Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: 9Cwr9xU9iWYONDQog1HRO8/AXahSozJRY7hkTcQfzBo=
Subject key identifier: 6F:56:2A:9B:A0:C5:24:52:FA:99:98:78:90:D5:27:D6:C7:19:A5:C4
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 01992DEBFAA9708C6B8DABF550F81DCB6FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 02B6
Signing time: Tue 09 Sep 2025 10:01:03 +0000
Manifest this update: Tue 09 Sep 2025 10:01:03 +0000
Manifest next update: Wed 10 Sep 2025 10:01:03 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: rDJI1G2vSMeKNK/S+h9xEvAbfdG7tUNFbq35oPLuRLQ=)
2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=)
3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:eb:fa:a9:70:8c:6b:8d:ab:f5:50:f8:1d:cb:6f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Sep 9 10:01:03 2025 GMT
Not After : Sep 10 10:01:03 2025 GMT
Subject: CN=6f562a9ba0c52452fa99987890d527d6c719a5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:b7:f7:15:df:59:17:7c:4e:75:94:e1:da:
a2:cd:ef:e9:c3:be:59:86:0e:79:2e:d1:96:ff:75:
cb:30:3c:7c:40:f2:ef:40:80:c2:d6:d0:0c:14:57:
51:0d:52:1e:26:5e:98:d2:da:c1:80:08:29:49:97:
a7:c8:1a:ae:45:61:9f:73:d8:8b:b3:fe:2f:fa:8c:
08:e2:ee:dc:0f:da:ca:b4:6c:b0:fb:31:87:bc:82:
f1:40:29:0a:59:63:7d:c7:ac:d9:67:39:b4:ec:7c:
1f:76:48:08:50:02:d9:fc:36:b8:90:56:c0:55:70:
22:0b:fb:f8:8e:00:2e:1b:49:76:3d:b7:96:3c:96:
84:2f:84:57:88:74:2b:f8:2a:a8:28:3f:ef:de:e9:
2f:16:74:7e:28:d9:71:52:b1:52:ba:4a:e3:62:4a:
1a:44:00:78:9a:73:de:8e:c6:d2:f6:58:99:29:87:
5f:98:3a:46:63:9a:6a:b8:15:8b:39:6c:86:7a:70:
cd:1a:be:62:98:4b:d5:1f:9f:24:ef:ff:a7:d0:b2:
02:c9:13:67:9f:e1:d3:a4:1a:fa:81:6b:78:92:60:
90:f0:a2:d0:b5:90:6c:84:3a:38:d0:dd:f4:62:48:
1d:07:41:fc:00:d0:4b:e7:a9:62:a8:17:d1:54:89:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:56:2A:9B:A0:C5:24:52:FA:99:98:78:90:D5:27:D6:C7:19:A5:C4
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:dc:0a:c9:f0:2c:a0:6b:9d:0d:d9:ad:08:c1:d9:12:8f:
c5:b1:1e:96:e5:4e:84:bd:a2:f1:e7:af:8e:10:0f:b9:ac:20:
42:10:f8:f5:ad:d1:e4:12:1e:c2:40:89:30:6b:80:ae:74:c1:
00:10:42:6b:a3:8d:e3:42:a9:a8:89:79:24:7a:56:c2:88:cc:
01:0e:4e:e9:fb:f0:36:35:2b:bb:dd:91:bf:75:a1:ef:a8:82:
f8:55:62:9e:33:e0:8b:ff:98:8b:eb:db:58:f1:10:2c:9d:9c:
d8:70:38:3c:f5:7e:1f:26:49:0d:f8:e1:08:1d:1e:5e:6c:1d:
33:ba:50:42:71:f1:f6:d4:cb:7a:49:b8:fe:28:20:a6:fe:35:
db:5f:f8:b8:33:4a:ac:89:1b:f7:2c:d2:53:03:ae:cb:66:0d:
7a:d4:f0:7f:39:44:cd:53:08:01:39:f8:f7:7d:65:a9:8e:28:
be:c2:6a:e0:13:ce:f4:7c:23:67:e3:cb:72:6c:c2:db:59:ed:
a8:38:8d:fe:ab:bd:9b:c8:f0:6d:58:ca:d3:44:73:74:01:b0:
3a:65:cf:c6:05:3a:b1:9d:96:7c:68:13:20:25:32:ef:bc:31:
fc:72:21:15:78:35:aa:ee:4c:19:14:fc:4c:71:b7:0c:db:ff:
22:ed:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:48:48 2025 by rpki-client