Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File: nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier: U+IT51DIz/p1+iMyE60lrRgp3KS1eiv/g7wfIeuyfTE=
Subject key identifier: B3:FC:D7:7A:31:01:B7:87:DA:0F:2C:93:A9:FF:36:9D:A8:6C:6C:0B
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 019860C905E9BC10ECA173C32299465FFD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number: 15EC
Signing time: Thu 31 Jul 2025 14:00:43 +0000
Manifest this update: Thu 31 Jul 2025 14:00:43 +0000
Manifest next update: Fri 01 Aug 2025 14:00:43 +0000
Files and hashes: 1: 7OjUVrWvd7B0o85DaKLfYgEDYYg.roa (hash: ElsP3+WGZy5wELbMJiGSwWwzyGB160S3FayAOyAR3A0=)
2: 8fw2tBPm8-dk07FF86WEj68NsSM.roa (hash: 9R57W9brfUx0SayL8ULp3+gRula33F2inaK6dFDPaew=)
3: JUWn6tZ6js3OQBG2kVmBzCYaASs.roa (hash: ZWaMncDoxletMNjHKIW8FwbEakDn9YubUJeGI0AcYdQ=)
4: miGTaFk5Cl8OYVzdHPitg-4uIW0.roa (hash: AGqT78lBpkV9yA91ZQMLyqGPYCLhxFGELYf24q65eEw=)
5: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: mXDt/JkoER0v0S9mpg0LyMGf3OwdC4zUy2Jrie2ilBU=)
6: q06qTUv5-JCRpItbJ_9COQqHH6A.roa (hash: elj4UEL+GeLcIcxtH4+ahp+BuvQR4jhMQkNkTFsz2eM=)
7: zn7RiYTFSuY_H6EW4hkd0ugXhg4.roa (hash: TjPxbEKTKC4G0EExaKEE++vAM3LyoGQfvbpHNfpM9R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:c9:05:e9:bc:10:ec:a1:73:c3:22:99:46:5f:fd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Jul 31 14:00:43 2025 GMT
Not After : Aug 1 14:00:43 2025 GMT
Subject: CN=b3fcd77a3101b787da0f2c93a9ff369da86c6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:b3:ce:0b:6b:f7:8d:5d:66:69:6b:1f:95:
91:b2:68:38:e3:33:99:44:ee:79:8d:d2:b9:92:62:
83:60:19:01:3d:fb:62:6a:3a:fa:27:ea:19:fe:65:
44:92:89:f9:19:cc:3c:a8:90:79:09:34:31:42:0a:
d8:2e:c0:50:ba:a9:4d:28:6b:04:f4:0e:e9:f3:69:
94:0b:d1:8f:05:5e:54:49:be:17:91:53:01:97:d8:
9a:03:d2:73:b5:5f:27:7a:a6:bf:25:e8:b5:ce:ea:
b2:00:9c:7e:06:f4:79:f3:b1:d4:7e:0e:e4:fd:ea:
61:55:3e:52:2b:55:80:d1:99:3a:dd:b2:08:ee:e0:
89:98:20:d1:20:6e:38:95:93:8d:b8:d9:c6:0d:54:
17:33:f1:17:fa:9d:57:84:34:af:4f:c8:4e:cb:89:
f9:ff:5e:c6:19:11:f2:d5:3b:80:da:ce:bd:70:8b:
ec:bf:c9:11:78:78:ed:1e:ed:a8:ce:d7:27:03:bd:
cc:eb:dc:4c:30:20:4e:dc:a0:c6:e9:50:93:0e:f2:
87:50:aa:9c:d3:f2:13:e1:4c:99:4d:b6:24:74:96:
46:17:fa:61:48:dc:0f:07:9a:ff:dd:76:0f:9c:82:
3f:f6:08:99:98:c6:af:74:1e:ae:aa:52:ca:d2:e3:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FC:D7:7A:31:01:B7:87:DA:0F:2C:93:A9:FF:36:9D:A8:6C:6C:0B
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d4:d6:15:51:48:09:80:e4:30:9f:0f:00:d1:15:60:a3:16:
52:f1:5f:af:ff:c2:d3:5b:2a:59:fc:a1:fa:95:ab:ea:79:28:
28:0c:87:04:df:f6:ad:9a:85:b6:73:94:c0:74:b1:9f:d1:a5:
25:4a:4a:a8:40:4f:35:06:d1:eb:71:5f:ca:42:3a:65:44:8c:
92:23:47:97:bd:d1:87:4a:08:67:05:36:87:75:8c:42:84:d7:
ee:86:d7:aa:69:69:a8:94:36:b8:b7:7a:03:25:53:ff:2a:fb:
a0:01:37:89:bc:67:7a:34:fe:0a:8e:69:6f:d5:76:2f:36:34:
f4:6f:ad:5a:f0:49:e0:37:9c:03:d3:2a:97:ca:01:51:dd:44:
a5:f1:71:63:ec:9a:00:75:18:61:7f:23:91:03:c2:22:ac:e4:
75:e1:81:9b:ae:79:ab:1e:b3:80:d3:96:6b:8f:de:44:fd:d3:
56:47:0f:cf:de:ff:ef:a1:79:43:bf:7c:4f:49:a1:d9:8f:ce:
44:00:1d:df:a2:c8:e2:c1:74:93:54:c0:f8:46:f1:50:65:74:
89:5f:d1:3a:ff:33:63:40:c5:eb:b3:98:b9:ed:59:0d:f1:7b:
d9:e7:f0:ab:53:f2:e3:ee:5b:dc:de:c9:53:e1:60:5c:4f:f0:
5d:e3:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 18:09:21 2025 by rpki-client