Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: +B9Iy0fiOD0Zl8h56+a8dYhjo+Ytrdb1lIRXR+35ATQ=
Subject key identifier: 38:73:C8:8F:87:69:75:CE:50:7B:1C:05:E0:DB:BA:AD:3B:FF:D8:17
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 01983495424E0836C79C596DD20519963631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 15FC
Signing time: Wed 23 Jul 2025 00:00:53 +0000
Manifest this update: Wed 23 Jul 2025 00:00:53 +0000
Manifest next update: Thu 24 Jul 2025 00:00:53 +0000
Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: poF3jLbNB0bbm68tTa3FQ1aOa4sjgV07mSUkcVSDWoI=)
2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=)
3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=)
4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=)
5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:42:4e:08:36:c7:9c:59:6d:d2:05:19:96:36:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jul 23 00:00:53 2025 GMT
Not After : Jul 24 00:00:53 2025 GMT
Subject: CN=3873c88f876975ce507b1c05e0dbbaad3bffd817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:93:f7:76:0f:07:7d:80:ab:68:48:2b:76:
be:06:e2:dc:b4:0e:6c:79:9a:1c:0b:7f:49:71:92:
c2:1a:ce:94:0a:de:84:1b:e8:55:e0:83:da:bb:80:
56:13:69:f2:d1:7c:a0:be:73:5d:71:5c:8b:f0:48:
02:3e:75:24:3a:b2:17:16:ba:89:06:0a:de:c1:4e:
70:95:08:ac:72:00:ad:c9:f3:2d:26:a5:98:6f:fd:
4a:84:f7:15:10:62:70:ba:16:e9:ee:1d:2e:d9:28:
34:1f:0f:83:5f:51:9d:32:b8:94:87:02:bf:1b:5e:
9f:d9:2d:c9:46:f2:52:d6:00:b7:c3:1a:0f:53:fa:
1a:8c:59:7e:8f:3f:0c:7e:75:08:e2:28:35:e2:5a:
c8:db:90:76:fa:84:9a:a1:6a:3d:af:28:1d:8c:48:
46:91:2a:7e:11:b6:c0:54:56:60:63:c1:f2:cd:d1:
d7:4d:91:77:8b:1c:71:cc:18:a1:67:f9:76:e4:c5:
72:d0:2f:40:e6:8d:0c:6b:d7:d7:68:9f:9e:26:73:
e8:20:6f:21:f3:be:e7:f9:93:3e:1c:d5:7d:89:64:
86:91:ea:5b:d3:ad:91:7c:5a:d5:be:17:02:bf:6c:
8f:62:1b:83:da:83:6e:dd:1d:3c:33:18:cf:3b:1e:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:73:C8:8F:87:69:75:CE:50:7B:1C:05:E0:DB:BA:AD:3B:FF:D8:17
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:22:14:13:39:59:b8:f2:6f:5e:3f:4c:49:b1:e3:52:a6:80:
e8:8b:a4:1f:a4:5e:8c:97:b7:33:b6:bd:00:39:e2:f1:72:78:
eb:21:88:84:e9:e3:51:64:4c:dd:38:4f:30:df:15:3d:fa:3d:
dc:ba:0c:9d:83:f2:b2:75:87:fb:3a:42:eb:e2:7c:92:1d:0b:
17:32:43:14:10:52:93:ac:b5:29:d2:b0:30:57:d9:76:8e:e4:
b6:76:62:3c:24:d1:a9:be:c8:05:b0:3d:70:a1:3c:14:ac:8b:
23:ad:3f:f2:70:e5:02:d2:a3:6f:b9:7e:b5:30:89:c6:5e:fd:
3f:83:c5:1f:21:5d:7e:8d:97:69:63:d6:37:7e:41:72:ed:ae:
8d:ff:1d:8f:e7:bd:b5:c4:df:0f:7b:5c:63:05:13:74:ba:20:
b6:05:eb:65:62:8f:4f:6a:43:40:57:c4:f4:50:e9:88:4c:10:
31:71:e9:e6:fb:8d:03:90:ac:93:d9:79:60:e7:79:5b:f0:a6:
2c:7b:74:b8:19:7a:ab:c2:17:b7:eb:62:2c:de:68:d0:4b:ee:
c3:71:e3:30:84:ad:75:f1:2c:ae:9c:eb:4e:e5:96:20:c6:4c:
63:13:66:43:fe:ef:f8:4b:79:e1:5e:d5:d6:d1:dd:e9:f7:18:
f3:53:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:15:55 2025 by rpki-client