Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier: 0ozs04kTPBHpUrTyRbiTeA+f7Vaah975xxwSLbU5RH8=
Subject key identifier: F1:A7:5A:90:CB:84:ED:C4:E5:C7:74:97:B7:50:38:20:1D:7C:42:3D
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 01987B2D74E8EB5FACF2C5F84825DFF25BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 17:00:33 +0000
Manifest this update: Tue 05 Aug 2025 17:00:33 +0000
Manifest next update: Wed 06 Aug 2025 17:00:33 +0000
Files and hashes: 1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: z5FtjmnGEuzNnauBzqSGKxppolZvYPcCIXfxT+rqlv4=)
2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=)
3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=)
4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:74:e8:eb:5f:ac:f2:c5:f8:48:25:df:f2:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Aug 5 17:00:33 2025 GMT
Not After : Aug 6 17:00:33 2025 GMT
Subject: CN=f1a75a90cb84edc4e5c77497b75038201d7c423d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:6e:38:82:a6:37:d6:28:10:e7:4f:7b:22:
34:a7:97:60:c1:c6:a5:cc:1c:18:cf:33:62:28:fb:
9d:31:f4:a8:d9:84:f0:ce:5b:54:fc:87:9b:4a:48:
c2:31:5b:71:c9:6a:75:4d:df:e2:d6:60:92:ba:7e:
18:71:af:91:8d:d6:3e:44:44:03:27:9b:eb:a3:df:
34:96:b0:df:b4:ac:d7:b6:f0:79:3b:1a:da:84:cd:
9f:a7:4c:be:b4:f3:f6:39:74:6d:c6:9a:70:6a:af:
2c:8f:37:94:af:28:cd:c3:26:c8:91:0a:84:e2:ef:
a1:ff:8e:0a:36:99:a7:3a:a0:81:ec:a3:8b:57:5c:
59:68:fe:8f:4a:bb:46:4e:4c:8d:84:e6:79:40:c8:
75:a7:04:b0:85:c1:a7:76:fc:2f:6d:16:2a:c3:da:
52:58:68:78:ad:8f:57:1d:32:3b:06:bd:cd:2f:e5:
52:82:7f:15:90:cd:be:96:7c:a7:9f:44:ad:44:2a:
58:85:f9:19:99:a0:e9:aa:42:df:70:d4:13:6d:be:
66:99:37:3e:e6:3f:53:30:82:67:2f:85:af:85:2c:
5c:a1:0b:70:7f:04:28:a4:bd:50:21:ce:7f:54:2b:
b8:c8:e1:fc:84:6e:5d:21:08:3c:66:d6:cf:28:9d:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:5A:90:CB:84:ED:C4:E5:C7:74:97:B7:50:38:20:1D:7C:42:3D
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0e:a1:de:88:a5:30:0e:1c:44:05:0b:ab:12:51:05:9a:61:
06:9c:1f:0f:2b:58:32:a5:ac:1a:17:e1:34:c8:0f:79:7d:0d:
51:77:9b:5c:82:63:0b:3a:f8:17:d1:9f:ca:f8:4f:36:6f:2d:
93:56:ab:70:3c:2d:b1:f6:54:95:95:7e:be:bb:71:2f:3c:48:
26:ef:dc:12:11:81:3b:26:0d:4c:df:43:b1:19:bc:0c:ad:00:
54:3e:2f:c1:bc:38:56:90:28:f9:9f:a1:4b:1a:9f:43:f2:b5:
28:5d:ac:37:31:0f:1f:45:04:5d:5e:81:c2:3b:fb:8b:4f:dd:
fa:76:7f:ae:19:03:6c:f1:9a:4e:14:1e:d8:a1:29:15:63:07:
22:7d:64:05:8e:38:52:e8:7d:b3:ed:de:95:9d:26:be:a9:e7:
9d:2d:b8:09:bb:59:cd:ce:36:89:ac:24:8e:92:a1:fa:b9:d3:
b6:f0:df:17:8c:f6:ca:3a:38:22:5c:b4:f9:3b:96:c8:92:a0:
34:8e:79:1b:54:72:94:5b:d6:35:06:21:57:80:c7:8e:1f:a3:
00:2a:a9:4b:ac:ed:7b:f6:c5:63:f9:06:3c:c0:99:45:10:a8:
59:3c:cb:e9:8f:f3:a4:f2:a0:0a:b7:bc:99:7e:12:f2:db:b8:
f4:a9:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:33 2025 by rpki-client