Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: QE+nxm3a0eqFo1lkUbY2xRGP15UaO8XuQW+M5/JUElM=
Subject key identifier: D1:BC:2D:19:B5:64:5E:E1:93:EF:22:D7:41:08:55:90:AA:5A:24:7B
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 019848F72407718D8B09648D0514248AC7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0DB1
Signing time: Sat 26 Jul 2025 23:00:12 +0000
Manifest this update: Sat 26 Jul 2025 23:00:12 +0000
Manifest next update: Sun 27 Jul 2025 23:00:12 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: o7p/UOSJY+s37HpGv5tNTSHe6DV2ZjUIwNV8DEMxZe8=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:24:07:71:8d:8b:09:64:8d:05:14:24:8a:c7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Jul 26 23:00:12 2025 GMT
Not After : Jul 27 23:00:12 2025 GMT
Subject: CN=d1bc2d19b5645ee193ef22d741085590aa5a247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:f1:63:6f:03:d8:27:ee:85:d2:03:8f:a6:
15:55:52:c2:77:98:43:dd:68:e8:42:3a:27:f4:ec:
d7:56:03:e9:74:48:bb:76:45:b9:01:e5:bf:52:24:
c6:18:d0:bc:e2:b8:0f:61:15:cf:e0:30:4e:a0:40:
56:66:14:85:3b:e2:32:3b:46:3c:e3:1f:c6:1b:25:
91:e0:7d:93:e8:84:8e:ef:13:5a:da:9e:5c:1d:68:
86:ea:5f:c1:7e:af:fd:66:1d:9e:bb:f9:a8:6d:6f:
9a:15:c5:ce:50:da:df:d0:b2:b0:3a:72:22:7e:24:
27:9c:00:2d:f8:b0:eb:38:f9:dd:75:0a:16:86:0a:
29:fd:15:11:39:7b:99:cb:d9:c3:20:c7:73:4f:bd:
ff:22:f8:60:0f:a2:88:83:de:c2:99:6a:71:0f:31:
74:2e:92:d4:1e:65:98:5f:ba:ef:c5:f1:04:6f:f4:
20:da:54:20:14:05:7f:1f:97:3e:c7:10:0c:cc:c3:
a8:93:e7:0d:59:22:93:dd:72:bb:17:b3:12:a1:28:
10:de:77:f3:12:1e:6e:0c:04:dc:76:f0:2c:ba:dd:
1a:ea:1a:bd:71:d6:45:4d:f2:51:b2:67:dc:ba:a5:
06:1a:e9:91:0c:04:f1:02:f6:a4:3f:2c:1a:c7:b4:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:2D:19:B5:64:5E:E1:93:EF:22:D7:41:08:55:90:AA:5A:24:7B
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:eb:ba:2a:11:9c:f9:44:ed:87:44:2f:6b:e4:e8:54:e6:
ad:30:b8:8b:7d:31:45:d2:fe:0e:e2:96:1f:7d:20:a6:75:06:
16:59:4d:16:a0:d8:ec:b5:66:7b:5c:f5:07:52:3b:cd:d2:f3:
dd:2f:f1:2b:10:dd:e3:f1:4d:01:5d:88:c0:c9:6d:00:1c:8d:
a2:56:77:d1:1d:f3:04:a2:1f:c7:8a:c5:1c:bb:da:c3:10:c6:
74:d6:51:df:c8:9c:af:73:dc:8f:a6:d1:ac:27:da:d2:c4:16:
ed:7f:98:6c:d5:c8:e1:7d:f6:e5:1e:c5:ff:b5:85:b8:1d:85:
33:e7:3c:c1:44:6b:ce:df:69:13:74:7a:56:8e:ee:bb:24:58:
ff:e4:ad:b9:35:88:ca:83:85:f1:ec:de:84:2c:59:3f:97:4d:
b6:3f:27:0f:9f:97:ae:9c:19:1d:9c:4a:72:f9:fa:4b:22:15:
08:bc:6b:2c:1f:33:91:87:13:5c:fe:66:a0:8d:e6:cf:22:ee:
68:ea:24:e7:99:df:20:40:88:d0:b1:07:16:d7:22:a3:5c:2c:
34:c6:11:4d:f4:1d:10:bf:8a:e0:be:e9:53:48:51:79:81:aa:
08:94:ea:51:d9:51:bd:23:49:78:ea:23:6a:d1:41:d2:c7:f8:
43:ca:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:25:25 2025 by rpki-client