Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: 77CpcC0ER6SaFKOqK15Uz30NAfOGz5fSohmH6Aa0B24=
Subject key identifier: FE:C3:A7:19:69:48:AE:B3:D6:AE:A8:A5:10:1B:9E:A5:D2:F7:73:68
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 01984B54094DBD05D44D69EEE0285AFA8793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 0FC3
Signing time: Sun 27 Jul 2025 10:00:55 +0000
Manifest this update: Sun 27 Jul 2025 10:00:55 +0000
Manifest next update: Mon 28 Jul 2025 10:00:55 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: ftsq0mtaRa7FowfoSyLYGxyej7M4BcjBa3WqX7kdbb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:09:4d:bd:05:d4:4d:69:ee:e0:28:5a:fa:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Jul 27 10:00:55 2025 GMT
Not After : Jul 28 10:00:55 2025 GMT
Subject: CN=fec3a7196948aeb3d6aea8a5101b9ea5d2f77368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:33:d2:3b:18:31:b9:0c:e3:f6:f4:b8:d6:
a3:26:65:23:23:f2:fa:b4:c7:10:a2:2d:e4:fa:1e:
df:c7:e5:1a:d8:b3:f6:ff:74:d9:51:60:9b:31:ba:
d6:de:77:40:56:d4:e5:25:c9:e1:71:14:2e:7f:5e:
1a:f3:07:72:c8:4d:92:08:8d:ff:23:48:a4:1f:a5:
42:f7:eb:93:5d:79:9a:46:2a:16:31:44:1d:68:53:
8b:31:fc:d2:57:c8:fa:c5:53:ce:b4:e5:a8:51:db:
d2:65:12:43:34:ab:fa:eb:56:6a:6e:88:25:5a:3e:
96:90:02:4e:97:f5:39:59:da:2f:f8:7e:a4:96:53:
e9:72:74:05:29:d5:6e:0d:89:95:ee:66:58:72:11:
34:69:3e:d0:9e:f8:d3:21:1a:6c:4e:86:49:ee:7b:
7d:a6:58:fd:e7:e3:92:95:64:8c:48:2c:40:6f:8f:
21:ff:6f:13:8b:b4:67:1d:d2:7d:23:15:ca:73:7d:
5c:5b:1a:b5:9d:d4:47:7c:23:b9:a0:b8:5f:2f:40:
2a:df:bc:5b:9f:3e:77:bf:f2:2a:af:c2:fa:22:c5:
6e:79:ce:09:e3:25:a4:a4:02:0e:c8:16:50:3f:16:
cd:33:a7:55:26:dd:54:8f:46:39:7b:56:3b:92:7a:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C3:A7:19:69:48:AE:B3:D6:AE:A8:A5:10:1B:9E:A5:D2:F7:73:68
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5b:13:03:97:1c:6a:9a:82:90:a8:5c:5f:cf:d7:81:57:36:
42:ec:8a:2a:71:59:53:3b:9c:49:1f:27:ae:0b:07:96:33:09:
15:fc:72:26:c5:71:d2:5c:f2:66:c7:ae:69:dd:d7:b8:05:a5:
ac:43:a6:c8:c3:ed:b2:bc:ee:15:58:f9:a7:90:d4:3c:83:04:
56:f8:1f:38:e4:09:ff:2f:7d:f9:ba:39:d6:1d:f3:bb:56:b2:
e5:ac:34:c0:8e:75:e7:81:25:9a:68:86:a0:0a:de:c9:b7:fc:
62:d6:09:99:ff:31:a3:6d:2a:2f:ed:78:59:b4:fc:26:ae:88:
19:3f:3c:7e:43:26:92:a7:85:5d:74:45:5a:69:49:84:e7:da:
b4:bb:52:14:9e:7d:99:66:7e:ea:ee:fb:f7:50:50:37:2f:8e:
ae:0c:51:4f:e6:cc:36:31:6a:ff:24:02:d0:28:6d:44:21:36:
60:e0:ae:d2:63:f4:ae:c4:c9:66:c9:83:1c:9f:38:d0:ec:73:
bc:e5:57:91:52:16:be:aa:b7:b4:c7:c7:c4:3e:81:b8:ec:67:
13:a9:71:f9:72:e5:b7:52:2e:8f:af:6a:3f:6c:91:ea:b7:ea:
08:c2:7c:f7:3e:7f:2e:8d:ba:1c:87:1e:7f:b3:df:8d:1b:ec:
5f:6c:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:53 2025 by rpki-client