Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File: NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier: JA8/A3SaH6AjT/FxYl3EMn/B1xg30u6StDvzYS7jb40=
Subject key identifier: 6E:1C:50:03:8C:C3:90:87:A1:D1:5F:CB:EA:53:03:01:1B:0E:00:17
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 019922C3303300362D6F40E1786BAF92C14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number: 06AB
Signing time: Sun 07 Sep 2025 06:00:41 +0000
Manifest this update: Sun 07 Sep 2025 06:00:41 +0000
Manifest next update: Mon 08 Sep 2025 06:00:41 +0000
Files and hashes: 1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: OaBccAIlf+dfiE7xtQe3UB+ul0RXwc/ipjv3lki5xQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:30:33:00:36:2d:6f:40:e1:78:6b:af:92:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: Sep 7 06:00:41 2025 GMT
Not After : Sep 8 06:00:41 2025 GMT
Subject: CN=6e1c50038cc39087a1d15fcbea5303011b0e0017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:ed:92:e5:43:e3:f2:be:46:a2:07:7c:af:
8f:29:61:fa:a4:4a:67:e1:85:f0:b7:8c:e2:8d:e9:
6d:15:c4:f2:7f:80:4b:d4:61:ff:2b:b1:cd:58:fa:
b4:28:fc:e8:c0:7e:c0:ca:c6:f3:d5:63:ab:3d:ec:
16:fa:25:75:19:c7:27:86:cc:2b:33:4f:e3:37:54:
d6:a1:5b:39:57:c2:eb:85:44:b3:82:aa:a5:46:0b:
2c:22:32:4b:0c:d1:38:03:c5:d1:84:05:b8:0d:9d:
8b:57:3e:20:77:f4:f6:20:17:f7:17:10:5e:b4:60:
6a:4a:7c:49:09:73:e3:99:5f:87:10:b9:47:17:6d:
62:97:f6:3b:31:7a:90:6f:66:a4:d3:77:1b:95:ae:
77:f8:ae:0a:b7:ce:41:5f:9a:d4:75:0c:2b:9c:c0:
cb:ca:d7:93:31:4c:2f:ff:a0:30:1f:65:0a:33:c5:
d8:48:af:2d:0f:9b:c8:14:58:a4:2b:ef:41:9a:96:
8d:bc:73:6c:4e:11:cc:27:0f:72:33:f7:f5:cf:82:
26:a5:17:0d:e6:24:d5:f7:ac:a2:34:92:95:2d:85:
36:82:a7:5b:2c:cf:07:da:6b:c7:a8:a8:d3:b2:97:
16:19:10:bc:c3:45:68:6d:b3:02:ea:12:7b:ae:ad:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1C:50:03:8C:C3:90:87:A1:D1:5F:CB:EA:53:03:01:1B:0E:00:17
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8e:ae:3e:c0:85:2c:85:2a:21:0b:91:f2:22:08:4d:fb:92:
36:1c:a4:99:cb:e2:2f:35:84:fd:bf:1c:fd:42:ea:82:ce:e4:
54:f3:ef:f3:08:ca:bb:f0:b3:62:18:70:f6:7e:9a:87:95:04:
ff:dc:28:f5:c6:66:45:99:14:e6:1a:8d:5c:d6:94:79:ad:67:
4b:c5:02:d3:de:fe:c6:fb:80:89:a6:52:93:cb:2c:45:8b:8b:
06:e3:10:2a:9d:3d:4f:ab:6b:76:26:b1:f7:46:08:b4:c7:02:
33:41:37:de:1b:06:be:d9:72:d3:58:ae:a4:43:35:50:52:3e:
03:cb:4d:cc:1e:8e:05:bd:fe:32:56:0f:77:07:6e:ca:91:bd:
e8:ef:ca:1e:2d:8d:9f:43:2b:2b:90:92:c4:39:dc:10:4d:e7:
ab:ad:30:4b:74:85:9c:44:33:d3:50:30:7a:5b:15:27:b7:e7:
d6:1b:56:7a:2a:31:2e:99:bd:60:6f:b0:07:8f:61:1d:29:c0:
95:1d:51:07:47:5d:56:94:8b:df:f6:71:c8:51:63:64:43:24:
5a:b1:4e:c9:1f:cb:bc:e6:e6:16:34:fc:b4:f1:94:0c:b8:1f:
9a:a7:3a:9f:bc:b7:92:f5:48:bb:7a:bd:5e:a5:73:5a:82:cc:
82:c5:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:08 2025 by rpki-client