Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: PYEM5DC8dWUk3q8aYOiofMi9a/VMxCC+ljp1eRizQdI=
Subject key identifier: D5:92:56:09:A4:B4:26:E1:9F:B7:F9:2F:19:3B:B8:C2:B8:A5:BF:D7
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 019889FBC14986C482C7D1648BD811B84C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0DDA
Signing time: Fri 08 Aug 2025 14:00:34 +0000
Manifest this update: Fri 08 Aug 2025 14:00:34 +0000
Manifest next update: Sat 09 Aug 2025 14:00:34 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: T405GE1hZXcpCnJdBdndlH8V9KYqewxWWEKHr2Eexxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:c1:49:86:c4:82:c7:d1:64:8b:d8:11:b8:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Aug 8 14:00:34 2025 GMT
Not After : Aug 9 14:00:34 2025 GMT
Subject: CN=d5925609a4b426e19fb7f92f193bb8c2b8a5bfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:fe:02:b8:82:d0:a6:06:4b:9b:23:99:34:
aa:ba:42:c2:cc:f6:b2:b9:8d:13:8d:a9:53:1d:12:
98:6f:80:95:ff:df:b9:55:ca:1f:d0:d3:82:0f:96:
01:92:c6:0c:5f:ee:d3:ad:08:48:56:9d:dd:f9:2a:
25:d7:19:dc:4b:d3:56:04:2c:63:e6:20:ae:c1:6d:
d5:ac:b4:6e:36:77:9f:c4:53:2e:10:4f:9c:e0:a5:
b7:61:75:ed:ee:a3:6b:df:68:e6:2d:2f:9a:e3:d8:
f1:8c:79:cd:21:43:73:1c:d8:ba:b2:9d:4c:94:87:
bd:3d:32:73:f5:8e:d8:e0:a7:3f:49:2b:1c:4f:89:
a9:90:ba:48:25:b2:7e:25:e5:ad:39:28:4e:02:d6:
c5:f3:25:2d:41:e2:d5:f3:e0:9e:22:89:c3:dc:7c:
fc:fb:20:e2:4b:5a:b0:9d:ce:03:8b:6e:e7:ba:f5:
25:cc:9f:99:01:a0:ed:71:0c:9b:51:a9:7d:d5:44:
a4:8c:4b:e0:4c:9a:20:32:83:91:0f:42:93:83:60:
e2:71:94:27:bf:88:33:cc:e1:44:ee:f3:28:4d:16:
a3:61:57:07:f3:09:08:b3:83:d8:50:a2:45:a5:7a:
58:f8:5e:c2:31:ca:c9:86:55:9b:88:51:54:a6:4a:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:56:09:A4:B4:26:E1:9F:B7:F9:2F:19:3B:B8:C2:B8:A5:BF:D7
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:71:27:94:32:49:72:97:7c:89:2c:40:78:9b:13:1e:0d:f5:
fa:ef:84:da:dd:a2:7d:5b:36:f0:5f:22:30:46:95:a8:ee:59:
dc:cb:33:52:4e:67:3c:d5:ae:c4:d6:4c:d8:5e:09:37:be:69:
0d:a6:0d:9c:95:dd:e3:d9:34:cc:fb:e8:70:0b:e9:20:15:a4:
19:fc:7e:64:5f:34:ca:e2:0b:a5:4e:81:0d:f7:25:59:72:4c:
a9:a7:24:ee:7f:42:21:15:0f:69:60:73:5e:0e:38:17:9e:5e:
06:31:39:ad:7d:78:dd:98:15:49:e5:57:d2:14:dd:af:df:6f:
b0:e3:68:51:c5:e9:24:5f:90:c3:f6:8a:36:51:92:fd:5a:c2:
2f:ad:96:1c:66:ed:6d:58:ce:25:53:02:95:47:1c:05:8f:d1:
30:53:f6:f5:0d:63:f0:da:23:1b:2b:94:2a:3b:2f:a1:fb:56:
ac:f4:78:87:4b:3e:c3:90:4d:be:c6:1c:80:20:e8:2c:83:dd:
de:50:0f:5f:a8:85:0f:ea:62:9f:10:e4:37:ba:75:f8:b2:f1:
72:15:de:8a:4e:56:30:74:e3:42:0a:f5:8a:3c:4d:0e:23:03:
f1:0c:ec:35:f5:b5:e7:f2:60:81:e0:7c:6c:01:1f:11:20:01:
85:f2:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:39:22 2025 by rpki-client