Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: GkDSJN9PyGioeD6D8PMYD+Zsfe4uVaBEH8hbSY/nn9g=
Subject key identifier: 72:99:5F:F2:8D:4E:9A:EA:28:D9:44:5D:0D:53:20:5F:F3:BA:09:7F
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 01987CE5137F642F55DE13A8EFF1CD99994B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0D0E
Signing time: Wed 06 Aug 2025 01:00:44 +0000
Manifest this update: Wed 06 Aug 2025 01:00:44 +0000
Manifest next update: Thu 07 Aug 2025 01:00:44 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: v5J2y01g+tqd4VuI0KJ/WqtAK9t2NQLSPRVufbkHnNs=)
2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:13:7f:64:2f:55:de:13:a8:ef:f1:cd:99:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Aug 6 01:00:44 2025 GMT
Not After : Aug 7 01:00:44 2025 GMT
Subject: CN=72995ff28d4e9aea28d9445d0d53205ff3ba097f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:42:1f:b7:86:14:5a:4c:20:fc:6e:45:d6:
13:5b:c9:a7:cd:1a:cb:29:00:73:e0:25:3b:86:69:
65:27:32:a4:f8:a2:3d:ed:cb:5a:80:4c:92:cf:83:
1e:3c:21:d9:68:ad:4d:75:10:2b:3e:94:34:b2:7c:
79:f0:20:b5:78:8c:2b:19:ae:f6:2c:d1:42:a3:93:
86:ed:b4:6c:63:ae:d9:f1:b7:ed:78:60:1f:af:60:
bc:33:95:00:95:a9:ff:17:4d:82:1a:b3:d8:2a:fe:
63:99:71:49:af:d3:42:75:f7:f1:14:63:0f:c0:6e:
8c:76:b2:ff:f2:88:b9:b3:8d:22:98:c4:64:b3:6d:
65:c9:ee:f5:a8:16:00:33:76:75:41:06:e2:5d:24:
9f:f9:19:01:63:44:58:d0:b7:b8:33:f9:65:5e:f7:
92:9c:4b:b6:b2:1b:da:1c:eb:24:8c:9d:63:24:1d:
43:1a:d5:32:73:a7:f8:6c:5f:96:d5:db:a8:34:13:
fe:c1:24:6e:3c:13:90:6e:58:87:c3:7c:0b:81:4c:
1d:37:03:e7:a1:22:06:11:cb:2c:8a:2b:f3:29:2e:
f0:54:74:a1:53:37:c4:56:0c:2b:66:70:f0:a7:2b:
4d:af:78:10:2d:3b:22:6d:f5:63:85:3e:8f:cd:c9:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:5F:F2:8D:4E:9A:EA:28:D9:44:5D:0D:53:20:5F:F3:BA:09:7F
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1a:a9:9c:94:68:38:12:84:16:1b:3d:04:6a:9c:7a:8b:c3:
ab:fa:ff:91:6b:80:18:f6:5f:46:9b:78:0e:d1:0f:01:0b:84:
c1:41:0f:23:58:26:4d:ba:0e:86:e4:b3:02:26:3a:d7:93:66:
61:e1:d9:4b:56:c5:d2:0b:66:14:46:00:d7:e1:55:6c:19:84:
71:d7:8a:18:13:ac:56:16:7c:41:b6:61:12:e4:92:68:5f:8d:
70:4b:51:f7:c1:23:39:e0:c1:dd:68:a8:62:fd:32:5e:38:0e:
73:09:6d:46:59:09:60:27:bd:e0:21:94:46:f9:39:ed:1b:41:
fd:82:2d:48:76:e0:5e:a1:05:1f:ad:c4:ca:9f:a5:eb:73:76:
ec:35:5a:06:ca:ab:fe:48:19:3a:95:6a:f5:73:16:af:0e:19:
f1:26:70:cc:47:ef:a1:a1:fe:27:82:15:3e:9c:87:2f:ee:a5:
8d:2a:4c:51:75:8f:e1:73:41:a7:c7:21:f0:83:8e:0d:ca:fe:
08:91:f7:1d:b0:6e:86:a3:00:ae:0a:b8:2e:46:1c:7a:c0:f0:
87:39:4b:c8:7d:cb:ce:a7:f5:37:e6:28:60:36:42:4b:a4:6e:
eb:28:f2:9c:12:2c:ef:af:0f:73:e0:aa:d3:2f:18:a2:65:f7:
9b:fb:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:26 2025 by rpki-client