Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: 2WBVJ5JBjEqY7jTHHGY/TSJm32kdBPfFMyIx4XPzs9Q=
Subject key identifier: 9F:7D:9A:92:26:5E:35:AC:4F:38:F5:39:9E:B3:E6:F7:FC:BB:10:A7
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 019896A4CE4411BE2B7CE870187EA28F41E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: 0177
Signing time: Mon 11 Aug 2025 01:00:39 +0000
Manifest this update: Mon 11 Aug 2025 01:00:39 +0000
Manifest next update: Tue 12 Aug 2025 01:00:39 +0000
Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: UwB5+AvDG3qg9IAGZREiIe2alhfC6CleUpIr/0wP5y0=)
2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=)
3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:ce:44:11:be:2b:7c:e8:70:18:7e:a2:8f:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Aug 11 01:00:39 2025 GMT
Not After : Aug 12 01:00:39 2025 GMT
Subject: CN=9f7d9a92265e35ac4f38f5399eb3e6f7fcbb10a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:32:06:ac:b8:f5:7a:03:84:ad:f7:3c:41:
e8:3c:dc:59:5a:9e:fd:7b:a2:2a:4f:a3:e7:80:b2:
1c:5b:84:63:46:30:d3:a7:46:b4:f4:41:ee:6f:b2:
4c:74:21:86:92:7e:c2:c0:67:a0:5c:6b:dd:f0:4e:
ae:58:c5:79:4c:99:a4:e0:56:ff:57:33:5b:8a:79:
bd:40:46:c3:ff:68:b0:a1:73:6b:9b:74:f1:91:5b:
a3:88:97:4f:0d:3c:50:01:a6:3d:68:74:70:66:bd:
23:30:3d:6a:7c:d6:93:dd:30:bc:ae:48:a8:dd:d6:
84:18:f2:92:38:15:8b:b3:be:4c:04:10:5f:83:32:
2b:b2:49:94:d0:ef:37:7a:7e:a5:4a:4e:bc:b4:47:
67:ee:ea:27:97:35:d1:fc:d2:ad:de:d2:12:05:6d:
d2:78:81:e9:bc:ec:4e:57:da:d6:6a:9b:7a:5c:56:
c6:59:13:ca:9f:a0:35:2c:06:b9:93:0a:d8:ca:32:
0d:62:ef:5d:8f:41:64:f4:c1:79:f2:5d:c8:09:53:
63:33:7b:02:b2:a4:46:d5:28:86:71:64:f2:ec:4c:
9f:31:a7:5c:d3:df:f9:90:5b:ff:14:40:e2:5c:89:
20:61:b6:2d:18:5d:a7:82:48:b3:f4:13:b1:9c:ff:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7D:9A:92:26:5E:35:AC:4F:38:F5:39:9E:B3:E6:F7:FC:BB:10:A7
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2c:66:8e:e9:b3:3c:16:79:90:5b:dc:51:b2:0c:a2:d6:1b:
5f:a0:e1:96:3e:be:22:e0:e3:d7:e9:01:0c:57:90:aa:b3:23:
22:eb:6a:c4:cd:ee:28:74:e7:7a:2d:75:05:63:ff:a6:a7:b1:
07:c4:8b:80:1f:9d:92:5c:fb:e4:64:89:7c:e2:7a:75:83:25:
4e:4f:16:17:fc:2a:0c:0f:9b:dd:7e:ed:95:f1:c6:a4:77:58:
19:86:32:4f:6b:90:97:99:27:f2:b7:3d:eb:cb:51:63:dc:af:
8d:a9:ba:af:45:e2:d5:e1:d5:32:9e:01:c4:2d:4c:73:c7:1d:
99:41:21:67:9c:63:13:5a:67:65:01:0c:91:4f:09:f7:8f:f2:
7f:fe:96:7e:43:9d:e7:e6:0e:c7:29:a1:19:5b:b0:cf:60:7c:
dc:9f:81:9c:8c:91:d1:f0:0f:7f:9a:fe:8c:d4:f7:eb:0d:77:
5d:30:9a:c2:e7:ad:e3:09:2a:6d:99:a9:96:64:b5:45:5a:9d:
eb:94:54:77:98:1a:4a:c2:1b:0b:26:e4:67:69:f4:e7:92:77:
63:19:dd:d3:a6:22:e7:bb:ef:01:06:1b:73:08:3e:a8:ca:7a:
56:38:c4:70:3b:c9:e2:5b:64:14:f4:12:52:c9:f4:7c:57:50:
86:7e:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:38 2025 by rpki-client