Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: JpEKF7OtKjutGSZXdvMVjRh/rmGmU8RaLR+c2wyt6/0=
Subject key identifier: C6:1F:64:61:FD:B4:8C:B6:18:FD:83:2F:1D:0C:2B:8D:67:4B:8B:64
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 01984AE580955753E4F0DC2FAD88F8EFA6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 15BF
Signing time: Sun 27 Jul 2025 08:00:11 +0000
Manifest this update: Sun 27 Jul 2025 08:00:11 +0000
Manifest next update: Mon 28 Jul 2025 08:00:11 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: ixFjkszbtqJAFYVNztXylwdwWWqWWy0rZ7UDD48G1fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:80:95:57:53:e4:f0:dc:2f:ad:88:f8:ef:a6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Jul 27 08:00:11 2025 GMT
Not After : Jul 28 08:00:11 2025 GMT
Subject: CN=c61f6461fdb48cb618fd832f1d0c2b8d674b8b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:db:0f:e3:9a:ab:56:0e:62:bd:61:92:75:
72:ba:3d:31:cb:e2:89:ae:9c:3d:32:1a:2a:b1:a8:
85:c6:91:f7:0b:da:55:84:06:66:d3:a3:ac:54:58:
7f:5e:0b:eb:b6:e4:32:0f:c5:75:c2:52:23:6f:6f:
77:fc:30:21:5d:7d:cb:ab:f7:83:cc:33:ec:cc:0c:
1f:fa:fd:84:8d:61:c5:ea:a1:d4:8c:23:9f:3c:65:
64:05:55:d2:4c:fc:d8:96:70:d9:13:95:f6:0e:9f:
32:f7:2a:36:c4:97:73:e7:47:30:29:83:5f:61:f1:
3f:16:72:ae:00:a1:4d:51:05:d6:09:a5:2f:29:26:
a3:00:78:fb:9c:d1:30:b4:aa:85:33:73:fe:0d:66:
70:26:d8:9a:df:dd:29:ff:b1:f2:ff:96:56:69:56:
b6:c9:3b:3b:38:29:ae:84:ec:c1:46:97:b5:50:20:
e6:90:a9:6d:8a:18:cd:e4:6c:5c:20:2f:a2:2f:81:
cb:65:ba:08:6b:45:97:0c:c0:b4:1a:de:a4:74:ca:
59:af:f7:73:68:f8:0e:54:d2:51:98:8c:fe:3e:d3:
02:1f:fe:5b:a3:ef:e4:f9:f8:44:11:50:75:01:4b:
45:4c:6c:f6:75:d3:8c:34:ed:7d:a9:99:84:2c:9e:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:64:61:FD:B4:8C:B6:18:FD:83:2F:1D:0C:2B:8D:67:4B:8B:64
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:37:5d:b0:d1:b0:ee:26:15:d0:50:dc:3a:4c:5b:84:cd:ec:
ba:85:9e:55:b7:bb:c7:b8:27:7b:84:6a:47:a2:37:96:fd:0d:
a0:2e:4b:63:8c:a6:70:0c:63:7f:f6:77:38:ee:f8:ff:25:4c:
75:bf:71:df:06:4f:38:e4:41:b4:83:27:58:0e:22:2f:41:13:
1d:af:91:7a:17:91:09:84:ed:6b:21:90:bf:b6:a1:1e:d1:c1:
a4:6f:15:70:0b:1e:bf:90:69:9e:37:7e:dc:4b:3d:af:cf:1f:
83:e4:e3:65:e1:da:50:bd:3d:ad:ee:e5:80:f4:a7:87:68:4b:
25:92:15:77:70:f5:56:2f:e2:a3:9c:6f:1a:41:0e:82:6d:6f:
a6:0d:2e:c0:c7:e9:61:c5:68:e0:1f:ba:f4:71:e9:10:ba:66:
b6:61:e1:a9:ea:78:6a:07:7c:bc:d6:c7:c3:39:5e:32:65:f5:
28:08:6a:89:9e:ed:d1:79:da:29:64:8a:16:a4:b2:15:ba:d3:
f2:e8:54:b8:bb:ff:f7:cd:96:74:a4:dc:93:41:18:4c:fa:aa:
54:83:d7:9c:02:7f:bf:06:f7:89:64:bd:bf:6c:db:77:76:c3:
cb:98:63:65:d5:3f:cb:83:1c:30:42:c8:f4:29:cf:32:f3:99:
36:02:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:41:46 2025 by rpki-client