Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier: WcY6q0u8JoDvCN0ISsM019f/y0oEo1cjZLePofevv7I=
Subject key identifier: 20:25:B8:31:F1:DA:0A:0C:68:5A:B9:EF:55:7D:35:58:F9:82:8B:70
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 0198D4E0A97860A37171BDC07C5E84952336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number: 0F1D
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=)
2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: L24OfR3zppxoj741/mSNVE6gMaTuJog6zpXo1WaSIsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a9:78:60:a3:71:71:bd:c0:7c:5e:84:95:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=2025b831f1da0a0c685ab9ef557d3558f9828b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:79:f3:a8:7f:b0:39:cf:97:f2:9e:f7:75:
fa:c4:f6:b6:d6:f8:3c:54:dc:92:07:3e:01:f6:f2:
3f:86:4d:1a:39:56:54:14:e9:4e:91:49:e3:42:bc:
e2:4a:79:34:46:87:38:a8:95:b2:bf:c9:c3:9a:d6:
52:22:2c:ea:4d:e1:01:02:68:03:7c:63:96:64:60:
67:08:bd:fb:e8:2c:fc:3b:28:76:20:2f:a8:a5:92:
49:e2:68:61:dc:ed:6c:5a:c3:f8:be:f2:60:5f:cf:
c6:26:d4:ce:2f:bf:ae:fd:f7:be:53:a7:b7:11:51:
e8:b9:84:2e:1a:88:2d:9e:02:c1:90:79:a6:e3:d4:
16:5e:51:5b:38:a1:ae:39:63:d0:ee:0e:49:39:46:
a6:b9:7d:ae:96:c3:a9:81:e1:d7:5a:dc:fc:ca:44:
1c:8f:b6:66:65:ae:4b:2a:51:e5:65:5a:d7:ca:b4:
f1:67:e6:02:33:f8:63:71:92:f7:9e:fa:9b:04:5e:
07:0f:66:d9:34:0a:2e:22:b2:fd:4c:b9:25:a9:c5:
24:40:76:b8:0e:16:43:e4:2b:c3:e7:d7:32:a6:fe:
6f:15:23:c7:66:e0:3d:19:a9:76:c1:b9:42:ff:da:
4a:63:aa:01:f0:4c:7c:13:cb:6c:10:e6:60:48:23:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:B8:31:F1:DA:0A:0C:68:5A:B9:EF:55:7D:35:58:F9:82:8B:70
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ee:7d:f5:49:7a:60:28:ee:8a:7f:38:37:a3:3f:1e:6e:7b:
a2:b1:6f:66:b6:66:97:ed:52:02:37:78:62:29:0e:c8:c5:d9:
5d:57:7b:4e:bb:26:d7:08:f6:ea:46:d4:5e:09:86:6f:fc:2f:
a7:7c:28:aa:6a:3e:98:72:88:6f:28:28:de:c2:32:ee:de:85:
c0:dc:11:55:51:38:f3:24:d8:a6:7a:54:e6:23:c6:a0:7c:1f:
d0:93:02:0d:21:59:22:78:68:82:e7:30:6d:39:db:c3:a0:98:
0a:d3:88:b5:84:80:ab:c3:c2:cf:17:31:be:cf:0a:31:50:13:
1a:dd:3d:9f:c0:38:a6:1e:b3:7c:7d:fb:45:94:59:ef:91:4f:
ce:df:d3:fd:c9:8c:de:06:8f:cd:46:03:f7:4f:f1:cc:64:5c:
6d:33:63:ec:63:29:ff:dc:08:ab:e3:2b:79:ba:18:97:01:9a:
49:2a:b1:85:5d:a7:57:c3:72:5f:39:45:1b:f4:e6:8a:75:33:
e3:dc:5b:c9:55:33:2a:3b:3f:ff:cf:ae:2a:fd:9d:fd:04:aa:
f2:20:69:cb:b4:dd:e1:72:b7:56:db:43:e9:54:4a:1a:09:9c:
50:8f:f0:85:d8:76:d5:bd:f2:64:e1:62:ec:fb:00:52:2d:1a:
a9:5f:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:32 2025 by rpki-client