Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft (raw, json)
Hash identifier: 3g1VIs+ecTeTy2dnyoj0jnDVCfMip06v+tIl1YvLiDw=
Subject key identifier: ED:8F:CC:E2:F1:E7:00:37:90:A7:B4:C3:61:C8:DF:C7:89:5C:1A:3C
Authority key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Certificate issuer: /CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Certificate serial: 019847771995B5F501B195A9AE31B93CF29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
Manifest number: 12DB
Signing time: Sat 26 Jul 2025 16:00:44 +0000
Manifest this update: Sat 26 Jul 2025 16:00:44 +0000
Manifest next update: Sun 27 Jul 2025 16:00:44 +0000
Files and hashes: 1: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl (hash: 6MjlQ3ICEc+Nu8Pr/nLOLLsFl1/Q0xAq47zDvRsobQE=)
2: pJ8B6gtnj6CL56vYC6LrCO5oBmo.roa (hash: F88j9ZRyVWoqzEm3QsXJ4KW1kEET+j/VAKZytfrtK/M=)
3: zsR2hosRcU8M1KGjXd1_k-ktlfc.roa (hash: rTq5tN+JofEk5Za1xiOrbVhdFMOSTGjrPTYOHgXaK+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:19:95:b5:f5:01:b1:95:a9:ae:31:b9:3c:f2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Validity
Not Before: Jul 26 16:00:44 2025 GMT
Not After : Jul 27 16:00:44 2025 GMT
Subject: CN=ed8fcce2f1e7003790a7b4c361c8dfc7895c1a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:7b:e3:f9:6f:8f:8b:e1:82:0b:0d:ab:11:
34:4c:4c:aa:47:b3:b7:8c:d2:f4:8e:b8:fc:a1:62:
ba:48:bc:74:59:74:a8:1c:a2:82:c5:c5:a7:eb:fc:
ce:88:d1:86:96:c6:3e:98:41:02:13:37:a2:b5:54:
40:20:e8:85:ce:f6:f2:82:64:a9:a3:27:82:de:a4:
db:75:82:83:61:15:2c:fa:a4:99:e9:12:b1:11:92:
e0:eb:2d:54:1c:7a:55:e0:c1:b9:69:76:e0:a5:9a:
31:9b:36:00:a0:43:19:86:4f:cf:17:f0:0e:3e:de:
61:17:9a:4f:d6:be:cb:54:72:cc:f0:0a:98:90:ac:
ea:d8:1b:97:82:fd:89:1a:7e:ef:bb:01:a9:ee:9f:
18:9d:af:67:1a:a6:65:bb:56:ff:3c:13:2b:6b:4a:
b2:c3:b7:81:ae:dc:b3:64:fa:53:86:d7:8b:0d:84:
f9:5f:1c:fa:81:57:7a:56:55:9f:08:00:ec:ab:e2:
b0:3b:63:41:7c:d9:01:cd:4c:47:75:83:8c:13:c4:
9a:40:30:47:61:67:01:89:6c:54:09:e7:04:97:a8:
6c:f3:67:86:22:be:bb:9b:0f:04:3c:74:05:d8:6b:
fc:a4:7d:ec:71:91:19:6c:85:53:84:43:42:5c:9f:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:CC:E2:F1:E7:00:37:90:A7:B4:C3:61:C8:DF:C7:89:5C:1A:3C
X509v3 Authority Key Identifier:
keyid:34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:47:2c:32:fd:f2:27:ca:e8:e3:dc:79:37:4a:80:87:13:de:
6e:cc:d0:c1:65:ab:b9:7a:f8:e4:a6:fc:f8:0a:36:19:87:9b:
0d:11:6f:bf:02:01:02:fd:4b:38:77:da:b3:1f:46:ad:6f:db:
5b:b6:43:cd:a7:33:8c:8c:08:14:71:c8:c8:81:e3:04:41:87:
28:d4:0c:8c:f0:7d:18:42:1a:4e:77:ef:4b:20:b5:80:61:1a:
94:4f:53:1f:de:a2:42:94:ac:10:94:ad:9b:ae:34:08:22:72:
94:3f:35:bb:ef:97:73:78:bc:07:30:47:11:15:cc:83:ca:c2:
da:d1:8b:35:11:77:f5:cf:80:8f:eb:74:b3:49:84:ec:3d:15:
f4:b4:32:70:e1:f1:12:e7:ce:4c:4c:4c:02:6b:af:7a:50:de:
74:ce:50:08:1c:f0:70:e1:d6:7a:5f:84:38:01:0e:6e:5e:56:
bc:92:f5:27:91:1a:c0:39:41:67:92:4a:34:96:1c:c9:74:ca:
a9:91:20:2a:a9:8c:3f:7d:dc:11:a8:09:4e:af:11:f2:f3:bb:
c3:66:1d:ba:1b:45:16:53:bd:32:b6:0b:30:46:5a:ce:4e:2f:
22:18:a3:27:50:04:14:70:0e:47:0c:9d:6b:9c:aa:2e:ee:b3:
04:ba:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:27:46 2025 by rpki-client