Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: nErfwnmeVOntP4Zp0HqKtzhGMjOIVwD78g8FSVDvMZY=
Subject key identifier: 34:36:50:51:B5:CB:AA:45:F0:E0:7A:79:61:3B:1A:BB:3A:AD:EC:6C
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 01984AAEC127F0EAB1D91934CE1A7768E315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 09D7
Signing time: Sun 27 Jul 2025 07:00:23 +0000
Manifest this update: Sun 27 Jul 2025 07:00:23 +0000
Manifest next update: Mon 28 Jul 2025 07:00:23 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: qe39fsYEhy54WW0NrY9p+2YqC7kwaRUO0g3fDEURako=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c1:27:f0:ea:b1:d9:19:34:ce:1a:77:68:e3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jul 27 07:00:23 2025 GMT
Not After : Jul 28 07:00:23 2025 GMT
Subject: CN=34365051b5cbaa45f0e07a79613b1abb3aadec6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:30:21:d2:6e:b6:d3:26:bd:83:be:a8:99:
a4:e4:7d:c2:03:3d:bc:d5:25:46:94:80:b4:4a:1a:
93:ee:26:31:5f:f0:61:84:81:83:f1:6a:e2:11:1e:
86:aa:54:d0:eb:42:1b:61:1a:66:ec:3a:cd:55:d6:
f5:f3:1d:84:23:09:b1:2f:57:96:35:7d:28:61:a4:
b3:93:be:ad:df:b9:75:99:53:cc:69:2c:a0:fe:9a:
68:80:f2:29:8d:1c:9f:bd:5b:f5:bc:95:3a:79:43:
95:aa:13:f5:d6:ae:3d:28:7a:4c:5b:b1:47:b8:45:
45:a3:85:20:98:e1:22:b9:99:82:22:d6:88:f6:b6:
05:50:03:ea:72:0c:a2:bb:00:83:1a:9d:1b:a6:f9:
d6:a2:40:3b:0e:c9:ca:72:4e:55:39:1a:4a:cf:5e:
b3:a1:c8:7c:0e:09:5e:8e:4b:d2:eb:f2:af:fd:e1:
5e:0c:0b:a6:f4:86:8c:c2:44:0d:bc:3c:e3:7b:6f:
42:c6:3f:29:3d:0f:2f:26:6f:c4:c3:1b:9d:98:dd:
2e:50:6c:80:88:75:fb:49:61:f2:de:08:9e:ac:c2:
09:ca:1d:95:1a:92:dd:61:4d:b6:ef:70:e5:c4:bc:
43:bb:0a:d0:e2:5a:81:e8:3b:15:c8:77:81:9b:ac:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:50:51:B5:CB:AA:45:F0:E0:7A:79:61:3B:1A:BB:3A:AD:EC:6C
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9d:de:2c:66:9c:2d:32:bf:f3:59:b2:b3:dd:ed:9f:0d:cb:
af:0f:5e:47:99:bf:c7:63:13:54:d2:b2:cb:9e:6f:bc:49:71:
38:5f:a1:44:08:f0:49:6c:07:18:1c:5d:5b:7e:36:0b:52:97:
2b:ce:7e:67:05:d6:28:ef:19:7d:d6:82:21:f0:72:ae:71:15:
68:29:43:34:77:2b:cf:6a:1e:22:43:b0:d7:85:7c:28:99:20:
77:ce:64:ee:18:0c:d4:dd:fe:67:c0:1e:b2:9a:dd:20:f9:8c:
07:03:26:8e:1d:55:26:c0:1c:a4:b7:6e:6b:84:0c:a4:c2:ea:
fe:44:62:61:c2:7d:fb:18:37:ae:95:91:fd:ab:54:e9:ca:66:
34:15:92:7c:9c:3c:da:20:4c:58:6b:d3:2c:da:6c:97:b7:e9:
70:03:82:56:b2:86:49:c1:47:b5:b2:d6:31:9c:c0:d3:10:00:
a2:fd:35:28:a1:77:a5:a2:6f:24:b2:bc:92:12:9d:98:01:c1:
8d:d5:3d:69:ac:94:aa:62:a6:80:09:0b:8d:c6:ba:dc:84:cb:
e1:c3:49:73:8e:6b:d8:e6:ce:d5:94:7d:75:c0:68:5e:0f:ea:
21:e4:88:32:83:1e:09:ec:8f:7c:d9:2a:c0:e3:0a:ce:17:f8:
f2:9b:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:34 2025 by rpki-client