Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: b63/2WEserKdT6T0a8fBYUlGPQJfQvGDllULljOCXjw=
Subject key identifier: CC:AF:ED:69:B0:D1:26:C7:28:DE:7E:34:47:A4:1D:1B:BD:1B:91:8A
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 01987A5279C83EE2E122F20A0C953EEE0283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 13:01:22 +0000
Manifest this update: Tue 05 Aug 2025 13:01:22 +0000
Manifest next update: Wed 06 Aug 2025 13:01:22 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: vZLyEmff5L3F0+XRQ2TwJNPUP7UP2aZ3rICspiO9Xk4=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:79:c8:3e:e2:e1:22:f2:0a:0c:95:3e:ee:02:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Aug 5 13:01:22 2025 GMT
Not After : Aug 6 13:01:22 2025 GMT
Subject: CN=ccafed69b0d126c728de7e3447a41d1bbd1b918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:24:4a:e7:01:b3:fe:9f:d2:26:7e:fd:1d:
1c:05:4c:f4:fd:35:74:8c:bc:8f:8c:fb:99:6e:0c:
83:7b:ea:b0:1d:8c:d5:13:8a:a1:8a:5f:73:a8:b9:
9e:e5:2a:be:fa:45:2f:44:ed:72:a2:7c:99:1b:62:
dc:95:82:00:ab:58:81:fe:23:fd:10:7f:a9:cb:62:
96:0d:33:1a:93:5d:4d:36:c3:10:07:33:d8:2c:ff:
58:13:ac:ea:f4:3e:4b:87:fc:a3:95:1c:88:5b:b9:
d5:8a:6a:2d:cb:64:78:7b:f0:52:45:d6:46:71:7e:
3b:5c:f2:5e:c9:cc:2f:86:09:92:37:64:0b:51:a8:
73:fd:a9:4e:be:c2:d5:40:71:cd:10:2e:e8:3a:0b:
76:8a:03:d0:6c:e2:c1:53:89:a6:38:6c:dc:1d:32:
fa:60:83:10:4e:f7:10:f2:cc:59:63:2b:a7:d6:f0:
76:52:6a:ad:9a:87:6d:b3:d4:19:27:56:1a:57:fd:
e8:ca:f5:e8:93:5e:bf:f9:59:4c:63:ea:ae:51:d4:
0d:36:f2:90:9b:b6:c0:79:fd:d1:34:d5:dc:2b:22:
77:7f:44:75:f6:ec:c9:3e:33:b1:a4:1e:01:95:a7:
a2:a6:fa:f0:b6:7d:d0:ef:06:00:00:4d:72:c8:fa:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:ED:69:B0:D1:26:C7:28:DE:7E:34:47:A4:1D:1B:BD:1B:91:8A
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:24:1f:7c:11:16:9c:6c:b9:30:90:27:3e:68:3d:86:3e:f4:
6d:b8:ae:22:ba:58:0e:c5:46:6a:21:f7:91:36:8b:7e:62:48:
72:c1:ec:24:3b:12:37:66:bc:d4:4d:ef:cd:66:4a:4d:d4:1e:
97:80:95:c9:20:c1:4a:d2:05:0c:00:95:98:e4:52:cb:2f:ca:
36:d3:32:da:4f:4a:f4:38:5a:36:f4:07:e7:44:6b:dd:e8:fe:
9c:0d:4a:b6:3d:f0:a9:d9:5a:56:65:4c:13:17:f6:40:5f:b9:
0c:f8:c5:40:87:31:7a:08:38:f4:0b:e2:54:77:1f:61:02:72:
49:15:0c:f1:b7:0a:0d:26:4d:70:28:5f:9e:48:0d:89:9a:32:
83:29:4a:74:a0:d0:4c:ba:e1:ee:2b:82:c8:f3:98:27:64:ee:
76:c9:64:c7:f0:b0:5f:eb:ca:a7:d6:ca:93:35:98:c9:a4:5d:
34:f3:2b:eb:df:0c:ff:91:45:0f:5d:64:e4:a4:35:3e:cd:59:
8a:35:79:69:57:e7:be:83:16:75:74:70:64:d1:37:13:4f:1d:
61:cc:0b:48:22:bd:3c:64:34:6d:52:f2:7b:cb:b8:04:1a:99:
e0:50:63:4d:91:74:8b:1e:44:2f:7e:e1:bd:8c:20:c0:37:d2:
44:bb:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:41:01 2025 by rpki-client