
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: bE4TUKgw3lPc56jZfPA1NHnfD+H48+yEH9q0vhR7bHU=
Subject key identifier: 5C:FB:59:72:75:CF:34:CA:66:D5:20:9D:96:43:65:E7:FA:04:40:CE
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 019847ADE87A1F510548B65D7413A56DFD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 028C
Signing time: Sat 26 Jul 2025 17:00:36 +0000
Manifest this update: Sat 26 Jul 2025 17:00:36 +0000
Manifest next update: Sun 27 Jul 2025 17:00:36 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: T5uxmXjg2MtNAc+ug9xQTjR2iYiYSvitLi+0WUcPnII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:e8:7a:1f:51:05:48:b6:5d:74:13:a5:6d:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Jul 26 17:00:36 2025 GMT
Not After : Jul 27 17:00:36 2025 GMT
Subject: CN=5cfb597275cf34ca66d5209d964365e7fa0440ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:59:7f:1e:9c:53:b2:69:e5:3e:f8:b7:a5:
a8:f7:8f:d4:47:e3:c5:61:8f:ba:dc:69:0c:69:22:
93:ae:08:97:d6:57:9c:3c:fd:bf:fc:91:44:5f:57:
30:7d:40:f1:52:d9:79:e5:a4:79:70:78:c7:89:6b:
77:94:75:cd:4d:88:24:4b:bd:5d:df:f7:24:42:7b:
a3:e6:96:85:35:94:f7:9f:3b:3c:96:9f:fb:f0:13:
48:4a:5d:f6:f4:66:53:2f:26:ba:c9:bc:92:99:26:
5f:e2:41:d5:71:2e:26:e7:cc:7d:c7:81:d8:68:91:
6d:f3:28:5c:a3:64:ce:96:53:f7:37:2c:45:d8:2e:
c8:4e:af:af:64:a9:17:a0:97:ae:c5:a3:84:8f:8d:
bc:8a:4e:ac:54:49:54:0b:6f:c0:77:92:78:90:da:
fe:f9:a3:7b:71:60:ed:49:08:67:9b:66:28:6a:87:
b8:2a:c4:ca:44:bf:3a:44:50:1e:8e:bd:a3:c6:0e:
66:59:36:ac:95:27:3d:54:2e:13:99:6d:e0:cd:5f:
f4:4c:78:2c:88:01:1a:bd:b0:1d:8e:01:c2:cf:59:
e9:ce:c6:a4:8b:d5:ff:50:63:6b:d1:d0:e7:ef:f5:
79:da:0e:31:63:46:c8:4e:e8:f7:2a:b1:5a:c8:1c:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FB:59:72:75:CF:34:CA:66:D5:20:9D:96:43:65:E7:FA:04:40:CE
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:1d:f9:c3:87:2e:e4:b0:56:42:4b:e4:6d:21:aa:69:51:
10:a4:c5:11:56:4b:50:23:8c:10:f2:d4:eb:5a:58:c9:3d:ed:
a7:ff:d6:6d:62:ac:f7:29:26:70:85:45:4e:58:6d:93:37:da:
71:10:7e:a5:85:be:2d:0e:ee:3f:6b:1f:7f:b2:e3:a1:9b:81:
58:cd:a9:25:2a:79:82:d2:51:15:80:00:db:8e:35:8d:00:67:
b2:d2:5f:62:55:00:19:3f:6f:e8:64:44:c6:73:75:c1:e7:5c:
3c:35:bb:9d:98:e7:de:2c:5c:c4:03:db:fe:4f:8b:12:e5:61:
14:62:f8:ac:71:7d:0e:ad:84:c0:2e:67:0c:53:94:f7:97:04:
31:c2:ff:a2:f5:02:e2:a1:f5:c6:66:6f:83:0a:40:24:22:ae:
2f:f1:49:09:10:bb:f6:b1:17:f6:72:49:89:b7:f8:43:4f:8f:
23:56:c0:ac:33:13:50:d8:d2:77:2b:e4:76:1c:3b:9d:82:3c:
83:be:fd:3a:0a:84:cb:28:08:8d:05:2f:ab:b5:30:de:32:69:
9f:cc:0f:24:22:2f:16:e7:83:d9:be:ad:a2:2e:b1:21:4d:ee:
d0:8a:73:d3:32:4c:19:33:38:8e:d8:08:7e:a2:a8:ba:71:d2:
dc:96:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:56:43 2025 by rpki-client