6c:0f:01:f5:7f:bb:9a:81:d9:c2:
c1:ae:e8:c4:ba:c9:9f:57:1f:5c:c5:e8:ab:a2:25:
c4:7b:5c:42:31:68:94:19:93:c5:ad:7e:36:72:1d:
3c:fc:1c:1b:2b:15:3e:b7:9a:07:e8:f0:e1:d2:78:
4e:b2:34:86:ef:d1:cb:36:f1:64:03:07:6d:35:c6:
e1:25:15:82:38:d0:6e:f8:ba:f6:88:42:5d:b7:28:
54:55:cc:b5:cc:bf:0f:d7:61:48:0e:50:b3:01:c1:
8c:33:09:b4:ac:cd:e3:c9:27:69:7d:6f:98:32:2c:
f4:7e:23:7a:aa:f6:da:7c:1b:19:5f:1b:0f:ec:4d:
6b:cd:4c:19:1d:33:7e:d3:a2:cf:d6:ea:41:cc:0a:
e9:11:09:ed:94:85:30:28:1d:62:65:41:9c:c6:27:
2d:99:98:de:5f:ff:11:d1:93:8b:6b:f2:aa:a5:cb:
f6:b7:48:47:18:cb:2b:c7:7a:ff:d0:60:46:21:8a:
21:f8:d8:0b:39:13:96:e2:65:64:fd:bb:52:3e:13:
30:5a:8a:b1:a0:e2:88:f1:dd:aa:85:0b:88:d5:11:
6a:e0:66:89:c6:19:9a:9c:ab:47:6e:a4:4a:f0:74:
40:c8:5e:e4:ca:b0:ae:71:35:8d:3d:70:f0:63:83:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:B6:E5:E5:32:5A:69:10:DF:10:B7:B8:11:C2:E2:24:4B:C9:1F
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:55:7e:a8:3d:0b:a0:41:7d:53:ba:0e:df:18:68:fb:a0:14:
b5:cf:bd:20:4f:a8:73:a2:a8:c0:1a:73:eb:80:d0:89:75:0e:
7e:d1:00:80:ee:d5:55:e7:30:df:4d:ae:32:0e:ee:ec:ce:59:
89:7b:b8:20:81:a7:43:3d:16:cb:88:b8:a2:a0:ee:2a:26:2f:
34:13:6f:b0:10:9e:7f:a0:69:6d:11:9f:e4:e2:86:cd:45:da:
a9:4d:17:98:ba:7d:b1:44:13:36:0e:81:d2:20:70:b3:ce:4f:
7a:2e:24:6d:3f:81:d8:88:83:dc:fe:42:72:b2:f1:ec:60:9b:
27:dc:f0:bc:9b:c0:3f:7a:b0:b1:37:2c:4f:ca:17:2c:a3:12:
f1:0c:bc:4e:67:1f:8e:e7:f2:66:35:66:fc:1f:14:3e:4d:17:
04:19:da:5f:39:5f:f2:15:d7:a4:14:84:7d:eb:e3:65:1a:4d:
74:4b:69:66:7b:a7:cf:94:c8:70:da:50:f5:b0:2d:c2:ca:7d:
9b:f8:06:94:b8:50:43:1f:0b:60:38:a0:93:cd:86:dd:57:d2:
c8:9e:f2:34:b0:93:03:26:37:25:f9:fc:30:4d:3e:82:12:ab:
60:a4:86:ec:11:89:9c:06:6c:ed:10:ca:d1:b9:ac:b5:d4:45:
9a:77:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:34 2025 by rpki-client