Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: wpe6U/OqDw0C/vBzFMmWnVskT8rZjFPD33dy2SN0b6g=
Subject key identifier: 04:C1:44:6F:DC:85:D5:11:47:19:CB:3C:48:3D:66:AC:79:A7:8E:00
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 01989BCB8EFEA396E269B6F634888003BE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0ABA
Signing time: Tue 12 Aug 2025 01:01:05 +0000
Manifest this update: Tue 12 Aug 2025 01:01:05 +0000
Manifest next update: Wed 13 Aug 2025 01:01:05 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: eVGq2HpikpGhkiDAH2mtT4cX9l8YmVgTP16j0IMVkhQ=)
2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9b:cb:8e:fe:a3:96:e2:69:b6:f6:34:88:80:03:be:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Aug 12 01:01:05 2025 GMT
Not After : Aug 13 01:01:05 2025 GMT
Subject: CN=04c1446fdc85d5114719cb3c483d66ac79a78e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:08:f1:77:fe:51:04:a1:1f:6f:9b:96:ed:
b6:53:e7:d8:14:82:37:af:ef:d0:1a:c9:36:d6:3c:
56:6d:41:36:e1:7a:a4:83:66:ff:b8:fe:cd:ff:f3:
7d:78:79:00:11:24:65:61:40:a3:5f:f6:2a:2d:07:
53:ff:cf:5b:27:a1:74:fb:cb:00:f3:b8:04:97:58:
f2:64:66:d1:e6:f5:f8:65:46:b9:20:57:5e:de:5b:
4c:a1:5e:bb:2e:ec:2d:0c:92:2e:26:34:d4:bb:6e:
eb:5a:2a:fa:cf:10:1f:6e:b4:65:3b:4b:49:ca:f5:
ff:27:e0:25:2e:7f:66:97:08:9f:2e:86:ca:a9:e6:
f1:7e:01:09:80:af:e7:9f:d1:63:a0:a2:3d:ca:bc:
52:9b:ac:c9:9a:90:1e:1c:52:a4:8b:a2:38:4d:9d:
04:36:81:db:10:58:84:3b:c8:03:41:54:83:f4:ed:
c4:52:71:74:73:b3:7a:fd:86:5a:4c:8f:bc:f6:03:
27:a6:6a:29:61:a4:d6:f3:22:f3:6c:1f:c3:59:72:
36:3a:5a:5e:17:4d:d8:aa:0d:e7:c3:68:01:6a:f9:
bd:35:7b:7f:65:ec:54:85:44:e2:2e:0f:11:73:ae:
58:ba:b9:4e:9f:50:07:d8:fc:8c:e3:6b:ab:56:d3:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C1:44:6F:DC:85:D5:11:47:19:CB:3C:48:3D:66:AC:79:A7:8E:00
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:37:3f:7d:15:46:ad:9f:a3:19:8c:1a:8f:ca:cd:c1:c1:ec:
57:c1:c3:ca:24:c5:b1:23:ff:72:ee:ba:7b:1a:11:2b:ec:3e:
b3:6d:1d:51:e4:80:ff:03:97:a5:48:3b:0b:1d:90:c8:e5:18:
9f:6e:18:74:c1:1b:33:f0:99:53:11:75:35:37:fe:53:18:e4:
32:0c:75:ca:f8:62:ec:dc:24:f3:d4:e8:3a:43:95:94:8c:5c:
2d:4c:66:03:93:c4:fe:86:c8:6a:2a:cf:b1:df:56:d8:fb:2a:
47:53:db:22:93:89:b3:87:8f:22:ed:a9:27:72:37:91:81:8c:
2c:81:cd:a6:1f:ac:51:28:bb:fa:46:d3:d0:e5:1a:5f:c9:7a:
69:a6:38:9f:d3:46:4b:1f:aa:4c:d2:c9:7d:23:a5:38:b0:cd:
79:a8:38:96:9d:e4:5d:3f:e9:c3:c7:b9:4c:89:e4:8f:04:c4:
ac:1c:6e:16:c5:70:fc:cb:f1:c7:a1:12:37:c6:69:be:60:9b:
fa:7c:c0:ce:28:7f:09:46:ac:88:61:5b:ad:03:5a:fa:ad:10:
c4:15:c7:d4:04:c5:d1:c4:80:69:4b:46:47:7f:dc:a3:ae:61:
67:32:8a:a9:e4:4a:6f:e7:e4:3b:ea:76:57:85:4e:c9:88:fc:
b6:5e:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 08:45:24 2025 by rpki-client