Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: 5bEnCjsFoW/erQgKTYoQzIw8lsXy7qDODRaqllhf8ko=
Subject key identifier: 7D:6D:59:48:C0:9F:04:D9:34:B4:BD:29:50:88:DD:D4:5A:85:96:A1
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 0198D4E04C02E6381AC8E905DE6FA3DF535C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: w4ePGyPkTg1n5P+tlUKQH8Bc2HJL5xA6y+gPEpzxTzg=)
4: m01g-CBC5mmua20tUAtJoqGt3ww.roa (hash: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4c:02:e6:38:1a:c8:e9:05:de:6f:a3:df:53:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=7d6d5948c09f04d934b4bd295088ddd45a8596a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:86:58:90:41:52:ba:e3:5f:96:07:02:55:
1a:88:8b:a4:53:a0:1e:57:b7:1c:32:61:0c:58:de:
2c:a0:19:b7:ea:a8:30:18:b2:5c:93:a7:af:00:2d:
d4:04:a7:0f:ac:b7:0a:6e:00:00:16:6c:49:30:84:
19:c3:e0:c2:e1:e1:a5:14:30:58:82:4f:0e:f1:58:
3d:a5:2d:0b:82:84:cb:20:b0:fd:03:be:fc:cb:5a:
2b:d0:63:71:68:fd:ea:e1:4a:68:68:e8:6e:07:55:
06:c9:0e:8e:83:98:0c:48:c9:c9:da:d6:46:53:83:
f6:c6:71:c6:f0:71:7c:8c:eb:5d:8c:3a:40:16:75:
b8:6a:15:40:43:97:50:7c:64:00:0c:ae:ba:f3:92:
7d:8b:de:aa:d2:56:13:3a:a3:81:c1:8a:9a:2e:40:
0c:97:1f:2b:5b:32:a1:dc:dd:e2:10:a9:ba:21:b2:
c6:a8:cb:a7:63:f4:f0:f9:6c:dc:6b:fa:d0:bb:7a:
d7:60:db:eb:ab:c4:0b:2c:a7:03:4e:fb:cf:64:db:
e0:fd:58:83:38:1e:d6:75:1a:08:48:c3:f4:f8:45:
13:b9:7d:53:87:15:a8:27:7f:ce:f5:e8:48:12:43:
df:f7:af:00:c3:41:87:ce:5b:09:26:93:56:5c:ff:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6D:59:48:C0:9F:04:D9:34:B4:BD:29:50:88:DD:D4:5A:85:96:A1
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8a:b4:e8:66:21:04:10:75:b2:a8:ff:b8:87:21:3d:f9:aa:
66:71:cc:4d:61:df:c0:eb:39:ea:ab:f6:d8:79:cc:c8:9e:84:
69:23:80:8e:d9:2d:3b:bf:34:d8:26:7e:6e:8e:25:bb:c2:c0:
5a:79:14:13:71:41:99:08:75:32:31:f1:fd:8d:d9:ee:5f:26:
df:52:d1:26:69:50:aa:02:81:42:0b:f6:0b:d1:42:26:45:ca:
30:a5:bc:f4:28:24:83:d2:52:d2:c9:78:13:02:cf:b9:2e:dd:
46:6a:a7:74:17:b2:81:a9:9e:d1:a3:e4:2a:d0:ae:70:aa:ff:
35:b3:39:c8:3e:dd:e4:63:d8:59:d9:08:ee:d3:8b:34:c7:87:
0e:7f:af:9f:a2:d5:18:3c:66:a1:ad:2f:13:59:04:7f:68:56:
e9:2c:46:6c:d2:c5:f1:db:ba:55:5e:d4:3d:b6:6a:a7:13:87:
c7:19:2a:00:15:95:24:ca:f3:43:49:e1:87:09:2c:a2:fa:42:
0b:db:f8:80:08:cc:48:3c:19:c2:bd:37:97:56:6a:32:78:b8:
81:65:f0:a2:ba:55:d8:04:7f:7f:2e:ab:1d:57:7c:c0:4c:14:
c6:9a:a9:20:a8:c1:b5:04:1a:d6:71:1f:50:1b:93:c8:43:3e:
34:ba:7d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:00 2025 by rpki-client