Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
File: Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft (raw, json)
Hash identifier: CbKSnlZi93Ie3Vcnj8nvkiYSBmxAf5mwrU3xfmjDKao=
Subject key identifier: BA:68:D1:05:A6:DC:5F:72:AE:90:4B:65:B9:7C:45:97:DB:6B:6D:86
Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Certificate issuer: /CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Certificate serial: 01992367C3CEAF8E0F673BF0D7D2DD7FDD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
Manifest number: 9F
Signing time: Sun 07 Sep 2025 09:00:26 +0000
Manifest this update: Sun 07 Sep 2025 09:00:26 +0000
Manifest next update: Mon 08 Sep 2025 09:00:26 +0000
Files and hashes: 1: Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl (hash: JQv56EZ94Hu8MUDfrIZAovOFuT7aDKgaKyNYU++utJ4=)
2: _Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa (hash: f5+J7yt13fqQYgFUTN4kcse4XeHLgbH6pOCZG6b6MbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c3:ce:af:8e:0f:67:3b:f0:d7:d2:dd:7f:dd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Validity
Not Before: Sep 7 09:00:26 2025 GMT
Not After : Sep 8 09:00:26 2025 GMT
Subject: CN=ba68d105a6dc5f72ae904b65b97c4597db6b6d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:4a:3a:bc:56:a5:ca:81:9f:e7:1e:8c:75:
54:8a:14:07:84:50:c4:df:69:8d:61:e3:ff:8d:67:
61:36:ac:d7:58:fa:3d:d7:05:57:7a:cb:1a:63:f9:
8c:6d:07:9e:22:89:ac:56:b6:1e:86:b2:91:8b:72:
80:72:1f:19:a8:87:fe:95:a1:dc:59:7f:cd:f4:fe:
3c:68:28:5a:cb:00:c3:53:02:9a:fe:a0:7b:be:6c:
44:d8:3d:70:60:9d:24:37:b3:1d:ff:99:8e:ec:2a:
b6:62:61:9b:95:65:7f:a2:85:b8:b1:97:03:e9:6a:
8d:da:35:85:09:8c:74:38:a1:28:22:44:0b:8f:33:
4f:10:d6:61:85:2a:0d:2d:d7:44:58:50:e9:39:ea:
79:61:36:ee:83:f0:54:b6:c2:f6:fc:5f:9c:ef:89:
fd:7e:99:e7:64:b0:45:57:ba:8b:a7:ba:04:80:85:
dd:73:d2:ae:90:e6:01:ed:42:51:87:9c:fb:6f:6a:
e6:e9:06:34:c9:6b:4e:d6:1e:b1:60:01:54:50:45:
c1:76:a9:2a:6b:6e:42:31:8e:b4:48:9b:93:f5:63:
5f:46:8a:c7:fb:a4:7a:92:d2:f6:dc:1e:34:6d:aa:
02:bf:83:1b:b4:33:d0:d4:f0:4f:c0:b8:e4:c6:73:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:D1:05:A6:DC:5F:72:AE:90:4B:65:B9:7C:45:97:DB:6B:6D:86
X509v3 Authority Key Identifier:
keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f5:60:d3:36:97:7e:22:67:a3:ed:6d:8f:20:3f:24:7b:48:
ed:db:de:d4:4e:49:16:cc:89:9a:14:a4:0b:f6:a5:5b:a4:1c:
03:69:29:94:c2:e6:71:dc:88:ac:d8:2d:91:7c:09:b1:31:af:
e7:ea:95:02:97:5f:ae:53:07:1c:d1:e7:6d:68:16:f3:29:69:
d8:a1:58:22:5b:50:d9:54:db:70:d6:f9:ca:04:bf:be:d3:2a:
59:30:62:0d:e8:ce:71:cf:48:ff:33:1c:a5:6c:a4:cd:a7:46:
34:3f:65:7e:81:6f:db:b0:33:59:39:69:04:c6:98:8d:c5:0a:
1a:92:de:bd:71:07:58:ef:da:8f:a9:3e:b1:e5:22:7d:95:4b:
a9:40:35:87:c4:71:66:4c:04:98:16:79:af:16:74:d9:67:1b:
9a:39:e7:dd:29:8f:c2:d3:68:77:8c:98:3d:e4:27:dd:46:ee:
3f:02:de:1d:08:94:69:40:b3:44:d7:c0:74:1c:7c:17:ee:c6:
2a:df:eb:fb:40:47:87:df:f5:00:31:e1:2a:6e:c4:14:8e:f1:
ad:b5:52:e9:16:37:eb:ca:e9:32:12:33:98:31:52:88:64:95:
44:fb:68:64:47:fc:6d:c7:7a:85:fa:59:27:40:e1:df:63:4f:
eb:af:42:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:20 2025 by rpki-client