Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: /1G92XBuICTkyLbvJ6UYro7gd3MT8R+CP+9iT0OjQew=
Subject key identifier: 3D:7D:48:91:BE:7F:B7:2C:F3:15:7A:9D:D3:02:20:83:03:F0:01:FF
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 01987D8BD76D223A290CF11EFA5F5DA88649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:02:53 +0000
Manifest this update: Wed 06 Aug 2025 04:02:53 +0000
Manifest next update: Thu 07 Aug 2025 04:02:53 +0000
Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: P7PLkm2sx7f7eOfwrwQCJSAs+VqLRUaliCkkRltRBaM=)
3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:d7:6d:22:3a:29:0c:f1:1e:fa:5f:5d:a8:86:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Aug 6 04:02:53 2025 GMT
Not After : Aug 7 04:02:53 2025 GMT
Subject: CN=3d7d4891be7fb72cf3157a9dd302208303f001ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:a7:4c:bf:17:c3:f3:79:8c:87:af:12:ed:
fa:11:ec:c6:d8:51:1b:09:af:11:07:84:85:1c:2a:
26:01:87:8b:c2:7a:1c:e9:7b:01:a6:a9:11:a5:1f:
d4:43:aa:a4:49:a6:39:fd:94:77:eb:47:4b:da:7f:
b0:ea:24:09:ca:d6:42:14:bd:23:ce:d5:70:00:5e:
1d:06:af:f2:45:ca:7f:4c:40:79:db:d9:48:e7:88:
46:8f:7c:4d:25:2d:6e:2c:77:36:11:0b:bd:f4:09:
ce:ca:18:71:a1:ad:a8:48:72:cf:4c:cd:a9:9d:e3:
2b:83:94:23:c1:45:0b:79:98:d4:40:39:55:7f:e2:
e5:5f:bf:17:da:25:e5:b1:8b:54:bc:21:2d:25:cc:
0b:17:2d:db:31:8b:2a:5d:ea:9d:6c:15:b7:06:0e:
92:90:ba:54:59:01:95:b7:80:53:23:33:f8:18:00:
4c:a7:4e:3d:f5:d7:f3:81:59:79:64:0e:9a:d8:63:
bf:4b:f2:21:4d:3e:97:98:9e:1d:c3:9f:83:07:64:
99:c3:78:03:23:fb:de:52:e3:b7:06:51:f2:e1:10:
08:8d:c8:f3:71:a5:62:29:ef:b8:a1:9f:86:9d:67:
a4:ba:92:7f:2d:5f:11:73:df:75:02:37:a8:f2:d3:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7D:48:91:BE:7F:B7:2C:F3:15:7A:9D:D3:02:20:83:03:F0:01:FF
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1b:87:6f:ff:5d:a5:69:31:e7:2a:42:49:34:09:40:f5:87:
a4:5f:73:a8:65:c0:7a:37:34:49:ba:65:4b:1f:37:20:c5:b3:
d4:f8:f3:a2:ed:1a:77:f8:8b:13:18:dc:da:a1:b8:0f:ce:58:
2f:e7:62:83:6f:a9:42:86:79:23:eb:42:1a:67:7a:33:70:a3:
ef:2a:ff:cc:d2:70:5f:3a:81:5c:d9:30:42:93:ee:c9:8f:48:
52:fd:9a:10:e4:17:7a:a1:4e:26:a5:ea:10:2d:56:db:9a:13:
94:18:03:c9:09:af:37:19:c6:6f:18:44:7b:ca:93:84:a0:4c:
6d:e3:a6:2d:b2:8f:73:13:55:00:66:f9:b5:fd:52:c6:91:c6:
de:88:13:35:20:97:5f:19:2f:a7:cf:ec:43:da:83:48:9b:d6:
2e:57:84:80:14:3d:89:ae:09:76:a1:82:d2:b5:ce:0c:8e:22:
15:84:21:b8:4f:0e:fb:af:71:3b:ba:a4:09:76:ff:05:0e:f0:
70:f0:46:79:12:67:bc:bd:24:c9:6f:8a:79:0f:42:d9:41:c1:
e6:09:f8:e9:63:7e:1a:da:d9:2e:8a:71:ef:44:bc:35:bb:4c:
77:1b:14:1d:7b:8b:a9:61:29:6e:40:e4:a8:e9:18:e2:51:e1:
9b:82:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:51 2025 by rpki-client