Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: oEDkYcUYzGK5JrZED4Dje9fwS6hstZLupdAJ96CTLx0=
Subject key identifier: E0:D7:F4:02:E4:56:5D:4B:29:DA:31:71:11:01:2A:F6:94:2A:5C:69
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 019875D08EFA5CAC8F7AC08E15F8EF18E169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 0FD9
Signing time: Mon 04 Aug 2025 16:00:59 +0000
Manifest this update: Mon 04 Aug 2025 16:00:59 +0000
Manifest next update: Tue 05 Aug 2025 16:00:59 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: MoKEIe0h6sM+32snkULQgtLHUM9z6pdlI1Jpu6GOTfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:8e:fa:5c:ac:8f:7a:c0:8e:15:f8:ef:18:e1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Aug 4 16:00:59 2025 GMT
Not After : Aug 5 16:00:59 2025 GMT
Subject: CN=e0d7f402e4565d4b29da317111012af6942a5c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:f8:e0:37:d2:77:3c:72:7b:e0:e2:76:dc:
98:83:04:46:75:bc:11:a5:5d:8a:14:a0:7e:bb:70:
23:fa:67:fa:c0:4b:26:92:ea:c7:a2:b0:fe:a6:08:
53:f8:b3:ac:b8:81:b9:52:c8:36:19:4a:42:fa:c5:
25:4a:f5:8d:4e:37:3b:fb:10:b4:36:6a:c6:1c:f7:
5f:a2:68:0d:eb:6a:93:7b:66:f0:6c:84:05:1c:60:
53:79:f8:c0:24:12:37:f7:55:85:8c:9d:2d:61:cd:
ce:d5:82:33:30:5b:a0:ba:82:da:54:cd:8e:ce:9e:
62:ba:83:63:f5:ea:e8:5d:48:bf:88:78:05:06:ca:
ec:c4:0f:d2:06:2c:fd:d9:a0:22:30:86:90:3a:1c:
0e:4e:de:4e:34:35:3a:ca:46:19:c2:55:b6:45:f6:
16:61:28:c6:79:51:d5:aa:98:52:76:88:73:10:af:
ed:7e:21:1f:98:fc:9b:dc:f2:2d:85:d4:ad:39:ff:
a9:b3:2b:6f:2d:64:6c:6c:7d:4c:c0:63:f5:4d:3b:
ee:52:9f:2b:a6:81:ce:02:e8:fe:d5:99:37:8f:04:
7f:69:19:88:d0:9d:f8:9f:a1:80:95:db:a6:85:c9:
6f:8d:a1:32:6f:8b:08:b6:36:61:7c:13:71:12:d4:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D7:F4:02:E4:56:5D:4B:29:DA:31:71:11:01:2A:F6:94:2A:5C:69
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:53:46:92:cf:da:e7:b0:8b:ba:6c:f9:08:aa:19:b8:69:
b1:5e:50:82:84:e5:46:be:5a:ee:02:55:23:6f:4b:5a:16:04:
77:43:0f:43:b9:f2:b1:f6:be:7e:47:44:57:f9:ab:69:de:16:
a1:50:8b:70:a8:20:44:99:c2:25:81:ef:43:1d:0c:06:4c:20:
49:a2:ab:62:e0:b7:b4:73:ec:aa:3b:f5:3b:ab:ce:4d:98:be:
6f:2d:4c:9d:77:d4:1a:59:3c:ff:01:3f:65:bc:47:c5:ff:53:
0f:43:44:aa:fc:ef:7a:14:c0:4a:04:bc:cd:59:40:4e:c3:15:
bf:84:29:d7:18:3e:fe:e4:5e:1f:f3:51:8c:1e:53:e3:27:8a:
ec:20:8a:dc:bb:fb:ab:f2:eb:4a:a9:04:5a:0e:61:77:62:5c:
4a:26:cb:31:d6:3f:51:50:76:e2:8e:ba:dc:e2:1e:7e:7b:2d:
86:a0:a1:a4:ae:33:fd:56:6b:9b:8b:71:0b:10:41:6f:2b:6e:
ff:70:31:9d:fa:e9:8e:46:a6:65:d3:bd:8b:fe:0a:ec:72:3a:
30:64:f2:c9:70:12:3d:f4:f7:f8:1d:33:bb:eb:63:d3:3e:5d:
f3:86:5d:bb:76:1f:04:29:16:c8:99:11:2e:7e:30:35:09:57:
a8:30:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:30 2025 by rpki-client