Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: pOz22R0NGHnD1JBNrsI2lByrPQW3Cw72M79hcB/JvnI=
Subject key identifier: 68:7F:AA:56:8D:06:3A:0F:F3:3E:ED:F9:54:2D:D8:37:1D:EC:A9:D6
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 019856EB0E85D819B6763770DD12299ED427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 0397
Signing time: Tue 29 Jul 2025 16:01:41 +0000
Manifest this update: Tue 29 Jul 2025 16:01:41 +0000
Manifest next update: Wed 30 Jul 2025 16:01:41 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: HOBz388ABMLqLiJnIPgvuRox9LfKphAqDOi/PwhY4HY=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:0e:85:d8:19:b6:76:37:70:dd:12:29:9e:d4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Jul 29 16:01:41 2025 GMT
Not After : Jul 30 16:01:41 2025 GMT
Subject: CN=687faa568d063a0ff33eedf9542dd8371deca9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:9c:2e:a4:e6:80:24:9b:87:da:17:b2:0f:
05:23:1a:8d:87:14:7c:80:e6:8c:4d:7c:7d:a8:e5:
9d:42:cf:ca:60:83:10:ae:c8:de:70:bc:27:39:fb:
07:43:00:60:d9:07:d1:32:9e:1d:af:62:ba:ee:ae:
1f:de:5c:e2:b0:95:17:ff:fa:75:f5:02:f5:d1:2c:
58:12:bd:fb:b7:72:18:35:45:32:11:bd:23:f2:44:
17:9b:2b:77:c8:81:91:a0:54:c9:d2:01:59:df:ec:
58:36:e7:8f:27:76:37:f2:28:62:7f:09:dc:de:75:
1e:44:f2:76:01:31:bd:d9:7d:6f:75:fb:f0:7a:62:
0b:91:97:3e:04:62:b4:aa:db:2a:0d:1f:4b:31:97:
99:e1:a7:35:ea:6d:76:3e:db:8a:1e:33:46:fd:09:
58:c6:f6:fe:38:27:c4:ed:e1:a8:03:83:46:c4:70:
d0:fa:94:db:3a:16:e5:d7:27:82:5c:98:06:fa:91:
fa:bc:4d:01:a6:0f:39:3c:72:52:9f:71:29:9e:7e:
ac:8a:3e:65:d1:6f:5b:cb:71:cf:75:5f:f2:d9:f4:
40:a7:2b:c3:65:b2:a8:6f:24:14:2c:ee:ff:ab:cd:
8f:50:2f:c8:57:09:5a:59:14:83:5c:2a:5a:6e:5a:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7F:AA:56:8D:06:3A:0F:F3:3E:ED:F9:54:2D:D8:37:1D:EC:A9:D6
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f4:9b:aa:9c:4d:a1:09:dd:c0:dd:c8:ef:87:b6:d6:b8:31:
a9:bc:8b:1d:84:7d:8c:49:3b:f3:e3:bb:bf:11:91:ce:b4:67:
fc:82:e2:fd:a5:b1:e4:58:b1:1b:e6:c7:04:c6:2d:d5:3d:84:
74:b1:81:ac:e2:78:a3:86:ce:7f:4e:35:f3:0e:cd:7d:28:ff:
c1:a4:ae:98:76:72:8f:c8:91:bd:95:ae:0a:e1:0c:7d:de:bb:
f7:da:80:7c:20:d4:96:b7:62:62:73:77:a5:98:d7:e5:c3:69:
8b:51:a5:47:e7:43:5f:f7:28:60:ce:f3:31:40:47:55:91:27:
b9:3e:d7:53:b2:12:cf:24:cb:7d:5e:d8:fe:80:0a:59:44:0c:
a4:b4:94:e2:41:27:ab:4b:19:7a:1b:db:7b:f2:57:6f:94:35:
24:a5:06:12:cb:13:b5:da:cf:fc:eb:e5:20:cf:92:29:0b:96:
55:e2:f1:eb:06:ff:bc:16:0a:cc:32:9e:54:c8:27:00:2c:f7:
94:c2:3c:71:31:8e:a1:c1:d1:b1:c5:03:65:60:48:da:84:46:
03:d0:b4:ee:ba:dd:e2:ff:ff:51:ae:bb:99:2d:05:ec:78:67:
df:6c:a4:a5:75:96:96:56:8b:62:38:45:fc:c8:95:d7:03:d8:
8b:b7:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 22:14:22 2025 by rpki-client