Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier: PNIJ+Jlk4UflXOWVamK+uOrkRrtauySfQEgRgtU+gRM=
Subject key identifier: 40:B8:0A:75:6D:2B:8E:3B:CD:56:48:98:85:17:E2:F1:CC:66:A9:77
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01995C7B96586EE89364EA37391D4728A518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number: 0CF7
Signing time: Thu 18 Sep 2025 11:00:27 +0000
Manifest this update: Thu 18 Sep 2025 11:00:27 +0000
Manifest next update: Fri 19 Sep 2025 11:00:27 +0000
Files and hashes: 1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=)
2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=)
3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: VLlVuEARxSbgcg8eNDyP/5ZthIuQnWz4+o4P+JAIvxU=)
4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=)
5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:7b:96:58:6e:e8:93:64:ea:37:39:1d:47:28:a5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Sep 18 11:00:27 2025 GMT
Not After : Sep 19 11:00:27 2025 GMT
Subject: CN=40b80a756d2b8e3bcd5648988517e2f1cc66a977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:2c:b4:3c:4a:4f:c9:f3:fd:4e:3e:1a:80:
0e:f0:5f:b6:cf:0d:1b:e9:e0:dc:d7:31:e2:36:91:
f8:56:65:03:c5:ee:e0:7d:7c:aa:c3:75:77:af:f3:
25:43:5c:89:21:38:ba:34:e8:6f:17:45:fb:ac:e9:
2c:d4:62:11:57:f8:00:af:ef:c6:7b:9d:fe:09:d2:
08:03:de:22:6e:0d:d5:30:62:cd:da:43:c3:00:de:
c1:ad:0c:18:11:84:8a:8c:ca:92:04:5e:c2:d7:96:
54:b3:e5:e9:61:eb:61:f3:2a:ba:bc:49:d9:2f:71:
3a:4d:93:f3:e1:a1:74:f5:5a:c5:c4:2a:c6:36:41:
65:46:c1:02:62:1a:43:cf:b5:58:2f:cb:6b:bd:e4:
c5:8a:2a:74:9d:8f:31:2f:aa:3a:ce:0a:4b:51:4b:
18:ef:8c:23:a5:f5:31:00:be:5a:89:cf:99:0c:40:
5f:85:23:22:66:f9:d9:b2:96:f6:2f:b2:32:e8:f4:
45:cb:2e:55:7e:5e:aa:02:bb:6e:6c:08:9f:b1:a6:
5f:46:4c:4f:5d:eb:f6:54:c9:f6:62:4c:5b:04:3d:
5e:f7:88:c8:b0:39:d9:4a:b8:f8:5f:d1:3e:db:7f:
60:05:1c:41:14:89:70:10:e9:02:b4:8a:6d:a7:8d:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B8:0A:75:6D:2B:8E:3B:CD:56:48:98:85:17:E2:F1:CC:66:A9:77
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6e:b8:78:9b:75:23:d3:85:14:ac:a2:59:16:d4:c7:a4:e2:
00:db:32:e3:df:ad:db:01:8b:d4:1a:60:25:ce:47:04:b6:1c:
72:d9:96:db:f3:62:6f:39:e4:36:66:ad:c6:26:c7:1c:db:a7:
bf:1f:0d:fc:c6:af:ec:98:e0:86:c5:5d:94:ef:d1:9c:2f:8b:
bb:99:ff:01:18:72:33:ec:40:65:d7:cc:87:a3:7f:7e:45:da:
1f:60:d7:37:e8:55:18:eb:7c:6c:e9:b9:d9:cb:76:66:16:98:
3c:20:e0:62:0c:ac:c9:9c:f6:a3:fb:6f:75:3f:58:5b:cc:50:
4a:01:f2:42:c4:7a:be:09:3d:b8:d2:53:64:4d:53:53:5e:cb:
da:cf:a7:b0:ab:40:8e:9a:eb:03:9b:c5:8b:0a:df:12:32:ec:
bd:16:3e:75:43:8e:d1:6e:99:65:fe:a8:97:97:0c:ae:63:b8:
16:a9:8b:d6:45:1e:87:b1:ad:64:fb:23:5e:07:b8:9e:d4:25:
f9:68:16:15:f0:0c:77:31:e9:ce:08:6b:e9:5a:37:c8:d0:51:
00:27:62:43:23:f9:7d:6d:9c:dd:5e:58:e8:c2:5f:2f:69:15:
83:34:d5:31:11:83:cd:d5:8b:11:c8:0e:7f:4e:60:75:10:d7:
a4:3a:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:19:54 2025 by rpki-client