Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: EKXeS8+lr18dwJlnz2D27Pa9MpFR4kQNSGCxKKa06XE=
Subject key identifier: 99:3E:F0:81:F4:2D:70:13:82:E8:38:B6:0C:F3:0C:01:1F:62:16:ED
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 019853B1C1061BA25BA5F0A2929416C57275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 030F
Signing time: Tue 29 Jul 2025 01:00:14 +0000
Manifest this update: Tue 29 Jul 2025 01:00:14 +0000
Manifest next update: Wed 30 Jul 2025 01:00:14 +0000
Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: X0A1ckUFVSud87U302QcUltEi16bezEGH676SixDz5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:c1:06:1b:a2:5b:a5:f0:a2:92:94:16:c5:72:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Jul 29 01:00:14 2025 GMT
Not After : Jul 30 01:00:14 2025 GMT
Subject: CN=993ef081f42d701382e838b60cf30c011f6216ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:1a:1c:38:49:75:60:34:dd:87:f6:77:7c:
1b:aa:0e:e8:3d:02:60:92:88:90:6e:e5:6f:15:8e:
8c:06:a8:98:b6:76:d6:7a:d3:84:c8:d7:6b:86:d7:
23:5a:71:34:0d:06:c2:81:f3:40:4f:1d:09:9f:a9:
bb:bc:11:34:fc:fd:f6:7f:61:03:dc:a7:aa:b9:81:
51:f1:5f:bf:20:29:5d:2a:60:f8:3a:41:09:6b:b4:
07:ab:33:4a:f0:d4:d7:27:9b:05:3a:0f:47:f3:e6:
d7:05:ad:93:fe:08:cf:d9:a2:35:20:7c:81:0a:61:
b3:0b:01:cb:e1:18:81:e4:b1:f0:5d:59:8d:21:9e:
ff:71:fd:5b:6d:fd:0c:cc:b7:af:0c:b6:74:2d:47:
d7:49:a9:57:38:7e:a9:f9:4e:7b:73:b9:5c:1e:f2:
b0:ec:c0:f4:52:b0:bc:14:46:58:9b:5b:b4:c5:99:
be:12:2c:fe:d7:5f:ce:ce:a6:a9:93:30:db:10:35:
42:64:9f:1b:2a:8e:8d:33:e9:16:c7:3b:f2:f9:70:
60:ab:9c:8d:90:b7:af:0b:be:7f:7a:a7:72:98:20:
bc:96:8a:f0:2e:4a:15:f4:24:30:74:2f:2a:dd:8f:
e9:22:bb:37:96:89:69:2c:56:68:ab:58:4c:54:35:
dc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:F0:81:F4:2D:70:13:82:E8:38:B6:0C:F3:0C:01:1F:62:16:ED
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1e:bd:06:be:f4:1d:64:b5:94:5b:98:d7:35:fc:05:52:9b:
1a:73:15:28:76:24:6c:ce:e5:85:4f:12:2e:8e:40:d1:44:ab:
9f:5d:b1:99:10:fe:02:94:48:a7:97:76:d8:27:dc:7e:37:3b:
5b:3e:56:8a:30:06:d2:90:aa:47:7a:ad:01:d3:db:64:86:4c:
37:59:23:7d:fd:1a:f0:06:61:e1:8e:1b:4e:01:7a:71:f2:88:
83:92:c8:83:61:a8:1c:71:92:09:e1:59:dd:58:26:f8:f9:3f:
fc:10:09:4d:2f:76:21:da:ef:83:52:a6:de:f9:7f:1a:9b:87:
46:f9:48:c8:8b:28:c4:45:2c:98:f2:c3:d2:d6:63:10:d2:50:
e5:f6:6f:fc:59:ca:98:35:ba:ec:d7:31:e6:37:b8:a5:43:bf:
bd:b9:a8:54:6e:e8:f9:5c:63:15:58:29:cd:4c:36:4e:70:5f:
8c:93:d4:c2:46:b8:7f:bd:ff:7e:30:08:95:ae:d4:f0:55:72:
c4:5d:62:c5:9d:87:ce:a4:29:af:75:9e:e1:ab:63:ff:1f:eb:
bc:a3:04:e1:ea:75:23:00:34:6a:cc:76:e5:85:b1:85:c6:b3:
1a:1f:51:db:d0:70:50:c2:4b:46:bf:5f:41:78:2f:d2:bd:a5:
08:1f:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:15:07 2025 by rpki-client