Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: T7pJHAMk5wvO5vGgh15G9jO/5SYGfPU1Q1Y7H7tULs4=
Subject key identifier: FA:A9:C3:E7:15:5B:87:FF:55:02:90:18:91:C2:06:EB:33:0B:04:E8
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 01984852CB12646B21F78AE4FE0E86318744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 0C9C
Signing time: Sat 26 Jul 2025 20:00:42 +0000
Manifest this update: Sat 26 Jul 2025 20:00:42 +0000
Manifest next update: Sun 27 Jul 2025 20:00:42 +0000
Files and hashes: 1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: KDld9MpC0+vndMRw8yR80urqbATVORG9BExqnbH9s3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:cb:12:64:6b:21:f7:8a:e4:fe:0e:86:31:87:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Jul 26 20:00:42 2025 GMT
Not After : Jul 27 20:00:42 2025 GMT
Subject: CN=faa9c3e7155b87ff5502901891c206eb330b04e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:b3:bb:28:f9:d0:bf:d2:86:76:eb:df:cb:
e3:5e:76:fe:c2:77:89:b1:94:d6:53:4b:c8:4b:25:
4e:cc:97:d3:46:1d:84:e4:a7:6e:99:37:03:6c:e2:
3b:88:80:67:de:0f:60:d3:2f:f6:97:66:e7:c9:f1:
d3:ca:65:76:a7:b4:de:ae:ae:c4:b5:39:e3:19:9b:
fa:78:43:0f:0a:72:3a:df:6d:52:70:b2:3d:d8:c8:
77:7d:de:fa:e1:db:db:68:f6:48:ee:e3:e3:86:18:
cc:23:9f:62:11:af:45:f2:a9:63:dc:41:44:0a:aa:
b4:84:60:31:1d:7c:e5:40:30:d6:55:8a:0c:a4:07:
82:d5:26:80:14:a0:48:80:7a:2f:06:2b:db:22:cb:
f9:5d:58:0c:74:fc:7c:60:65:50:c0:7a:37:8d:03:
da:4f:25:da:29:32:ea:bc:bb:17:55:71:8c:39:ac:
27:ce:bf:24:3d:a8:20:8b:44:6c:cb:a9:ce:ac:ee:
b3:9c:80:02:86:b3:3a:0a:91:18:70:47:0e:14:40:
51:76:57:42:8f:27:f5:2a:e5:ac:02:d0:ba:04:69:
a9:8b:38:d4:f2:b4:48:b2:21:6b:63:9e:d9:ab:f6:
91:54:6a:50:4c:69:d7:67:5a:7e:15:41:e1:dd:7e:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:C3:E7:15:5B:87:FF:55:02:90:18:91:C2:06:EB:33:0B:04:E8
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bb:4c:33:8c:92:2f:29:4f:69:ac:00:6e:ba:62:8b:7f:98:
92:71:22:83:15:d7:cc:b2:96:21:9c:ff:d0:83:a6:5c:90:25:
b8:ef:f1:79:7a:03:03:97:b0:15:73:a1:bd:1e:05:ad:98:b1:
cf:63:87:8b:87:fe:6a:43:52:59:b7:f0:ab:55:f1:0b:cc:4d:
ea:38:d8:b6:8b:6e:3a:f2:c2:3c:8b:f2:61:66:50:50:6e:48:
8d:01:dd:3d:15:ac:0d:b4:64:64:ed:07:65:22:97:da:ed:99:
69:46:57:0b:64:b6:7e:f2:71:17:b5:8e:31:ef:5b:94:12:3a:
9c:75:cb:f0:09:2e:7a:5f:bd:b0:bf:0d:16:64:65:22:ef:8f:
41:eb:ac:9f:db:79:b4:72:28:ed:86:2a:d9:1c:ad:d5:4c:74:
57:d0:f6:b5:41:f8:21:7b:84:6a:de:b0:ab:8a:1e:0d:d0:18:
7d:ec:39:24:27:ee:1e:1c:55:42:5f:a9:48:01:c4:a5:60:e3:
1a:51:75:ea:34:b5:1f:01:40:94:01:b1:2b:30:67:42:9e:ac:
36:9c:fd:7b:6e:a3:ad:c9:3a:a2:e7:c7:df:70:83:74:d8:be:
8e:af:73:c8:d8:92:39:83:40:dc:28:7f:fd:f7:d8:7b:ec:73:
6b:2c:f8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:34:43 2025 by rpki-client