Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: tqww9860awPYJ9eFDKRli+dz6T/bKV8xe9Hhb+9ySCw=
Subject key identifier: 64:EA:3D:45:D5:14:2A:C1:67:2E:84:12:8E:F1:BE:84:79:AD:56:3B
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 0198D54E0DA36A6EFB8A20E8D675D4E995BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 1010
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: pHN8BlH+vcH3dSuPmlCnEXj3FX6oLQav1Y8oVXFPVgY=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0d:a3:6a:6e:fb:8a:20:e8:d6:75:d4:e9:95:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=64ea3d45d5142ac1672e84128ef1be8479ad563b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:68:31:4b:91:d0:a9:19:0b:39:b8:31:3f:
a4:88:71:d4:55:08:4b:99:a7:70:94:b1:88:5f:f6:
34:0a:fe:56:6b:17:64:32:9e:ed:fc:12:41:39:de:
dd:1d:b0:1c:c5:f7:a5:07:6f:76:92:cf:e4:3e:92:
4f:06:03:52:75:8e:bd:ee:8a:8d:19:a9:4a:90:3e:
02:9d:c9:c1:fd:c3:f6:75:1d:a3:5c:89:2e:e5:a5:
47:8e:46:d9:de:2a:81:92:83:8a:69:cb:96:e3:9b:
2f:19:a1:e0:90:fa:63:7f:e6:69:b8:5f:c4:fc:e2:
ea:8b:e8:64:77:fc:2f:52:c5:9c:30:49:19:fb:51:
a5:43:cc:d1:1b:6c:bf:95:69:ca:82:a0:4c:11:86:
01:b0:69:03:a1:5d:82:ba:75:e0:77:bf:3a:ba:0b:
d7:da:64:cb:62:0c:ea:a9:03:65:52:6e:61:7d:bd:
bb:3c:23:8c:08:66:c9:0c:56:8e:7f:38:4d:c9:0e:
34:7f:fa:8e:13:89:88:f7:e2:b6:f3:ad:fb:78:f5:
d8:7f:a0:17:42:49:99:81:10:a1:ab:f6:74:98:0d:
4c:10:90:1c:7b:a0:d5:c7:b7:36:9f:64:af:2b:46:
4f:f6:c2:66:c0:03:71:97:06:64:ce:a9:5c:a6:f1:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:3D:45:D5:14:2A:C1:67:2E:84:12:8E:F1:BE:84:79:AD:56:3B
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:27:46:00:de:18:88:24:87:e2:99:53:ed:92:cf:1d:e0:71:
5c:97:45:a7:d4:80:6d:b8:c0:b2:b2:10:e3:0c:eb:d6:8c:9c:
87:af:55:c6:60:39:83:04:41:f8:64:05:31:d3:75:84:e8:e1:
24:10:79:2d:21:c5:ad:a5:4e:c5:9e:d6:05:56:0c:f7:10:e1:
85:b0:98:21:0a:40:8e:48:56:b1:a0:6d:e4:3c:0b:ac:68:c7:
34:6e:96:a9:88:3a:92:22:34:69:61:bc:86:1d:85:09:07:ea:
24:60:73:05:13:98:c8:9d:6a:36:55:22:47:2b:fd:6d:44:ce:
2d:2f:91:35:33:99:2a:92:f8:bc:1d:f5:08:a6:2e:2e:a1:6a:
6f:43:45:fe:0b:f7:63:6c:51:50:82:30:95:e9:63:a2:df:c6:
c5:dd:9a:23:e9:91:11:e7:48:44:37:fe:e1:d9:d4:aa:5c:2f:
4a:99:59:17:bf:1c:e9:74:b4:ae:40:fe:fa:32:b9:7f:d5:98:
f0:40:e8:14:54:df:08:f9:80:2c:12:02:10:52:d8:ff:af:4d:
85:9e:b7:99:cf:c5:fa:4f:d0:8c:07:7d:cd:01:86:7f:a4:29:
7d:dd:a7:49:cc:ed:40:4b:c4:c1:d7:a4:16:d9:3b:b0:1e:01:
af:25:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:27 2025 by rpki-client