Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: 1wqvAMwqWbrKKdvRqADl1rHi8LpPYssew5/F+E/dk68=
Subject key identifier: B6:14:C4:B0:0D:03:A9:B2:B3:93:29:4B:90:7D:BE:07:BC:F2:E9:64
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 01984BC1ADDEC384E51A41ADFEB22CD9F86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 1104
Signing time: Sun 27 Jul 2025 12:00:40 +0000
Manifest this update: Sun 27 Jul 2025 12:00:40 +0000
Manifest next update: Mon 28 Jul 2025 12:00:40 +0000
Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: GO6+NCZcSou/uCx+w8GpvwuD1SxPgvoMUBIQ0+5Oubs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:ad:de:c3:84:e5:1a:41:ad:fe:b2:2c:d9:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Jul 27 12:00:40 2025 GMT
Not After : Jul 28 12:00:40 2025 GMT
Subject: CN=b614c4b00d03a9b2b393294b907dbe07bcf2e964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:4a:30:20:71:ef:14:4c:7a:59:50:06:01:
7f:a7:04:ce:ab:1f:6e:89:51:aa:f7:2c:7d:88:11:
cf:60:9e:e4:9d:22:30:f5:9c:0f:19:00:98:4d:a4:
db:e6:8f:bb:7f:df:11:d8:ce:0d:14:8b:d7:be:e2:
ae:1d:70:98:dd:e0:03:4c:20:cf:3f:a7:ba:10:4a:
20:3c:a7:e2:14:95:44:e2:32:03:92:3f:c7:75:67:
d2:f3:81:7c:f5:a3:03:50:94:40:ec:1e:ea:36:1d:
a4:02:31:a3:74:91:e6:50:63:cb:4a:c3:8c:ed:ef:
12:29:14:bc:69:d6:8d:c4:7e:61:75:73:74:47:8d:
68:a2:90:cf:68:f3:7d:c0:3d:e2:e9:17:3b:f7:6b:
89:56:f2:68:90:44:a2:d8:8a:f6:4b:ca:a7:0b:07:
ca:63:56:3d:45:35:46:35:81:d6:ae:be:26:99:c6:
7d:be:af:dc:8c:23:da:da:bd:1c:7e:93:09:5a:93:
56:f3:02:0b:04:fc:85:17:8e:42:05:8a:30:97:55:
72:8b:6a:2d:41:52:fa:4d:35:11:9d:1c:03:7e:03:
a2:ff:9c:be:5a:99:4e:2b:20:ac:af:d5:ec:30:2d:
7b:d2:c4:18:2e:9a:55:67:ca:0c:32:55:3d:94:39:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:14:C4:B0:0D:03:A9:B2:B3:93:29:4B:90:7D:BE:07:BC:F2:E9:64
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9c:c4:95:ec:25:40:1c:5e:fe:7e:b8:51:ee:56:9a:c0:aa:
af:76:93:21:f4:87:21:01:90:83:23:3c:6e:af:a8:13:29:8c:
10:83:90:f0:dc:56:9a:27:80:3d:48:1a:f1:c8:d2:63:61:5c:
e5:85:0a:18:ba:28:0c:d4:0e:19:ae:e7:73:f9:9c:2c:1f:29:
66:ce:b4:ac:56:be:9e:9e:21:90:dc:57:be:99:3c:9b:94:77:
5e:3f:c9:1d:5f:37:44:e8:80:47:54:2c:d4:77:b6:32:ed:33:
80:38:6d:71:52:f8:bb:50:15:8c:e6:89:46:73:cf:d3:84:62:
b7:b4:7c:5a:29:a8:cf:f2:ca:25:af:5b:83:26:5a:15:79:06:
1f:27:b1:ad:2b:29:2f:95:71:2a:ca:42:46:40:03:11:92:87:
ca:85:e3:1f:54:b6:28:1a:bc:5e:05:fc:00:bf:5c:4e:5f:a9:
61:e0:24:a8:0e:10:a4:ab:35:30:48:1e:b4:c5:66:62:d3:04:
b2:9b:3a:bd:9d:cc:b8:c4:2d:45:87:6b:36:6d:75:d7:1b:ce:
3b:32:88:14:ba:1a:7f:a8:01:4c:c2:a9:4b:75:ec:6a:eb:9b:
21:e1:55:9b:96:48:4a:a9:d9:1d:91:a9:de:85:30:72:75:5e:
a7:df:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:46:34 2025 by rpki-client