Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: IQESQCUdDKtiygXj3GIQyrayS/gWGO24w+Nngtwiwuw=
Subject key identifier: A9:30:63:D7:3F:74:A4:85:3D:B5:37:D0:E8:27:0A:99:63:C9:A3:79
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 0198744F9D1AC8629B33E2E77EC886E9F231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 1008
Signing time: Mon 04 Aug 2025 09:00:31 +0000
Manifest this update: Mon 04 Aug 2025 09:00:31 +0000
Manifest next update: Tue 05 Aug 2025 09:00:31 +0000
Files and hashes: 1: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: m3xWw+STAdDyMmMSAgg3UzqjIgcyEGwYSOSp4bXFcr0=)
2: TQTaN9R3PROnWSlPAnOimZ3OkV0.roa (hash: 6MvOdY9qe95Xeb6bYl6JjgUIxMzjpmO+qyLURJWgUDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9d:1a:c8:62:9b:33:e2:e7:7e:c8:86:e9:f2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Aug 4 09:00:31 2025 GMT
Not After : Aug 5 09:00:31 2025 GMT
Subject: CN=a93063d73f74a4853db537d0e8270a9963c9a379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:6f:70:5b:f3:61:6b:15:1b:bc:b4:07:9f:
25:5e:43:45:38:47:15:e4:0c:04:a3:71:59:9d:76:
4b:3f:14:75:6a:24:12:8e:c4:29:6e:4a:7c:39:5b:
c6:ff:4b:ad:51:a6:1c:26:d2:16:f8:71:26:fa:52:
fc:13:3f:21:d0:c1:5a:8a:d6:cc:b0:02:65:60:0e:
28:f5:57:d8:d8:2f:80:d6:3b:3c:e4:f7:a1:9d:ca:
32:22:9e:06:18:ff:96:9d:ef:54:06:45:93:b0:ee:
1f:56:39:b9:a9:da:e1:f6:37:d2:3f:b7:86:43:a7:
a8:26:80:e5:99:49:cf:c6:e2:0b:93:63:40:bb:0a:
85:9f:0e:fa:ad:bd:8d:2a:2f:3c:f2:07:89:36:a7:
91:92:0a:99:d5:d8:1e:4c:e3:38:4b:a2:01:6f:1f:
5e:bc:1e:d8:b7:a2:10:5b:7f:95:23:c1:d6:30:2f:
44:6d:d2:6d:a5:ff:40:a7:b3:6b:1d:ab:cd:5f:42:
6b:23:f2:4b:a6:21:8a:08:ff:64:cc:77:39:f1:94:
9a:06:14:2c:84:24:7a:c1:db:99:61:92:e0:f8:8a:
60:07:da:c4:fc:fc:d9:4f:87:f2:8b:93:6f:23:bb:
5c:e9:31:1c:fe:59:d9:d1:a3:23:93:98:9e:86:99:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:30:63:D7:3F:74:A4:85:3D:B5:37:D0:E8:27:0A:99:63:C9:A3:79
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:16:cb:25:67:8f:3f:95:d6:98:29:43:73:9d:4b:2c:1e:b1:
51:ff:a5:9f:b9:dd:f0:23:58:07:b5:5f:77:5e:d2:09:00:81:
1c:15:c1:a0:ce:42:2a:eb:20:3c:b8:2a:3f:c2:65:33:60:ce:
91:54:18:82:98:22:64:56:93:69:d0:6d:fa:a1:e0:8e:01:1a:
c4:da:d5:73:aa:72:c1:08:f5:07:d1:01:48:34:7e:bb:9f:ec:
58:6d:4b:01:2e:09:59:08:ab:1e:3c:e3:a7:91:99:31:86:7c:
f2:17:23:d0:e8:89:5f:a6:30:9d:7c:ee:f7:0f:a9:b1:19:52:
a4:db:ea:93:13:f4:a8:e2:4d:3a:c0:99:b3:ba:8c:d5:9a:1f:
24:0c:2d:d4:1c:b7:1a:e4:ca:49:f7:b2:6d:02:c7:86:96:6d:
af:66:dd:59:b2:41:6a:23:47:9c:6b:b2:47:b3:7e:62:9c:c7:
74:72:df:d1:5d:dc:0a:57:80:22:3e:d4:6b:de:ef:c6:78:e3:
d6:c6:dd:50:2a:f1:30:ee:41:16:ce:53:c5:45:78:ee:89:a5:
89:5a:92:e9:a9:41:49:92:34:1c:07:e3:82:63:13:f0:11:49:
0f:4e:7a:33:1a:b5:be:3b:1c:29:ae:93:1f:4f:ad:a4:48:43:
69:b6:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:42 2025 by rpki-client