Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: 1wyzHmw91tUIh4+cq2C6hlWDsxUjUImqc9kiCuZ3cuI=
Subject key identifier: DB:18:53:AC:C3:88:88:52:AD:BA:83:8D:6E:53:18:57:0E:0A:64:E7
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 0198D40465FC4D29108F70A0E138C15DAAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0DF9
Signing time: Fri 22 Aug 2025 23:01:54 +0000
Manifest this update: Fri 22 Aug 2025 23:01:54 +0000
Manifest next update: Sat 23 Aug 2025 23:01:54 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: shDvYFqSUvpOVo7lJeO3EX+RCgs1OWgkgaaKEYxDS6k=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:65:fc:4d:29:10:8f:70:a0:e1:38:c1:5d:aa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Aug 22 23:01:54 2025 GMT
Not After : Aug 23 23:01:54 2025 GMT
Subject: CN=db1853acc3888852adba838d6e5318570e0a64e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:eb:28:a2:af:ce:c1:ae:cf:33:ae:37:d1:
8a:d6:f5:62:d1:d4:c5:7e:76:0a:13:61:13:5d:d1:
9e:36:b5:60:8c:93:c3:04:f3:99:1e:39:b8:bb:7f:
2c:37:3b:9f:82:a3:32:3d:9c:27:82:d7:f7:e0:18:
32:5b:ea:66:e8:80:d2:1f:a5:72:21:75:d0:3b:dc:
84:1b:d4:9e:21:3e:c5:eb:cd:a2:e4:3f:c3:02:62:
6f:dc:a7:b5:4a:91:c3:ba:c5:95:4f:42:8b:c9:ee:
78:32:10:db:e1:c1:21:ec:82:0a:ca:60:96:66:01:
04:d5:42:29:d6:b5:d2:b9:e9:4f:88:7c:cd:5d:10:
5c:a9:7f:34:25:df:2f:d3:be:b5:51:d6:c5:88:57:
0e:63:85:a5:b8:97:65:01:ad:84:4a:8c:8e:37:5c:
73:8a:b0:ee:aa:a0:91:43:17:9e:15:d2:ae:6d:2e:
1e:ca:96:5a:86:df:25:cd:6c:d3:73:3f:0e:23:b3:
20:fe:c7:ed:c6:62:5f:70:82:c9:bf:4d:c9:3f:06:
92:d6:39:36:d3:7d:74:31:77:58:1f:b9:11:92:0b:
1b:8b:0a:a7:e2:f8:6e:5f:52:38:c4:cf:c3:ba:97:
85:1d:f6:35:7c:0d:66:1c:a0:52:0d:68:ce:32:9e:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:53:AC:C3:88:88:52:AD:BA:83:8D:6E:53:18:57:0E:0A:64:E7
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:62:2e:ec:60:e0:cc:c9:4d:b4:7e:5f:13:63:0d:cd:a5:ea:
d0:04:c6:72:bd:0d:18:c1:47:00:70:3e:05:b1:a3:fe:43:3e:
68:96:7f:0c:ae:46:a0:83:47:ca:e8:f3:c1:b9:1f:10:26:e9:
c7:c3:a6:4a:4e:c5:a3:e3:f6:31:b1:14:4e:fd:10:1e:aa:ac:
f6:f9:f1:48:3a:a6:5d:70:78:ed:4f:9b:e5:2a:07:9c:0a:9e:
e5:49:48:8a:6a:b3:eb:85:6e:fb:08:21:1a:80:28:27:5b:c2:
43:1b:e7:31:b6:40:cc:9b:1e:af:8a:65:c5:3a:71:e8:bd:c4:
f5:bf:1f:5c:fb:ed:1f:df:dd:3b:7e:2f:22:8e:5b:68:90:00:
38:8e:55:60:d6:43:96:6a:50:8f:16:8f:be:36:38:98:1d:c0:
d6:70:67:60:d5:a1:0d:be:ff:4f:a1:9d:c6:ec:2f:bc:0d:84:
6f:56:73:bf:ec:4c:84:e0:4b:9a:24:34:fd:0f:09:79:bd:34:
df:62:de:df:a5:ee:4a:64:8f:5d:a9:7d:69:4e:bb:e4:0e:6a:
d9:85:4d:16:08:b5:31:d3:26:a5:73:72:10:19:ca:73:bf:70:
65:23:7d:d4:f5:74:44:21:a1:98:ae:dc:0e:3c:91:0d:69:07:
df:87:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:51 2025 by rpki-client