Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: +a+MlWeYMMgPcVDLpXB2p94Ixgg2my0WhLYpOz5trtg=
Subject key identifier: 3C:B7:FF:E7:3A:AD:0D:87:10:CC:AD:77:E1:3D:16:46:EB:88:FC:34
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019895FFFAF7EB278C9093E2F3A7275A5242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 07F0
Signing time: Sun 10 Aug 2025 22:00:37 +0000
Manifest this update: Sun 10 Aug 2025 22:00:37 +0000
Manifest next update: Mon 11 Aug 2025 22:00:37 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: d/9EFA2vi54WkY0uYpMRqHm3L88quhnA23Y7j5sfbM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:fa:f7:eb:27:8c:90:93:e2:f3:a7:27:5a:52:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Aug 10 22:00:37 2025 GMT
Not After : Aug 11 22:00:37 2025 GMT
Subject: CN=3cb7ffe73aad0d8710ccad77e13d1646eb88fc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:0c:71:d1:3d:8b:fd:87:5c:78:d1:5a:6f:
e6:cc:d5:c2:e1:50:1f:b7:50:1f:c6:0f:81:94:6f:
19:25:dd:de:69:91:b4:91:12:97:2d:ef:44:60:a7:
38:c8:78:07:5e:3d:62:a4:65:2e:e4:ac:ef:ad:50:
ec:0a:54:62:51:2b:dd:02:21:3f:1f:b1:e4:a4:2e:
7e:83:5d:31:3f:1d:42:fd:b9:3e:0b:4a:13:56:88:
ed:8c:8a:84:b4:e8:40:aa:a6:d0:2e:3d:77:82:98:
ad:d1:bc:03:51:f6:e9:33:70:5f:9e:f5:a3:67:50:
bb:b2:6c:75:18:b5:e5:1f:1b:d6:ce:62:64:d3:a8:
b3:2b:f8:6c:52:d1:03:d3:60:02:43:87:03:1a:2a:
69:94:c5:44:bb:a9:84:49:81:6b:37:ca:c5:ec:82:
ee:11:9f:92:f5:d9:2b:23:08:d3:09:ed:82:a7:5f:
a3:ab:9f:4e:f7:8b:37:1f:28:10:03:e4:62:1b:6b:
05:5e:f0:ee:16:e5:50:52:e2:86:44:50:aa:a5:6e:
6f:11:b9:6f:7c:52:e6:ab:c6:85:c9:10:7d:6c:a1:
3a:28:3d:c7:ec:96:a3:be:b7:fd:f0:9c:f2:ad:8c:
d3:45:89:9c:3d:bb:84:09:a9:a1:c5:7f:e2:00:aa:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:FF:E7:3A:AD:0D:87:10:CC:AD:77:E1:3D:16:46:EB:88:FC:34
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:43:6d:b8:88:e7:8f:92:b2:7e:96:75:dd:c9:a7:52:39:fd:
32:81:1b:69:fb:61:1c:7a:3d:5b:9e:cb:8d:eb:14:09:5f:a9:
09:41:ad:36:27:fb:69:96:59:ac:c5:35:26:95:ad:57:39:cb:
44:c2:1e:f0:a2:5f:0f:e8:60:c8:d3:8e:0a:b1:4a:94:d4:0b:
81:d6:68:4e:a4:fe:72:b8:3d:49:e9:a5:5c:f6:c4:f3:a1:16:
68:77:97:8d:7a:d9:22:37:7d:cc:a1:e7:d1:08:f9:c6:16:df:
de:9d:38:e0:9f:f4:dc:3c:d0:a4:e9:b9:74:05:8f:af:5b:0c:
1a:c6:c2:ac:79:33:f8:1a:45:70:a7:4f:36:73:be:de:c6:58:
df:72:22:8c:6b:9d:03:86:22:8a:56:a9:8b:0b:c2:b7:fe:c4:
a4:10:dc:f3:d2:d7:7f:4d:4a:2c:83:37:6d:92:70:0f:b0:a7:
61:bd:fe:ad:eb:84:0d:f8:33:d9:c8:93:41:52:e6:e1:73:7f:
98:2c:42:74:03:05:bd:23:76:db:08:2a:56:17:70:04:4c:36:
6d:1e:45:b3:65:cd:46:e0:79:d0:d0:2e:e9:2e:8d:c2:8b:2f:
1b:b6:d0:86:69:4a:82:78:3a:99:4c:51:5c:9c:f8:36:44:a5:
4f:72:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:54 2025 by rpki-client