Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier: ClMrrx29P6e6zENS8tM8nWmu1gG9gcDo/cisAKYXamY=
Subject key identifier: 1F:21:16:53:37:D8:34:68:92:34:37:E9:94:55:58:7E:85:3E:C1:2B
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 019874BDF9782DF438305D19CEB433C1CD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number: 0BD9
Signing time: Mon 04 Aug 2025 11:01:03 +0000
Manifest this update: Mon 04 Aug 2025 11:01:03 +0000
Manifest next update: Tue 05 Aug 2025 11:01:03 +0000
Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: LdRv0qRjzHn5kwuSgjS8CGN2Xo7Chz2L+rjBUoABhPE=)
2: i5CYIYxAtwPyni-Dl_N7cKRXfcY.roa (hash: SZTtaQcBy5UozsIuO5IHd1U+7pFMt22yevLjl5l8lZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:f9:78:2d:f4:38:30:5d:19:ce:b4:33:c1:cd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Aug 4 11:01:03 2025 GMT
Not After : Aug 5 11:01:03 2025 GMT
Subject: CN=1f21165337d83468923437e99455587e853ec12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:33:c5:41:1a:25:8e:ba:c4:1b:2b:39:75:
d2:9a:0b:fd:27:43:7d:c0:f3:1c:cb:d5:fc:cb:08:
26:47:cc:75:6c:1c:24:95:b8:e9:13:ba:44:67:8a:
7a:15:c0:88:72:c8:07:d6:82:ce:0c:e2:0c:03:e3:
af:30:43:0c:15:26:a5:d0:cb:7f:e3:48:3f:73:0d:
ae:3c:0f:a8:d8:a0:ba:da:2b:16:92:17:52:d1:7f:
ea:25:d9:22:0c:27:40:9a:98:c8:f0:30:f9:20:83:
43:80:d9:9b:ce:82:bb:34:cf:7b:46:7c:44:d1:ab:
24:e7:0a:dd:dd:3f:54:39:7f:20:3e:38:e8:9a:c0:
87:46:6f:49:58:ec:02:e5:9c:c3:a4:43:85:6e:0f:
47:1f:14:4d:16:8b:a6:d2:81:3f:bf:64:d2:5f:f5:
87:a8:5f:34:2c:4b:82:99:fa:e7:dc:ce:e1:9d:d6:
5a:45:77:67:11:48:35:9c:56:8e:f1:58:f2:64:df:
49:87:aa:e3:de:c2:b4:67:da:ac:05:a5:d5:43:31:
a6:f2:33:b8:de:ad:84:56:3c:bf:03:e3:c7:f2:10:
13:05:41:0f:9b:3e:ee:02:fb:60:ab:25:bc:4c:51:
34:63:ab:a0:7e:4b:07:9d:ca:10:64:4e:f1:10:28:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:21:16:53:37:D8:34:68:92:34:37:E9:94:55:58:7E:85:3E:C1:2B
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b5:d7:0c:c9:f2:6f:4c:c4:d5:c2:d5:4e:63:32:b1:d0:f3:
62:8c:37:15:de:d2:2b:b6:1b:01:3a:d1:4f:fe:56:3c:17:ae:
5d:e4:59:f8:76:c7:d7:d8:fb:eb:85:f0:2b:b2:0c:19:d6:a9:
03:86:22:98:cd:7d:ca:7b:11:6b:4a:e8:e7:b0:6a:c9:39:8f:
40:d1:86:73:31:ac:a5:b0:f9:ba:90:dd:6c:ef:53:f7:55:16:
0a:4c:9b:87:68:62:cb:96:40:b2:b6:ba:6b:9f:36:47:8a:da:
09:3d:ce:46:81:5f:22:10:78:38:d2:64:5c:0d:26:fc:35:74:
0f:2d:73:fd:3d:35:4b:52:01:0b:f1:30:43:8d:8e:67:cd:a6:
b4:f7:b3:05:74:51:f1:74:16:a0:17:7a:8a:1a:61:49:c8:c1:
37:28:fc:c2:bb:88:ef:08:a5:41:fe:0c:aa:16:91:33:20:cb:
10:e5:79:e6:26:f6:2c:27:b7:96:88:94:59:1b:81:90:a2:81:
89:f6:3d:1d:80:98:9d:e9:5c:55:76:79:03:a6:4d:b2:6b:90:
49:dc:6c:ee:72:2a:dd:0e:61:65:85:1a:3a:c1:63:39:7b:c1:
c3:13:89:21:21:cd:74:1c:88:d3:1d:f4:2a:f1:c4:6f:69:e6:
e1:43:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:11 2025 by rpki-client