Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: AX7sWK3stHfTkk1lNdqVmdOISF1x/TH39GBOqmd2jqY=
Subject key identifier: 7B:2B:59:A3:C6:95:F6:C2:57:C3:92:73:9E:50:15:48:EC:D1:AE:53
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 0198D54E0B9AE0DC4A601005037C3F7158BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 1383
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: aQjAlGXSPQd9II7WevQKx5PA+nliKCpNraDlIUNRpkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0b:9a:e0:dc:4a:60:10:05:03:7c:3f:71:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=7b2b59a3c695f6c257c392739e501548ecd1ae53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:66:7f:49:8a:88:59:ea:f2:f3:e2:32:51:
a9:d5:2f:00:dd:57:55:4c:cc:c3:28:0e:a9:1c:df:
74:54:43:5f:52:fa:eb:de:bb:fe:da:62:b9:6f:28:
2d:f4:ca:f7:65:48:c0:1a:89:e0:5c:ac:f8:95:15:
6e:db:3c:dd:7d:fb:8a:ec:52:f0:4c:ec:91:e8:56:
4f:cf:af:cb:cd:1a:6b:2b:e1:fc:8b:82:1e:c0:f4:
6a:39:2f:ab:41:5c:e1:79:27:94:16:67:4f:2c:1d:
f9:08:13:f3:94:a1:23:d3:9e:40:e3:e2:31:59:71:
23:4a:b2:be:47:8b:94:05:99:6c:a1:a2:f5:a1:a9:
ee:72:85:24:36:68:09:fa:14:5c:fb:99:11:e9:e9:
a4:37:f2:3a:92:fd:98:26:8e:8b:da:54:85:02:90:
f9:b4:c1:cc:be:33:3b:67:8d:64:ee:13:db:b6:56:
3c:c1:67:1f:13:7b:c4:35:8a:4b:17:7a:88:4f:40:
de:f6:40:3d:2e:65:5f:d9:40:f4:85:fb:c0:85:78:
c1:81:9f:44:55:69:ba:23:33:dd:01:74:9c:86:77:
d0:30:82:ba:aa:30:b0:9a:ee:88:09:2d:89:f9:60:
e2:ca:ba:7c:eb:18:2a:bb:b2:3d:d6:b4:b4:90:fb:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:59:A3:C6:95:F6:C2:57:C3:92:73:9E:50:15:48:EC:D1:AE:53
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6a:ef:b0:d3:7e:0e:b7:86:c0:04:ec:64:49:4c:f0:6f:af:
9e:f8:a1:93:9b:b9:d4:c0:ac:16:99:ed:cb:57:98:42:27:a1:
17:5e:b2:86:a4:2a:da:00:eb:f2:63:13:db:9a:1b:bc:c4:6d:
41:71:7b:17:c3:9e:a0:1c:bf:81:fa:ed:ef:1d:95:87:a5:e7:
f9:6a:99:5e:12:25:ea:b8:64:7b:8a:6a:68:74:67:d2:3d:a5:
82:57:f6:7a:1f:22:fa:e1:89:d9:a2:ab:ee:23:37:a5:63:39:
7c:70:b0:47:7f:0f:04:04:3a:5a:77:78:42:66:e0:e7:f1:bf:
b8:fe:19:e9:6d:e8:4b:cf:d7:f7:c7:91:ec:b7:85:7d:72:73:
a0:1f:2d:da:4c:6c:77:92:ed:45:b2:80:0c:fb:7a:5a:99:92:
0e:f5:1f:95:ce:80:00:17:a0:b3:26:5b:9b:13:39:cc:31:d2:
0e:3b:ea:0c:7d:7c:f7:55:1c:36:68:bb:bc:7e:2d:29:d7:f1:
3e:b2:1a:3e:8d:65:8d:15:c0:12:46:76:dc:48:37:c8:bf:d2:
82:27:73:d6:67:56:5b:11:4d:95:4f:84:83:7d:92:2f:58:1f:
f7:e6:6e:09:8e:f4:5a:21:ef:17:dd:7e:c0:5e:f0:80:3c:30:
4c:9f:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:17 2025 by rpki-client