Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: jgZDLAPv0Bsm9Iy2FJjZT5BiD8Vuv0xl1tGguUpm/LM=
Subject key identifier: 52:B7:85:EF:0E:19:5C:59:A3:70:56:03:34:02:71:38:EC:B7:C9:96
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 019848C0896D6CCBBAA2E1FC6A12710A0206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 04EB
Signing time: Sat 26 Jul 2025 22:00:34 +0000
Manifest this update: Sat 26 Jul 2025 22:00:34 +0000
Manifest next update: Sun 27 Jul 2025 22:00:34 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: fHXFtYnbSLZ1gn7isNOv-X6g-Vc.roa (hash: oCDSfP23EAfcpuHp3yCgmbR/p7P3oSuSoD6KDdGkf7Q=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: rPAx5e12FzncL94t9lz6Kw5kQ4GqiifKtxRPfrWbXTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:89:6d:6c:cb:ba:a2:e1:fc:6a:12:71:0a:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Jul 26 22:00:34 2025 GMT
Not After : Jul 27 22:00:34 2025 GMT
Subject: CN=52b785ef0e195c59a370560334027138ecb7c996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:84:0a:60:51:79:6e:dd:38:74:b1:cf:e0:
f7:b8:7a:b0:a9:c4:c5:73:aa:5f:57:8b:1a:ca:64:
f0:41:8b:13:ef:19:cf:87:48:d2:de:c7:ca:62:c5:
73:0e:60:a9:1b:33:36:0a:bc:44:33:2a:41:84:24:
a9:20:c1:9d:81:35:33:da:7f:96:90:02:78:2c:62:
2b:17:e8:9f:be:0c:c8:d2:1b:b8:0f:b1:d3:f4:05:
94:31:c1:d7:ec:5e:30:9b:17:f4:2c:ff:c5:b6:13:
a0:24:12:c7:4e:0c:56:a0:de:9b:17:df:4f:dd:5f:
89:7c:1e:95:07:01:c2:f5:d0:dc:ad:f4:a1:68:0b:
5c:c0:2b:27:5b:f8:d1:87:e6:69:80:6d:8b:86:e3:
0f:f7:52:ff:a5:4d:63:29:92:b6:cd:23:02:05:5e:
c8:c2:6d:32:c0:4c:8f:04:3d:33:2a:fd:e2:22:b2:
9c:47:5c:d6:46:ab:6d:61:ac:6f:2c:92:af:3c:8f:
b9:25:6f:94:ed:64:b2:38:21:97:e4:5a:09:3a:66:
4f:c9:92:ad:24:29:56:84:3d:cd:09:e7:80:ec:1c:
84:9a:0d:93:a0:02:4b:87:6d:53:54:b6:06:f8:d3:
1f:4a:b3:53:6f:ff:84:9e:ee:dc:3d:fd:e4:6d:cf:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:85:EF:0E:19:5C:59:A3:70:56:03:34:02:71:38:EC:B7:C9:96
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1a:26:2f:8c:c7:30:8f:7f:6a:dd:ce:5c:03:e3:e4:45:7b:
18:09:80:bf:46:3b:0a:db:dc:42:8f:bf:59:b2:83:2a:cd:f6:
7a:ee:6e:5d:a1:91:2d:b8:01:e8:10:60:44:f0:c2:85:3f:bd:
95:ab:bf:f8:c2:13:2e:2a:b1:d5:33:81:38:49:cd:25:b0:24:
45:ce:56:62:81:3b:ee:5d:d7:8c:6e:a1:a7:71:83:de:9f:c3:
65:86:55:5a:ae:4e:07:31:a8:d6:b1:ff:20:4c:8d:53:80:3b:
f9:04:90:78:7b:c2:4d:6c:62:af:20:58:ff:63:26:aa:3a:39:
32:04:22:1c:4b:06:fe:8c:2b:41:13:f3:47:06:92:01:0c:a1:
23:1c:bc:e6:b0:1b:d5:cc:51:69:57:c7:e7:a9:0b:4d:07:8d:
e9:3d:66:ae:0b:93:fb:90:6a:9f:e6:c6:71:76:97:b9:c3:93:
81:a3:c3:53:13:57:b9:68:d9:e3:c8:d0:d8:1d:15:f9:ad:3b:
7e:55:41:0f:eb:c3:60:ac:ff:3b:d3:c9:08:e7:d1:33:0c:8d:
bc:41:20:b6:e7:b8:49:e8:00:d1:79:d6:29:cd:08:b6:28:56:
91:fa:29:66:e5:b7:8c:3b:cd:b1:e1:53:bd:19:2f:12:bb:38:
54:b7:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:05:57 2025 by rpki-client