Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: G9eJLscrK2wEVGuNmqIzIBP01kCua6EpihTvVBEXv1Q=
Subject key identifier: FA:93:8F:2D:0C:BB:28:B1:AA:48:02:24:C0:60:73:20:4A:4C:4B:50
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 0198D8F24965734C5BED4662F06F7CCF11AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 028A
Signing time: Sat 23 Aug 2025 22:00:13 +0000
Manifest this update: Sat 23 Aug 2025 22:00:13 +0000
Manifest next update: Sun 24 Aug 2025 22:00:13 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: LDSVyWmpXaPChzCUD8dZVkueW5j4xjCEa5KsU+YfHW4=)
2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=)
3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:49:65:73:4c:5b:ed:46:62:f0:6f:7c:cf:11:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Aug 23 22:00:13 2025 GMT
Not After : Aug 24 22:00:13 2025 GMT
Subject: CN=fa938f2d0cbb28b1aa480224c06073204a4c4b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:31:77:14:9f:58:c8:ce:c2:79:bc:64:30:
5f:aa:b7:28:61:a2:6a:04:dc:03:1a:0e:5a:a9:cc:
41:75:69:44:12:b9:0e:19:fd:21:33:e8:82:d5:16:
5e:2c:e9:c8:8e:9b:43:b3:20:3e:fb:76:f0:ee:c6:
c4:6e:6d:d9:54:6e:67:e3:63:80:37:08:d7:59:2a:
d6:5c:7a:8c:47:24:ce:72:dc:9a:19:15:9c:49:97:
1d:71:a0:bb:a2:c1:b8:ad:48:c3:da:66:ef:64:78:
6c:59:7b:11:8f:e8:88:05:c5:04:29:a7:c4:92:c2:
c6:ff:65:81:27:94:fa:05:66:97:23:e9:8d:25:52:
e3:e5:71:bc:a1:80:87:82:ef:c7:4e:ec:66:9e:b4:
d2:93:1d:7c:d4:9c:ba:89:7a:56:61:c3:a2:93:7f:
01:4e:22:30:11:0f:9a:37:34:6b:92:dc:1a:3e:8c:
80:cc:31:e7:72:6b:c9:61:23:3e:1c:70:c9:a2:46:
7d:c7:9f:4b:f8:ca:c9:53:c7:92:aa:7e:e4:ef:2d:
38:bf:da:21:68:15:ef:c9:0a:08:fd:60:dd:a6:16:
0a:6a:52:3a:a8:34:a4:11:15:a7:45:4c:d7:f5:ca:
54:13:38:f5:31:9c:af:bf:59:35:ad:72:8d:ef:85:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:8F:2D:0C:BB:28:B1:AA:48:02:24:C0:60:73:20:4A:4C:4B:50
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:28:03:3f:67:21:35:26:c6:37:7a:60:86:ff:55:69:a0:47:
b4:1e:20:59:53:ff:8f:51:7f:e1:e3:e4:a3:20:29:00:bd:e8:
22:cd:57:fb:cc:f1:9d:92:81:23:84:af:11:07:b7:98:c2:00:
8e:98:2a:1b:f0:58:48:21:f7:1e:92:a3:a9:68:86:b5:aa:98:
7b:28:1b:0f:b8:aa:99:53:69:89:f4:85:2e:14:2f:65:9a:6d:
95:42:fe:fb:b1:ac:f5:ba:51:90:3a:07:6e:a4:0d:1c:86:78:
a1:75:3e:e4:be:69:34:f7:ec:90:84:e1:81:95:1e:2d:c7:bc:
fa:e4:f6:3c:9c:da:9a:2e:63:35:a5:cd:4a:07:e1:22:04:9f:
89:52:fb:7b:74:0d:a4:05:a3:b1:ab:4d:c3:83:1d:27:cb:88:
02:71:6b:59:a6:89:c9:90:e7:06:c9:c2:4d:d3:12:8b:d8:71:
8e:fa:40:4f:52:76:94:29:55:fc:fa:2b:d6:0c:08:72:4c:70:
a4:45:fd:45:f7:d0:70:ca:7d:13:1b:eb:89:0c:06:ff:de:74:
bf:24:25:b1:31:d6:40:62:42:7a:a2:62:1a:1b:b9:79:9d:9b:
97:68:ab:a8:eb:68:6d:fa:fd:bb:a2:d6:c1:4d:e4:3b:d0:65:
72:73:b3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:09:16 2025 by rpki-client