Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: nv3hBiTHxXd/C1cBdAEZdFV8ROKconFrfqV5zHZA99w=
Subject key identifier: 24:E8:CD:28:F7:65:C9:B8:DE:A7:83:45:57:E9:BB:1A:89:CE:44:3B
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 01987C7758D0223896D860BFC812C84E542E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 23:00:52 +0000
Manifest this update: Tue 05 Aug 2025 23:00:52 +0000
Manifest next update: Wed 06 Aug 2025 23:00:52 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: K0IqHBs6nMNOR5x8PA18atOTu/fgNIFyp6S8GiVQ7yI=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:58:d0:22:38:96:d8:60:bf:c8:12:c8:4e:54:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Aug 5 23:00:52 2025 GMT
Not After : Aug 6 23:00:52 2025 GMT
Subject: CN=24e8cd28f765c9b8dea7834557e9bb1a89ce443b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:4e:a1:1a:56:03:4a:2e:e5:86:4d:e9:da:
7d:05:82:7e:43:34:8f:ad:ba:7d:ac:64:b9:b1:7e:
8f:c7:41:ce:71:d9:06:c2:1f:4e:5a:a0:b5:1f:8f:
10:c9:47:17:c9:3d:97:4b:04:fe:c8:29:01:77:05:
62:15:20:4a:38:18:38:4f:fe:50:1a:b2:c2:4b:62:
82:77:9b:98:ae:d7:c5:b3:e2:64:18:50:3c:1c:ac:
ca:c5:4b:5c:6c:17:0b:cf:f9:aa:c4:59:ac:a3:2d:
20:0d:fe:3d:03:c9:ae:44:12:e9:14:f2:e4:a6:51:
20:8f:81:0c:9a:cb:fb:41:05:d2:b0:aa:b4:46:b8:
ec:09:e5:36:bd:d8:dc:e9:2c:a1:ed:be:70:64:b4:
6d:bf:26:5b:9d:b9:b6:11:45:2e:21:2a:49:7a:03:
94:c7:0b:37:43:10:72:5b:75:e9:0b:88:3e:10:35:
f9:1f:5f:dd:1f:2f:31:1c:7c:1e:c5:ed:94:90:f1:
7c:54:71:ca:55:c5:ac:60:5d:76:dd:75:d7:e0:a0:
70:60:1c:fc:2f:5d:a7:ba:7b:d2:c6:66:57:b7:76:
e3:db:6d:0b:1a:b0:e3:b2:6a:7b:0d:95:c0:d6:fb:
10:b8:d1:06:e5:53:48:a1:7b:4e:23:aa:cb:8f:ce:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E8:CD:28:F7:65:C9:B8:DE:A7:83:45:57:E9:BB:1A:89:CE:44:3B
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9e:15:7f:7d:1b:cc:29:6a:cc:f0:eb:d4:0a:78:cb:ce:a4:
be:c7:c3:81:94:e9:97:da:1d:46:da:a1:30:32:4c:aa:da:ba:
9b:5e:b3:ac:d9:d3:5f:7a:e7:ff:7e:74:ce:6a:c8:f9:07:83:
05:28:76:77:f3:4a:70:91:ff:29:ac:9e:dc:82:21:90:e4:7b:
16:a3:a9:65:e4:fb:6a:c6:06:c7:ef:34:25:fe:65:ab:37:3a:
4c:c8:2e:25:4b:e7:1e:49:61:de:8a:9f:1e:d3:43:c7:26:92:
b0:57:78:e9:f0:a9:03:ff:21:6a:3b:4f:2b:c8:d4:07:a5:84:
75:eb:a2:08:cf:97:9a:de:6a:8c:13:64:e9:a7:70:06:a7:1c:
92:e6:b1:80:ff:64:fd:9a:45:44:82:59:76:6b:eb:63:11:a7:
8a:09:1c:51:aa:2f:87:35:2e:95:21:21:d7:82:ab:12:f2:46:
6d:f7:b8:5e:04:f0:58:43:c9:3d:79:64:4a:bc:13:88:94:65:
8f:c2:50:0b:76:20:e5:e0:92:e7:39:e2:50:84:ad:39:73:84:
94:12:e5:0a:0a:33:6f:5e:e2:50:91:c0:3b:f2:d4:c0:53:64:
41:e2:4f:bc:3b:18:49:56:09:b6:11:42:43:b2:0c:7c:6b:0b:
df:90:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:09 2025 by rpki-client