Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: 3t6nQmwc2jHnOonm/iv05zCciqThYAM5nGkolkjQzrs=
Subject key identifier: 08:6F:E9:36:B4:08:BC:7E:6E:27:CB:20:BE:11:61:02:16:07:95:D5
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 0198D5BBBC8140B2BC4F862A6A56B6FFB196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 0BBF
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: qq/1ZR2hH8z87DFB9YEihUa8O0/iueYs6IXunre7RUw=)
2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bc:81:40:b2:bc:4f:86:2a:6a:56:b6:ff:b1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=086fe936b408bc7e6e27cb20be116102160795d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:44:c6:29:09:82:24:20:01:67:f0:2a:c4:
71:6d:f0:12:e5:e5:aa:e9:6d:f1:1d:a2:b6:da:ef:
37:58:20:8b:73:6c:43:57:fc:cb:95:17:58:ca:c9:
56:0f:d2:e3:d3:d8:ec:a5:f3:a4:86:87:2b:ec:45:
aa:78:51:07:b3:73:99:f9:68:e0:57:97:4f:1a:f3:
89:40:67:c5:5d:2f:78:be:71:64:72:be:45:50:2c:
01:ae:70:55:10:03:0b:00:7b:47:3b:c3:86:45:42:
18:81:9e:47:f9:16:92:56:5c:2d:cb:62:3a:fc:77:
76:bb:db:aa:e8:5f:94:14:af:73:d6:e2:3b:5e:a8:
b4:28:b2:9f:a5:1f:e7:4a:2c:18:69:3f:af:a2:c7:
ca:30:39:62:73:08:9e:79:99:40:88:99:5b:8d:3e:
0e:f6:1d:a7:07:11:06:bc:33:c6:4a:e8:60:0e:a7:
56:46:dd:74:c8:ea:66:95:f0:ef:99:51:76:a3:5b:
9d:fb:5b:fe:9a:23:e2:25:6a:e3:46:57:55:e1:79:
eb:71:a7:b2:f5:0b:a2:0c:29:0a:2e:60:49:2c:97:
55:44:6f:45:4a:69:58:de:6f:bd:70:52:07:ce:74:
18:46:0e:dd:1f:6a:91:33:b0:21:f5:60:89:56:3a:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:E9:36:B4:08:BC:7E:6E:27:CB:20:BE:11:61:02:16:07:95:D5
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:7f:27:83:22:f2:51:cf:ec:31:66:e0:9e:f0:85:21:80:
da:86:16:16:f7:8c:37:32:68:a9:66:25:6f:37:e1:2d:26:c6:
79:b6:17:b0:2d:43:ca:06:f9:e6:fa:33:78:6d:62:cd:cf:56:
21:21:0f:36:12:60:6f:11:b3:56:bf:28:86:99:b3:90:e1:38:
53:d3:88:35:5d:9f:53:f9:81:62:07:a2:dc:29:27:88:c7:28:
6e:e2:d7:e5:fd:29:46:8c:3b:9f:08:bf:46:63:fe:82:2b:fd:
64:07:20:6a:b7:7e:6c:eb:39:a1:03:c5:7a:1b:11:a3:c4:f6:
08:49:ec:7a:44:c0:b4:1b:24:a3:b3:5c:cd:45:09:83:ed:1d:
6d:8d:51:61:e4:be:a1:b8:73:b2:9b:cc:3d:11:93:97:9f:ed:
97:a9:36:c7:af:c1:21:16:ea:c5:7a:d8:dd:c0:16:e2:af:88:
bc:92:b7:33:bd:08:fe:75:1e:c7:a4:a0:cf:6f:c8:0c:12:3f:
d3:c7:5c:2f:72:e5:62:5c:4b:57:fc:79:ec:ca:4e:c9:9b:8d:
5c:6b:50:c5:f8:86:e5:96:33:95:36:70:e9:63:63:c3:9a:82:
c2:0a:ec:86:9f:b6:6b:8c:8b:df:22:58:74:5b:75:ed:d4:6f:
21:55:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:43 2025 by rpki-client