Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: dg9X7LMgdYoByZ+RqtOfkoIPptlTW14cgD+pFCos3lU=
Subject key identifier: 87:44:9F:44:43:C0:BE:E4:56:7A:C7:0E:CF:A3:8C:B3:C4:AE:69:2D
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 0198D4740962AA22C84DEE75BB708F7CF6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: 0197
Signing time: Sat 23 Aug 2025 01:03:51 +0000
Manifest this update: Sat 23 Aug 2025 01:03:51 +0000
Manifest next update: Sun 24 Aug 2025 01:03:51 +0000
Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: 48Ry+icTjcokV4IxhqNEOjo3DzRi8lCNSw51Ucq/zTY=)
2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=)
3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:09:62:aa:22:c8:4d:ee:75:bb:70:8f:7c:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Aug 23 01:03:51 2025 GMT
Not After : Aug 24 01:03:51 2025 GMT
Subject: CN=87449f4443c0bee4567ac70ecfa38cb3c4ae692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:fc:10:5c:19:70:d3:b2:be:10:d8:f6:89:
21:31:74:b0:c0:33:3d:ee:0f:e2:52:15:eb:23:42:
ed:76:5f:ed:43:ea:2b:17:14:cf:10:94:f3:66:d0:
9a:5a:e6:12:f0:0a:aa:ad:24:b5:95:8e:c6:f3:c9:
22:98:fb:3a:ae:fb:46:09:84:f4:ef:af:4a:cd:c4:
d7:42:5c:7f:e3:29:aa:92:34:3c:b6:86:40:f9:97:
46:35:32:a3:2e:d0:7e:55:83:fe:00:20:26:8b:11:
7d:86:1b:cb:d0:2d:c1:02:54:a9:e2:fd:9d:81:e4:
1a:c2:af:5c:35:d5:46:b7:3a:87:02:39:60:bf:59:
fa:e8:31:de:6b:cb:1c:86:87:0c:f1:79:e2:ea:2c:
0c:8d:05:13:0a:32:99:1d:a0:9a:31:34:c5:89:2a:
f6:5b:51:04:1e:83:9d:77:7b:de:e7:ef:5c:21:49:
0a:38:3b:ee:dd:b2:9f:9b:e5:bc:f9:ec:1c:3a:fd:
09:7d:1e:22:a8:f6:64:1e:74:4f:62:35:23:9d:af:
db:ab:51:ab:a3:d1:88:83:1c:8a:b8:56:7c:e3:59:
33:c0:28:24:a1:c3:54:ad:59:2c:15:0d:6a:39:89:
fc:fc:34:98:cc:aa:66:98:38:09:70:56:c6:fd:a7:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:9F:44:43:C0:BE:E4:56:7A:C7:0E:CF:A3:8C:B3:C4:AE:69:2D
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:dc:0c:45:10:0d:fb:58:65:6d:1c:34:52:76:23:bc:d0:62:
f1:1e:e0:eb:ee:99:b7:0b:a8:d8:2a:d7:c7:3a:33:e6:3b:31:
73:f2:16:d0:c7:73:ca:7e:9d:ff:ea:29:1e:21:4b:d8:6e:86:
31:a4:c0:1e:c2:4d:08:b6:ac:73:b4:4d:ba:46:58:85:08:5c:
8b:7f:5b:96:43:00:a6:4a:66:de:e3:3c:66:3d:31:98:f7:6a:
8e:3c:9d:8d:9c:5a:1e:7e:30:51:a9:bb:3c:16:81:39:c6:16:
e2:c6:8c:1b:30:47:b4:37:23:51:d0:3a:9f:23:32:f0:49:c8:
e9:25:fb:3b:57:87:ba:d9:75:a0:e7:6c:ae:60:f3:7e:32:e6:
d7:d5:ee:25:70:43:e1:1f:23:e2:22:84:e7:a2:00:93:43:79:
56:23:8b:f3:19:4e:2a:75:79:9a:7d:91:3c:b8:de:2d:51:14:
6b:7b:f2:19:75:a3:35:5c:71:8f:d5:05:f5:53:c7:dc:e8:15:
c4:8b:b0:cb:e8:79:da:98:3f:60:93:8a:49:a4:16:e2:59:16:
0f:4b:91:3c:c1:d4:5f:87:cc:32:88:dd:b4:b8:54:ba:c8:50:
32:ac:e5:87:d0:08:a9:0e:c9:04:0f:14:ee:c7:02:e5:62:82:
47:88:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:28 2025 by rpki-client