Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: BeTaz24uB/q1K00SvE1cSeHrTqgfI5RAU2lzyAeHUHs=
Subject key identifier: 73:C5:FD:35:86:F7:C9:19:32:7B:E0:EF:16:29:ED:83:2A:1F:49:68
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 0198744FC179CC018342E4FCF73DAC64B79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 07B2
Signing time: Mon 04 Aug 2025 09:00:40 +0000
Manifest this update: Mon 04 Aug 2025 09:00:40 +0000
Manifest next update: Tue 05 Aug 2025 09:00:40 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: Kl5924Vu3EIUhoIANzDgjN/k4Gn7vuGd6ctmBItQ+pY=)
2: uCvD8eRBUAPr7t4AKxbWS0eik-M.roa (hash: S3XQTQGpmea5gdNAFZSLFW2D1IWdCXJx15hLcxcR7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:c1:79:cc:01:83:42:e4:fc:f7:3d:ac:64:b7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Aug 4 09:00:40 2025 GMT
Not After : Aug 5 09:00:40 2025 GMT
Subject: CN=73c5fd3586f7c919327be0ef1629ed832a1f4968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:13:16:a3:44:51:5c:cd:ea:7c:cf:a7:90:
af:e7:a9:3b:31:a7:7e:31:89:62:28:36:ed:94:2d:
c7:76:cf:38:81:00:41:b7:76:68:88:e4:1a:60:86:
ec:3b:ef:0b:68:80:b5:7e:11:01:25:74:98:3e:70:
79:b0:20:a6:b6:22:8d:23:42:a0:af:8b:3a:7d:bb:
41:44:57:88:40:44:99:c9:43:01:6a:86:dd:75:dc:
cd:5c:a4:b6:1b:5c:da:91:10:ba:06:69:bc:47:5c:
93:78:26:03:36:dd:8c:62:6c:1f:86:c0:45:97:3a:
93:88:8a:42:22:1a:45:ff:7b:fd:39:9a:03:3b:b3:
85:47:d2:1d:85:21:80:56:f5:3d:07:93:2a:35:64:
35:8d:a8:6e:c8:36:54:40:f9:d4:ab:87:aa:29:4f:
89:7a:60:b0:a4:64:28:ea:64:3c:96:4b:d9:ef:57:
f5:68:ae:41:49:7b:67:cf:b5:d7:64:3d:ef:1b:6e:
e9:99:a3:ff:0e:93:60:c6:9c:2d:a9:be:8f:59:c9:
45:3c:3d:22:68:b7:7d:93:8f:48:f7:e6:c4:f8:3e:
5a:b8:f4:ad:35:f3:4b:fc:0b:c1:c9:bd:2d:66:eb:
07:68:61:b8:31:87:bc:f6:54:00:8b:ad:88:0b:e4:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:FD:35:86:F7:C9:19:32:7B:E0:EF:16:29:ED:83:2A:1F:49:68
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9a:30:35:cc:f6:8d:1b:19:ae:73:c7:02:70:a1:e2:ba:bf:
4f:35:03:ee:a4:b6:13:64:44:11:7d:0f:62:91:81:50:1e:50:
e8:43:5e:61:9c:42:0a:c2:00:ae:f7:93:d8:90:31:41:d8:9a:
4e:3d:83:95:68:f6:98:c9:e8:f0:13:0c:11:96:3a:54:31:f0:
e5:ee:69:06:3e:27:0d:b9:02:23:45:27:cf:77:0a:48:17:df:
6b:44:b9:c4:f9:b1:7e:b6:a4:33:4b:58:4d:fb:01:ef:81:a8:
c8:2a:4e:c1:d7:25:06:ee:13:53:51:2e:8d:01:76:01:c2:4d:
73:8c:b9:0e:fb:f4:0d:2a:75:88:23:8e:2a:ee:64:e9:ff:15:
ad:0a:9b:a2:cf:d1:98:e5:e8:0a:23:69:ca:9f:40:c3:36:b3:
8c:15:20:76:67:82:ea:c5:30:c3:32:43:a1:ff:62:2f:6e:c3:
89:b0:4f:6a:1d:cf:c2:24:03:83:8c:2d:15:fc:6f:46:02:b5:
fb:aa:42:b8:03:e9:58:8d:c2:5e:ff:3e:b6:ef:63:22:cb:7f:
49:77:b6:d0:96:d3:c2:c3:17:66:00:c5:e5:57:0a:d7:fd:6c:
d8:42:70:0c:f7:71:7c:18:45:76:31:59:27:d0:51:c1:74:63:
9e:e1:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:46:15 2025 by rpki-client