Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: b0tJ2rskTcRn1HdHqoE95zhlkRDt+96PxVs1ghz7qT4=
Subject key identifier: 11:58:39:E2:24:2D:E9:A9:5C:EF:D6:1E:E5:1A:6E:63:59:EC:15:FD
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 01988BEAEF47DDC3CC78EE90DC0ECFEBFA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 23:01:26 +0000
Manifest this update: Fri 08 Aug 2025 23:01:26 +0000
Manifest next update: Sat 09 Aug 2025 23:01:26 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: /gp/fO5maJHX9J3wca5FrvM6qRTpR1OBq8ZgjjZNcoc=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:ef:47:dd:c3:cc:78:ee:90:dc:0e:cf:eb:fa:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Aug 8 23:01:26 2025 GMT
Not After : Aug 9 23:01:26 2025 GMT
Subject: CN=115839e2242de9a95cefd61ee51a6e6359ec15fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:ea:6e:de:ac:b2:19:3a:2c:6c:6b:05:44:
6d:34:ad:3b:b0:4b:e7:f6:58:75:94:31:59:de:50:
30:6d:52:af:33:c1:a8:81:94:75:5c:62:2c:fc:0e:
4d:09:db:2a:a3:d0:12:97:87:b8:60:62:d0:0c:02:
01:53:ce:22:e4:90:2e:3e:c1:36:39:95:55:ac:75:
81:91:ea:18:5d:c7:e5:13:f2:f7:09:1b:1f:b3:4d:
13:dc:bd:c2:07:13:c5:97:c5:84:e6:25:49:d4:c0:
c6:d2:fc:bc:79:31:2f:ed:7b:84:c6:02:66:93:c2:
23:8f:3c:ab:6f:8a:e6:48:4e:ee:3c:4c:02:4b:55:
78:47:d5:20:c9:54:d4:01:08:43:73:4f:b8:3c:5c:
7b:3f:a4:59:6e:fb:c6:4c:cc:f0:16:c5:71:ba:10:
0a:0c:1c:dc:c7:ed:88:8f:b7:80:14:9c:39:32:42:
8f:4a:88:5d:d1:33:fa:4f:e8:27:6d:ba:30:16:58:
6f:8d:b4:e2:5e:a6:60:d0:08:08:48:2a:ed:42:d3:
47:8a:42:fd:72:63:d7:e9:fe:59:bd:69:5c:bf:ba:
8c:39:c8:a7:54:e9:6a:63:af:cc:23:7d:b1:fe:92:
b7:e3:e0:3d:12:85:61:0a:61:6b:c4:12:58:60:1d:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:39:E2:24:2D:E9:A9:5C:EF:D6:1E:E5:1A:6E:63:59:EC:15:FD
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:49:88:fa:b9:4f:db:17:da:9a:ef:c4:88:23:46:2c:25:ef:
02:8a:a9:2e:2d:e2:c9:2d:f5:5b:09:f7:36:48:d3:c2:89:ea:
4b:31:30:e6:30:28:6c:2c:f7:65:a6:ff:18:ea:61:6b:ec:00:
9f:85:de:3c:94:0a:fd:47:0a:9e:0d:21:d1:c4:be:a8:39:e5:
11:19:4f:a7:0f:f6:0b:19:8a:f0:32:26:9c:a3:a7:42:d4:fd:
65:ce:40:1c:b0:8a:72:2a:a1:f8:59:a3:ba:91:35:2a:36:4a:
82:8b:6a:22:f0:19:33:df:1e:1a:5b:39:5f:d9:8c:e6:7a:7d:
cc:d3:26:63:7f:0e:c3:2e:58:77:47:ae:00:6c:87:c8:3a:2e:
7f:d4:70:68:cf:bf:62:0f:95:20:f7:5e:e7:6e:9f:72:92:b7:
cc:99:6f:42:00:71:6f:f4:a3:3e:58:6b:54:04:cd:d1:4b:28:
5a:d8:d3:e6:0b:a7:74:40:03:58:e9:11:e8:52:c3:1f:74:4a:
09:de:84:28:f3:a1:64:d6:c5:83:84:9f:21:15:a5:88:0a:7b:
f8:66:44:1e:11:8c:e8:5e:18:d2:d3:61:af:29:3c:ff:28:0b:
6a:3a:79:b9:fc:a2:57:20:59:31:bf:aa:e4:ad:32:c9:83:c1:
12:61:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:21 2025 by rpki-client