Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: j8Vfq8Sfomfsk8sRRnUym5qlZuQk/ON3ILVZ39bfirw=
Subject key identifier: 92:3E:3B:C2:FA:D7:81:1F:8C:BF:A7:58:39:79:D7:E4:30:3D:EC:A2
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 0198D698186CC2D0B2E1BDB5D90FE9AD787E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 0ECC
Signing time: Sat 23 Aug 2025 11:02:28 +0000
Manifest this update: Sat 23 Aug 2025 11:02:28 +0000
Manifest next update: Sun 24 Aug 2025 11:02:28 +0000
Files and hashes: 1: IhSZr0Z9WAryW3beq7rPy6X_4sU.roa (hash: 14IyrHQZmrwmRvkqbCvXFLBTUIcbof5P325HFm3nQa8=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: 9d1FGzvlpBe85gj89JYE+2vXnz1u/tgFrlbhgFzLjJc=)
3: Yzl-TsBruLbp6clu7Q2IexOaQIA.roa (hash: h8cj0MpyodNclAF4X/OllC8+HNKuBQ3B2EFgEqM9+5A=)
4: Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa (hash: jvis9yjIVYHSkVBmx62d0kYrYZu0QAElVmLUpHW0GZM=)
5: fSqRfFQj3Q__dsTUhVMBI1HPSHg.roa (hash: Y+WWgHfgxkTIhIEndSO+xaSkFkDz1wgH6w0m5aWvWfU=)
6: pI3W8C1ZxuPusTptKHP1u0YPtbM.roa (hash: CThv60vq5lrTC7BFI5QFq4GFsEIpVjwpFNsuFKoLpYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:18:6c:c2:d0:b2:e1:bd:b5:d9:0f:e9:ad:78:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Aug 23 11:02:28 2025 GMT
Not After : Aug 24 11:02:28 2025 GMT
Subject: CN=923e3bc2fad7811f8cbfa7583979d7e4303deca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:67:67:6f:65:01:8f:12:1f:5d:a4:18:ed:
4e:a9:1b:87:30:c4:6c:76:e2:ed:5b:4f:c2:0e:f1:
73:c7:7d:d5:0f:a5:3d:be:1a:8f:36:b1:f9:f0:f5:
40:49:eb:16:11:70:84:c9:99:cd:63:e0:9e:5b:78:
8d:93:c1:10:75:39:db:e6:15:eb:94:17:f3:48:2d:
e8:e2:e0:cc:38:68:fc:75:0e:fa:0f:87:b5:0b:4f:
ca:76:75:84:01:a7:c8:97:f2:08:fb:9f:f4:7c:2b:
75:bb:d6:24:72:86:29:3c:8e:d1:b0:5e:c4:f9:42:
2b:f3:8a:a4:68:a1:e5:48:69:ea:49:8b:06:ad:d4:
1d:65:f0:b4:c4:3e:11:c5:0e:c7:d0:51:b9:49:7f:
91:3c:67:1a:80:05:20:d7:1f:83:98:a5:60:2f:0c:
e3:6a:8a:7c:67:d9:81:7a:63:a8:87:a8:8c:be:58:
4a:09:73:ff:13:5d:38:51:f8:56:d5:7d:df:01:c0:
a8:39:5b:7d:a4:94:1a:0a:6d:40:20:95:f2:93:ca:
59:d0:02:83:6a:a6:a7:78:b9:84:de:97:a8:b3:78:
72:72:c3:f6:bc:dd:27:46:ed:80:8b:7b:2f:30:6b:
3e:d0:42:4c:84:2b:c4:5f:51:fb:03:b7:9c:c1:5b:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:3B:C2:FA:D7:81:1F:8C:BF:A7:58:39:79:D7:E4:30:3D:EC:A2
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:54:40:14:17:66:71:0b:94:cf:2a:17:b5:32:ee:62:80:a6:
21:7d:b6:45:ec:5c:74:30:85:4d:bd:98:03:66:5a:3b:99:41:
91:b9:51:d1:c6:6a:fe:6c:27:7e:ed:65:ad:70:01:e5:c2:75:
2b:92:30:10:17:93:a1:f2:53:cc:c8:04:80:e9:f9:49:83:2a:
8d:e7:73:a9:fc:e3:2e:7d:cd:0a:89:e2:65:d3:e2:81:7e:2e:
48:d4:a2:59:81:46:70:f8:80:e2:7d:78:d5:b3:ad:5a:bc:47:
4a:55:af:81:b8:f1:ed:35:de:5a:01:b9:06:58:ef:ba:e5:9a:
df:a3:e6:e1:ef:ca:0a:61:73:b0:24:da:d5:c0:6c:96:94:c1:
21:d5:46:e7:1a:96:79:a3:97:ee:9b:6d:bb:81:a9:9b:f3:6d:
8d:ec:08:cb:8b:05:96:34:99:7b:ef:50:09:9a:21:a1:2c:11:
c4:34:1b:f7:88:e9:7b:6f:62:e5:49:ce:42:12:9f:22:ee:0e:
c8:85:cd:80:e0:bd:75:82:c6:68:80:ec:a8:11:a7:c4:4e:61:
a0:c4:c3:9f:41:6b:4e:f9:30:3f:67:7b:d4:de:bc:5d:2f:0e:
00:e2:03:dd:c2:21:5c:76:c9:c4:1c:60:38:64:51:04:f7:6b:
4b:35:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:03:05 2025 by rpki-client