Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: GDfMpnM2qSDx3l+BmFzusNhRiR77Sku0kQf2LstKdpg=
Subject key identifier: 14:E7:1A:8A:5B:36:AF:DD:6C:21:2C:A3:7F:4D:F1:7C:BF:3B:97:6A
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019872CF75B25564BAB23696FBBC533F5893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1634
Signing time: Mon 04 Aug 2025 02:00:55 +0000
Manifest this update: Mon 04 Aug 2025 02:00:55 +0000
Manifest next update: Tue 05 Aug 2025 02:00:55 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: rL7zxm0erlwn2bSADWkHdHKHRHipwUslzTa7NI1M5zQ=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:75:b2:55:64:ba:b2:36:96:fb:bc:53:3f:58:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Aug 4 02:00:55 2025 GMT
Not After : Aug 5 02:00:55 2025 GMT
Subject: CN=14e71a8a5b36afdd6c212ca37f4df17cbf3b976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:db:fb:c0:52:33:24:74:ab:af:97:6c:0d:
b7:76:0c:8e:ce:7a:0d:5c:50:f9:3d:f0:38:c1:55:
72:9d:4e:6c:bc:da:6f:67:7e:37:bb:c8:8e:72:2b:
6b:c9:ab:12:68:89:50:d8:3c:fa:b9:51:17:9d:e8:
56:0c:c2:20:ae:ef:a9:87:4a:be:b4:1c:1b:e5:c3:
b7:07:fd:a8:0a:62:92:9c:ae:4d:5e:be:d0:bc:fc:
8d:f7:de:33:12:a1:2d:fe:0b:73:42:7c:03:ca:cb:
93:33:94:c6:f9:d2:a5:b9:ab:55:ce:0f:86:93:ee:
65:60:f4:24:16:89:65:ef:48:c5:0e:74:d8:c8:e9:
da:8b:82:ed:4e:46:10:cd:a2:54:af:76:ef:22:cb:
14:27:8c:2f:f0:d2:4c:8d:52:26:54:b2:34:e4:b4:
dd:59:01:7f:3a:91:fe:00:2c:01:31:4c:ca:fe:b7:
a9:f7:57:6f:ca:82:2c:0e:27:2a:c1:82:81:00:5c:
21:97:2d:a5:b5:b7:31:1a:35:ec:10:7e:25:25:94:
60:d4:da:d7:dc:9c:56:a3:9a:63:16:68:e3:a5:c8:
6e:3a:58:d1:ce:be:87:7b:7e:ad:e0:c6:c0:5b:a7:
85:ca:2b:ba:dd:86:10:62:66:b8:1c:96:62:ab:86:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E7:1A:8A:5B:36:AF:DD:6C:21:2C:A3:7F:4D:F1:7C:BF:3B:97:6A
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1f:63:54:81:29:59:b2:12:73:7a:37:05:75:7b:83:6b:81:
b4:17:88:c8:df:8a:56:cf:ac:eb:41:1a:fd:54:98:2e:22:6f:
56:de:e4:03:10:3c:1a:36:a4:d2:c1:ec:15:2a:53:dd:9b:f4:
c2:67:0a:cd:5c:a5:63:bd:0f:d6:68:f4:b4:a3:1e:ac:36:c2:
da:17:b4:c6:6c:aa:0e:d4:c4:75:c9:48:83:40:b8:8f:02:9b:
be:79:5a:2a:d6:6f:61:c3:84:d1:32:b9:5f:73:e2:00:84:d3:
df:03:0c:84:36:c9:bd:47:2d:a6:89:0d:9d:62:45:c0:ad:a1:
6c:eb:5b:22:1b:82:53:a0:de:83:c2:dc:38:f1:70:a7:1c:d2:
3f:b4:00:73:b7:23:24:10:e4:85:f4:6c:d0:d9:06:51:38:74:
50:ad:bc:33:b5:d4:0c:41:d2:19:61:16:36:3b:b9:35:87:60:
d1:75:0f:fe:df:1c:3b:96:dd:a4:13:58:4e:84:a2:99:6c:13:
b1:b5:e9:9b:49:5f:11:e6:21:27:64:a3:ff:bd:3a:7f:90:eb:
58:18:f5:55:56:18:ce:bb:43:c8:2d:30:51:86:a6:9f:86:57:
fe:37:38:f1:07:d8:29:67:99:0e:b6:bd:43:21:17:8a:c4:c1:
ba:68:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:16 2025 by rpki-client