Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: 77V9Ot2yLmexFKfbO+GpjeAGZMaxnUHN4AAmV9DQ2WA=
Subject key identifier: F9:AC:E0:0A:3E:03:D3:2C:34:D7:BD:AA:41:A2:D0:7C:93:22:01:BC
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01984C2FBACE0C53A83D6A344F19B1646851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0935
Signing time: Sun 27 Jul 2025 14:00:53 +0000
Manifest this update: Sun 27 Jul 2025 14:00:53 +0000
Manifest next update: Mon 28 Jul 2025 14:00:53 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: wfNBbdTeWKkD0imqpSv2sMufsNt70XF8je87vvZPxKQ=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:ba:ce:0c:53:a8:3d:6a:34:4f:19:b1:64:68:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jul 27 14:00:53 2025 GMT
Not After : Jul 28 14:00:53 2025 GMT
Subject: CN=f9ace00a3e03d32c34d7bdaa41a2d07c932201bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:dd:02:e5:7f:7d:e4:68:9a:5e:16:1d:62:
dc:95:ac:61:9e:59:69:c0:ae:4a:75:e2:0c:3f:e9:
4d:b0:6a:9c:fd:f0:76:41:29:84:72:3f:ee:9a:dc:
38:50:47:fa:29:08:e6:e6:6e:e0:1b:c4:dd:3c:27:
db:13:35:4f:64:7d:a9:f8:4e:15:f5:d3:9b:fa:23:
22:89:e8:7b:98:79:ad:f7:4c:87:18:98:1b:3f:48:
15:e5:5a:e4:53:36:f3:2f:12:82:5d:fb:36:05:20:
83:11:c9:bc:5c:78:3e:3d:ab:d7:16:2c:2f:7d:16:
15:33:3b:4a:92:f9:13:de:fa:12:8d:8e:60:f6:2a:
47:06:7e:5f:7f:2e:cd:9b:a4:6f:b2:fe:c3:0a:a1:
65:fe:d4:33:ce:6c:9f:3b:41:fe:6e:bd:ad:69:6a:
90:1b:5c:e9:1b:eb:b0:64:83:6a:80:be:af:41:99:
3b:61:a7:e7:7e:90:d7:88:a0:c5:9f:af:ae:55:21:
bd:08:e0:55:81:18:e8:92:50:f1:e2:cc:f1:09:83:
0b:02:52:90:49:2d:09:c4:00:8b:9b:b7:6a:9f:bf:
bd:f5:3a:b8:ad:fa:27:cc:e1:58:08:4e:fe:17:38:
4a:d3:fe:cd:3b:1a:3e:16:cc:e1:44:d9:2d:fa:f3:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AC:E0:0A:3E:03:D3:2C:34:D7:BD:AA:41:A2:D0:7C:93:22:01:BC
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:e4:e6:b1:bf:28:19:b8:50:d5:fc:19:ac:11:b8:e2:ba:
b9:b5:31:b1:26:e9:fe:8c:28:80:d2:12:22:e6:13:02:75:1b:
2f:18:82:d8:0d:f6:b4:40:5f:25:ee:1e:44:47:4f:2f:a4:fb:
52:6e:7f:3f:08:ad:43:df:5b:10:5d:7e:1c:a4:51:a9:bf:05:
3a:bc:81:0b:3d:57:6a:10:cf:61:9e:8d:cc:69:78:97:1c:ba:
ed:f7:e5:13:29:86:4a:05:5d:9d:3b:e3:14:b7:91:c1:5f:e1:
b7:ed:ca:c4:25:7d:90:c9:eb:0e:0f:20:4f:27:5e:08:85:5c:
52:2d:62:6a:e4:98:72:89:91:8d:17:82:9d:1e:59:fc:67:cc:
fc:12:96:56:69:ee:90:6f:f5:74:d6:e2:9b:17:44:47:68:46:
ec:12:e6:2d:17:63:66:26:1c:60:43:e6:41:6c:f5:c5:f7:d1:
7a:18:c1:f5:3a:3a:89:86:c9:b1:c6:1c:31:dc:df:42:ef:1c:
15:cf:57:63:d5:81:c8:63:62:ba:2a:5a:3a:67:8e:6b:06:42:
21:7b:cc:93:37:cb:bc:53:e1:5a:f9:bf:4d:e5:ae:d8:e4:bb:
ac:4a:30:cc:dc:37:57:63:24:e9:3e:9a:61:f5:57:69:23:b6:
36:a3:7a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:12:12 2025 by rpki-client