Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: 7COEjLD9j+4yU3+hqBJCQ1/tuovmeRbix2lLnfKzXSo=
Subject key identifier: D6:92:4E:E9:83:DC:E1:22:7C:E7:87:92:B6:8E:B1:B4:CE:F8:C2:B5
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0198350310F74E63CDCBB31E15B2964E2E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1614
Signing time: Wed 23 Jul 2025 02:00:50 +0000
Manifest this update: Wed 23 Jul 2025 02:00:50 +0000
Manifest next update: Thu 24 Jul 2025 02:00:50 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: /5TvZdJI7jnjQx8uTsBotEj65NTO1MVwFko3p5qjzZQ=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:03:10:f7:4e:63:cd:cb:b3:1e:15:b2:96:4e:2e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jul 23 02:00:50 2025 GMT
Not After : Jul 24 02:00:50 2025 GMT
Subject: CN=d6924ee983dce1227ce78792b68eb1b4cef8c2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:af:ce:14:99:e6:df:be:2d:cf:04:6e:86:
5e:10:0b:ee:ff:c9:3c:e0:25:9e:d5:49:6e:c7:59:
9e:7e:2c:8f:cc:f0:57:cc:04:a5:01:ff:e1:f4:bb:
be:8e:0a:c3:da:b7:f0:8b:af:81:9b:d0:84:d1:d0:
c2:f9:90:39:be:9a:19:30:20:7a:c6:f9:23:a6:64:
ed:75:69:0d:cc:aa:8f:2c:64:e6:a6:ac:0b:08:fd:
7d:03:9c:2f:fc:fe:16:77:b8:1c:9c:f4:6a:f6:49:
ef:2b:09:36:ac:f2:48:85:10:7d:b9:78:35:ff:d7:
75:7e:b6:f4:71:05:67:01:17:91:72:c3:aa:49:e3:
3c:f3:44:82:38:c3:09:c5:63:f4:28:99:eb:af:12:
d6:4b:55:a9:b2:45:d4:14:66:d0:59:05:2a:2e:8f:
0a:ea:9c:f7:d4:df:16:f8:98:d6:fe:ab:3e:33:40:
cb:ab:bb:a9:75:b4:64:58:de:53:4c:e2:63:d0:f5:
d6:88:9c:21:1b:98:d5:89:7d:6c:12:9a:1f:cb:0e:
6c:b9:fa:52:46:d0:13:7b:b0:ac:6f:9b:ec:cc:57:
24:26:3b:ea:99:84:09:d5:b4:52:9b:40:46:04:cb:
ce:cf:ec:13:60:05:9b:31:42:d1:58:12:4a:f0:ad:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:4E:E9:83:DC:E1:22:7C:E7:87:92:B6:8E:B1:B4:CE:F8:C2:B5
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f6:7b:9d:30:33:89:b8:30:1b:89:1c:a0:c2:80:82:ad:09:
08:fe:e4:bd:a7:f0:89:0b:ea:38:e7:d8:57:2d:65:86:26:89:
ab:87:bb:52:81:5e:4f:ee:56:44:cc:03:f5:07:d9:be:8f:36:
f4:63:2c:76:6a:45:bb:c5:29:e8:11:49:cd:80:00:07:57:1d:
d6:7f:36:dc:de:2f:27:05:22:33:6f:ca:f5:12:72:df:65:cb:
10:53:b6:4c:3a:a3:ce:7c:d5:be:4e:33:f2:98:14:93:ff:7b:
82:fd:5a:99:06:5f:00:8d:cb:2a:fb:3e:ca:db:0f:1d:45:33:
eb:70:e1:c4:81:9c:88:ee:17:29:a1:61:09:0a:20:d1:ff:03:
2e:84:8f:e9:e3:22:81:e6:b1:26:47:32:9a:c6:2a:dc:1e:65:
8f:84:d4:67:ae:b2:fe:a0:1c:e4:39:b0:b6:e5:15:e2:f4:48:
a3:c0:73:be:50:89:dc:8c:56:47:5d:b6:44:b8:de:1d:98:92:
94:03:d3:8f:74:96:3e:cd:60:0f:3b:26:80:3c:28:ee:dd:cf:
0f:de:57:a8:0c:2b:53:80:f5:1f:f4:73:73:cf:9a:2c:7e:f1:
ec:2f:96:6c:0e:44:6f:88:9c:f3:75:2b:1c:4a:b5:49:31:ad:
8a:15:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:09:09 2025 by rpki-client