Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: +Zs/zpZtlUc1FGGG/VhHBsZOB/Ik0AlwxNONoll/UV4=
Subject key identifier: A2:CB:5A:90:E4:82:BA:A2:D5:FB:2D:43:02:34:AC:18:70:56:B1:A1
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 01988D6B3C99BF490922826ADCD7561BACBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 15A8
Signing time: Sat 09 Aug 2025 06:01:11 +0000
Manifest this update: Sat 09 Aug 2025 06:01:11 +0000
Manifest next update: Sun 10 Aug 2025 06:01:11 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: 9ksm/ugMm3Kbt3LOkA9qDBfZ0MFfnnNDWmJEQ4gKeMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:3c:99:bf:49:09:22:82:6a:dc:d7:56:1b:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Aug 9 06:01:11 2025 GMT
Not After : Aug 10 06:01:11 2025 GMT
Subject: CN=a2cb5a90e482baa2d5fb2d430234ac187056b1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b2:e9:94:9e:ee:1b:96:bf:89:3b:20:7b:21:
a3:f1:58:70:9b:b4:6d:6e:9d:fe:04:c3:a4:8a:30:
a5:ee:54:f9:7a:08:75:6b:45:8d:a0:d4:5b:d4:9a:
38:f9:61:d1:8e:70:f4:65:af:61:2c:81:4b:16:de:
7e:ae:18:ea:6c:9b:08:a2:ef:e6:bb:74:81:d7:bd:
01:74:22:de:c8:33:ec:86:d1:50:87:95:27:4d:04:
ca:a5:0b:be:9e:60:8a:bc:bc:b4:05:83:a3:86:cd:
35:c2:94:b8:01:b1:b0:72:29:65:98:b1:f4:c0:48:
5f:4b:7a:b9:68:3b:3b:25:1f:7c:c2:37:4f:f6:40:
39:5a:68:37:33:c9:95:44:d3:6c:92:cf:f4:cd:9b:
00:70:ee:84:6f:03:ae:a1:88:34:55:a8:c6:10:15:
15:38:78:3a:db:ef:23:7e:f9:0f:21:97:2a:db:09:
d2:8f:6e:ed:82:ec:64:3f:63:f8:13:13:dc:05:6e:
1b:1f:29:c3:ac:12:63:d1:b9:10:75:57:56:1b:5f:
69:72:ad:4c:5f:42:2d:b1:08:db:fd:af:4d:f5:65:
3f:18:65:15:d0:ca:b4:6a:bf:4a:d8:34:5f:f0:39:
90:62:cd:79:3e:83:13:b5:bc:9b:b0:ee:91:30:25:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:5A:90:E4:82:BA:A2:D5:FB:2D:43:02:34:AC:18:70:56:B1:A1
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:54:cd:94:a7:83:84:0f:34:68:86:bf:c8:11:1a:57:8e:d3:
18:63:2a:30:0e:1a:d9:78:2c:17:78:6b:88:16:46:b2:dc:34:
d1:88:30:06:b1:a2:d6:23:ca:24:b4:71:29:f3:ea:e4:0a:e5:
66:18:f5:0a:3e:2a:b4:4a:3e:9a:13:7e:0b:57:c9:c6:be:69:
1c:a2:c6:72:fd:53:fd:4e:06:39:3c:db:00:a8:1b:14:4a:e2:
ed:7d:42:4e:ed:bb:83:9f:cd:6b:24:c2:57:29:0e:27:4e:62:
21:2f:49:70:24:b8:34:8c:3c:09:81:a4:39:63:64:e5:57:bf:
20:c8:86:fe:d2:88:69:08:96:aa:a6:48:f8:11:3b:47:46:94:
f5:09:04:52:0f:24:03:b6:7f:16:07:d7:15:65:15:77:94:65:
45:9b:b0:79:a9:7e:75:44:2a:4d:e0:ec:44:0c:33:34:5d:c1:
61:26:49:5c:47:5b:bf:4e:8d:41:29:f1:56:1d:1e:48:86:58:
42:a8:1b:63:a6:7a:a3:f8:2b:a4:f1:8b:1f:f4:c9:1c:51:a7:
bd:3b:87:9b:80:ec:c3:d2:26:f1:94:f8:62:9b:b8:34:96:95:
15:25:9b:b9:47:1d:df:22:c9:de:ae:8e:84:8e:73:35:76:bf:
2f:d5:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:43 2025 by rpki-client