Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: mAwpWPYCnckzt6f2AgMg3JIfHPVpUu0eP8vxUsE2jTs=
Subject key identifier: 94:CC:A6:74:05:AD:BF:8A:6E:9B:D6:26:F4:50:48:4C:C9:87:F9:8F
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 0198D54DDFA3A587BC7566830C61963D0B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 0CE5
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: 95tN6zWq8OQoTToTQ9NUv7I/wBnKmhRYBo/UqS0OuUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:df:a3:a5:87:bc:75:66:83:0c:61:96:3d:0b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=94cca67405adbf8a6e9bd626f450484cc987f98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:14:1d:cd:36:4e:8d:ab:54:8e:44:75:3e:
74:1a:27:64:d5:af:45:1a:08:68:5f:0d:ce:31:62:
f4:80:8b:a0:2e:d6:79:6d:73:e9:fc:7c:60:77:47:
b2:29:55:7f:e2:81:1a:f0:c8:e4:79:30:e3:f1:50:
13:b6:52:ca:c9:52:4a:e1:74:c7:f7:63:93:6c:1f:
82:74:e7:4e:0c:d9:86:8a:ca:27:b1:a1:d1:0b:31:
e2:43:77:30:11:4d:8f:76:2e:c8:92:1d:99:96:c7:
84:35:39:86:f7:6b:27:86:cb:d0:73:00:8f:a6:68:
90:83:1c:9c:3a:3c:0a:6c:03:a2:5c:74:9f:06:04:
7d:11:75:2d:bc:39:cb:eb:a7:8e:c3:49:b9:03:6f:
62:86:02:e3:55:c7:d9:d9:16:94:f6:76:c5:cb:c7:
63:8d:09:ab:14:ca:d4:c5:81:60:f8:8e:c1:1d:df:
fd:b5:5d:c8:5c:7c:3d:07:1c:32:06:92:0b:9a:b2:
cc:e9:83:bf:ce:ae:7a:42:8d:49:2e:a5:38:9a:69:
5b:27:d0:50:39:67:2e:a5:bf:61:f5:e1:3f:90:ca:
33:2b:49:aa:dd:95:75:f1:89:a4:a7:2b:d1:38:50:
55:75:27:a7:34:2d:4b:b6:e6:da:c9:a2:d4:18:b9:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CC:A6:74:05:AD:BF:8A:6E:9B:D6:26:F4:50:48:4C:C9:87:F9:8F
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:d3:95:ce:02:5b:8e:fd:9c:47:d5:56:e1:50:06:4b:cc:
57:0a:0c:76:7a:90:f5:42:2c:73:56:1a:26:74:0a:ca:3d:33:
bb:77:a7:a9:be:6c:02:dc:3d:dc:ae:28:95:b4:17:08:a9:f1:
23:33:e1:04:18:d2:66:e9:bd:ad:a4:49:2e:83:44:4f:4c:e3:
5a:ad:38:39:70:8a:e1:4e:b1:c5:44:88:2b:ac:37:bb:a1:f0:
6d:1a:64:9e:91:b4:82:e4:c4:90:61:ee:f8:0f:28:08:8e:e4:
ef:68:55:f9:c3:37:39:5d:b9:ef:2d:44:ba:23:4f:c9:a9:52:
1f:d9:ad:db:20:5d:99:2e:bc:d6:4e:9c:93:d0:36:a9:56:61:
ab:b1:03:77:57:ca:ec:da:bb:48:f2:a8:23:e7:8d:ca:23:1b:
7e:f6:0a:80:64:b0:0e:1c:9f:28:5c:93:2f:a8:cd:81:33:41:
42:fb:60:07:3a:3e:b5:87:9c:e5:fa:1a:da:86:59:9c:f9:7d:
a8:9e:17:3a:11:58:53:75:a8:80:71:7c:71:e5:7a:a3:29:54:
9a:6a:a7:9d:09:b1:83:38:d6:57:f2:e0:30:53:fb:9c:c0:67:
1b:04:d0:40:54:33:56:d2:0b:6f:19:69:db:b1:19:7f:51:ee:
3b:0a:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:23 2025 by rpki-client