Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: QyWq4iHhue4LqR9QGkV+n4V4mEX0/xII+EcdR2b1sZw=
Subject key identifier: 76:48:85:10:8F:94:17:DC:DF:27:7D:3C:15:D3:FA:7A:24:84:04:BC
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 01984E1E49945CB7179D65FD988AEB4E68A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 133D
Signing time: Sun 27 Jul 2025 23:01:04 +0000
Manifest this update: Sun 27 Jul 2025 23:01:04 +0000
Manifest next update: Mon 28 Jul 2025 23:01:04 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: EhtQyWKlbVH18hSEjBtK3P1JO4sB+kBjpg8IKoPp1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:49:94:5c:b7:17:9d:65:fd:98:8a:eb:4e:68:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Jul 27 23:01:04 2025 GMT
Not After : Jul 28 23:01:04 2025 GMT
Subject: CN=764885108f9417dcdf277d3c15d3fa7a248404bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:3c:ff:88:75:72:dd:8c:2c:02:bc:01:db:
ac:b7:dc:13:40:fe:67:e7:7e:cc:1e:83:4f:ad:26:
d7:44:7d:17:d4:03:c9:59:da:22:e1:43:c1:1e:16:
16:4f:c4:a0:b3:b5:d8:5d:4c:c8:67:42:03:fc:84:
4a:9e:93:87:35:05:b5:e2:49:55:6c:9f:ea:7f:49:
c5:59:6a:3e:c2:db:2b:91:ab:75:8a:8f:26:94:39:
55:35:c0:29:f5:36:be:4f:de:1e:d0:0f:4f:71:72:
f0:bb:7a:5e:58:74:90:cd:02:d5:aa:70:e9:f1:5c:
2c:f9:96:aa:0d:fb:f9:49:04:ec:92:9f:9d:48:a5:
1d:75:18:86:02:06:f2:48:24:35:e2:08:10:d4:38:
62:eb:ad:34:21:e2:83:35:1b:b4:b0:24:d2:eb:d5:
e3:6b:10:a4:97:bd:99:ab:cc:64:fb:94:d9:9d:a0:
f0:f8:33:e8:be:af:df:7c:d0:94:4b:cb:3f:6b:e0:
3b:c8:bc:4f:57:8a:a2:15:72:1e:2c:93:55:ee:b7:
ff:5d:d8:66:89:24:fe:df:26:b7:95:a4:51:8e:5e:
7b:d1:7f:e2:f3:de:55:6f:b1:61:0b:d5:52:19:9e:
92:98:18:eb:b5:ea:0d:9e:aa:53:c1:1f:d2:05:e6:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:48:85:10:8F:94:17:DC:DF:27:7D:3C:15:D3:FA:7A:24:84:04:BC
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:92:3d:43:63:d8:0c:87:6e:5a:5e:9b:1f:df:79:7d:3c:90:
c3:00:24:89:5d:e5:a6:4a:42:13:02:bb:04:bc:09:9f:ed:53:
d0:de:3d:1a:0b:2a:95:ae:b3:a5:53:41:cb:ba:37:3a:16:f4:
19:97:ca:3b:a8:cf:54:1d:46:5b:5d:8b:2d:15:82:68:9b:d3:
fe:ef:7a:f5:fd:f4:a6:39:5e:82:0f:80:fe:8e:ae:83:3f:69:
e7:4a:a5:10:d6:84:70:0e:8b:a2:6b:1f:65:a8:4b:05:b4:ba:
cc:f5:ab:41:4b:b3:6b:ff:2f:7e:81:16:64:31:b7:b1:80:ef:
50:59:2e:15:22:d4:be:8a:9d:81:5e:15:7f:93:fd:1b:97:81:
66:ac:73:6c:b0:6e:82:9b:2b:dd:c4:54:6d:eb:24:76:2e:e5:
bd:8c:05:a1:01:64:46:63:5e:22:41:9d:72:bd:df:43:da:b7:
4c:04:5c:bd:68:a2:f0:18:42:60:e5:86:aa:49:04:dc:a7:e5:
aa:3c:d9:af:5e:34:4c:02:f0:a8:2d:aa:45:4c:b0:00:71:55:
0e:94:ec:cf:4c:4c:48:f8:4d:d1:34:c7:05:31:94:49:57:38:
34:3c:e9:b6:87:49:17:cd:19:39:26:f0:ca:1d:11:50:57:e0:
a0:69:01:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:57:02 2025 by rpki-client