Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: Zt1Ha7xw7EjY7cTRSiuD6nvIFXeUOmrcmcz5yREyOv4=
Subject key identifier: 18:8D:78:B0:BD:62:C1:16:AA:E2:0B:D4:E8:62:38:C6:39:72:BF:9F
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 01988BEA78ABA86923405490E85D1416CF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 135D
Signing time: Fri 08 Aug 2025 23:00:55 +0000
Manifest this update: Fri 08 Aug 2025 23:00:55 +0000
Manifest next update: Sat 09 Aug 2025 23:00:55 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: pikeNrUMjA1t7CJ1NZJgFYFm4+aTOOK9PgNUjZdPLOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:78:ab:a8:69:23:40:54:90:e8:5d:14:16:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Aug 8 23:00:55 2025 GMT
Not After : Aug 9 23:00:55 2025 GMT
Subject: CN=188d78b0bd62c116aae20bd4e86238c63972bf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:ae:3c:dd:c2:4a:f9:09:d6:9b:16:fb:7f:
b3:4b:e4:4f:c4:6c:21:19:d7:2c:b0:95:42:e2:4d:
e0:db:f6:6d:67:db:8b:26:73:12:b1:fb:c4:a9:c5:
e0:12:69:37:10:cb:90:14:16:80:41:0b:93:82:8e:
2d:d9:08:d1:cd:e3:5e:ea:9f:f7:cf:b7:9e:b7:51:
96:8b:cf:97:be:bb:53:b5:88:2b:b9:98:99:16:78:
3c:a6:1d:1d:3c:67:88:c4:dd:21:2b:5e:06:3f:22:
a7:0a:87:14:cf:d6:08:95:4e:d2:7e:d6:58:3b:63:
33:f5:8a:dc:e5:c1:ce:4d:63:23:da:58:b2:0a:2d:
d2:e5:a5:e5:26:84:fa:c2:63:37:b9:78:2e:2a:7c:
96:d3:13:c0:42:fd:4e:d4:65:8f:57:40:25:e9:49:
25:cd:90:84:9a:30:d6:c5:a2:71:46:43:73:1d:e6:
78:f4:23:65:51:b5:88:30:2a:19:49:ed:2a:87:7f:
45:60:8a:32:05:53:db:8e:a2:b0:f9:c5:e2:06:ed:
90:7e:a4:cc:ee:9f:12:44:40:d4:6b:52:c3:c6:13:
73:c1:09:da:c2:5b:1a:31:1d:a1:44:97:7e:99:a3:
12:79:39:8d:da:16:18:98:fa:f5:c9:e1:d3:03:01:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8D:78:B0:BD:62:C1:16:AA:E2:0B:D4:E8:62:38:C6:39:72:BF:9F
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c9:50:18:ab:13:83:d7:c2:6a:66:4e:89:fe:42:06:2f:56:
73:09:6f:60:01:42:88:82:bb:58:ef:fb:d8:47:3a:44:16:d8:
9c:10:31:e0:f1:2c:c0:af:a8:dd:6c:20:1f:32:d2:9d:c1:53:
9d:a0:91:b3:7d:42:11:d6:9b:6c:9e:ba:a4:8e:f8:bd:97:f7:
0e:23:d1:c8:fe:d7:75:3f:10:f3:31:61:1d:c7:bb:21:5d:9a:
c0:25:ea:2d:41:29:84:bc:a6:b5:f8:e2:f2:8a:8a:6b:65:2a:
49:01:34:aa:e5:b7:42:2e:10:43:d6:27:01:9e:cc:5a:53:39:
68:74:fb:fd:0a:89:42:38:2c:7d:ff:0a:13:39:5e:91:e4:da:
86:69:6a:20:15:37:fd:31:48:57:11:14:d8:99:7d:b8:f5:99:
2a:00:38:a8:06:f0:1c:8d:7d:10:5b:33:df:1c:ed:fd:0f:0a:
3c:cf:04:24:1a:8d:d5:15:62:e2:f2:ab:44:30:59:5d:5d:28:
c7:65:92:20:00:9e:72:cf:fb:6b:14:bd:66:f3:10:c7:5d:44:
38:57:37:b5:7d:45:24:fc:6d:5a:65:dd:2d:4d:2e:d1:39:9f:
44:8f:ae:34:86:62:ce:b6:67:92:81:ee:34:9d:e2:c0:aa:2c:
d5:18:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:26 2025 by rpki-client