Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: lAXqHdquodE5HW7XRVtrsW08H88L5fUvQhfI/SRv1rQ=
Subject key identifier: 99:B9:D1:3A:7C:58:D4:FE:06:FF:8C:75:77:B5:CC:18:BB:9C:B4:BD
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 0198D7A8D9BD727698387436E621BB25B8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0A20
Signing time: Sat 23 Aug 2025 16:00:23 +0000
Manifest this update: Sat 23 Aug 2025 16:00:23 +0000
Manifest next update: Sun 24 Aug 2025 16:00:23 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: TrRs7dJvFXvaZWzBfatbfvy4scmlC71kt1nE+w96wPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d9:bd:72:76:98:38:74:36:e6:21:bb:25:b8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Aug 23 16:00:23 2025 GMT
Not After : Aug 24 16:00:23 2025 GMT
Subject: CN=99b9d13a7c58d4fe06ff8c7577b5cc18bb9cb4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:03:53:4d:32:23:b6:cf:15:38:9b:ee:9b:
e7:e2:4f:ab:d6:8e:d6:b2:2d:ab:03:00:7d:d1:59:
8f:d1:ff:c4:56:59:ad:d4:8b:48:7e:ff:d3:c7:aa:
fa:d2:57:a8:38:dd:5a:13:1e:8a:dc:f7:b0:f0:c1:
5a:6a:50:7d:b9:1f:ad:5b:32:7d:85:ec:df:07:fe:
a0:b8:64:7a:d7:8b:98:cb:15:35:fd:73:c5:ad:d3:
e1:dd:d4:29:ea:cc:d2:54:ac:f3:5b:a5:99:48:6e:
49:90:6f:25:83:80:ae:9a:67:77:eb:02:9e:e4:b6:
af:fd:74:6a:5e:e7:80:9a:ba:0b:49:12:74:cc:00:
32:ca:c5:27:0b:7c:b1:d5:c2:af:ba:78:1b:76:a8:
54:c5:5e:74:db:aa:35:79:66:1d:dd:f0:b0:ea:10:
9a:16:66:78:f8:22:a7:19:46:62:1d:1b:cc:24:fb:
e5:ab:df:9f:2e:67:0c:ec:4a:9f:e2:fa:97:17:20:
39:1d:ab:59:25:30:26:f2:4b:e5:0c:43:fb:c9:4d:
4d:67:34:0c:ed:43:f4:46:5b:bc:02:d0:51:ce:80:
30:09:9f:9f:09:f8:64:b3:4c:29:1c:43:3c:55:87:
73:4f:5b:25:22:83:4f:91:ea:26:8d:ee:8f:3e:41:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:D1:3A:7C:58:D4:FE:06:FF:8C:75:77:B5:CC:18:BB:9C:B4:BD
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:38:9b:d9:b8:eb:8f:1c:05:01:3e:6a:9e:b8:1c:56:0a:
d7:8f:95:8d:97:ea:42:4f:d0:25:89:2e:ec:f7:bf:05:84:c8:
64:f0:3f:8b:e7:b8:4e:83:fa:9d:c2:80:ab:c1:14:24:56:e0:
c5:8c:ef:89:83:74:43:e2:6e:38:05:fc:56:08:20:40:5f:8d:
df:36:55:25:ec:cc:7b:2d:d5:4e:ec:e8:87:9f:17:eb:52:04:
66:fb:aa:f5:ca:03:98:07:c1:ed:2e:87:9f:67:61:08:91:a2:
6f:12:83:2f:87:25:f9:22:e3:f5:0b:a0:a0:74:69:56:df:55:
86:90:cb:bb:4b:69:3b:4f:43:dd:70:de:99:20:5c:87:2b:ab:
7e:18:99:4c:48:c6:b1:29:00:d9:95:6f:9d:90:b4:15:88:de:
66:94:88:60:f4:53:01:4b:2f:48:37:8f:7f:a4:57:db:0d:13:
10:16:8c:58:f5:a4:60:21:3d:4b:7d:80:cd:1e:82:78:b0:5e:
ce:4b:6d:e4:66:17:fe:28:5a:36:ca:06:7e:06:59:e9:56:1d:
b6:6f:6a:5c:e2:d4:c2:98:e7:e6:51:b2:cf:4d:22:ed:a7:df:
59:89:c8:bc:83:81:e8:e1:34:7b:25:c8:55:04:2d:ce:2c:f7:
cf:a8:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:48 2025 by rpki-client