Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: 3pToqkwNo6/R3OKI594KBpJCL3e14j6gj0Z/Y/qOcmQ=
Subject key identifier: F6:6C:60:EA:63:D9:1B:AE:29:D2:FD:88:12:9C:7B:AB:CC:82:23:8A
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 01988B7D66DD37BDF8A02C321B436141328E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 162C
Signing time: Fri 08 Aug 2025 21:01:47 +0000
Manifest this update: Fri 08 Aug 2025 21:01:47 +0000
Manifest next update: Sat 09 Aug 2025 21:01:47 +0000
Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: XMRG3/zf10tr+yPgPcvIRqXCDrl2A3e76ago+LUoSv8=)
3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:66:dd:37:bd:f8:a0:2c:32:1b:43:61:41:32:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Aug 8 21:01:47 2025 GMT
Not After : Aug 9 21:01:47 2025 GMT
Subject: CN=f66c60ea63d91bae29d2fd88129c7babcc82238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:db:08:d6:3c:7d:b5:94:94:14:47:bc:f0:
c0:e0:0a:60:b9:ee:11:68:ab:ff:f0:b1:7f:6e:ff:
53:d5:f9:dc:af:5e:ae:96:ed:33:c0:b2:68:7d:5a:
64:87:5c:b7:f1:c8:eb:69:8d:fe:e2:ef:7b:d8:76:
aa:64:08:ba:86:85:3e:e6:33:68:20:6b:c6:36:d5:
ec:b4:0a:d7:44:4b:b4:4b:82:5c:61:c0:1b:90:4e:
60:53:8c:75:c5:f1:af:68:87:a6:ca:8a:11:15:f7:
ae:39:43:03:d0:fa:15:69:fe:b4:9f:50:87:d1:a8:
f6:25:97:52:23:af:b0:24:ea:14:85:a0:9b:43:fd:
b9:96:55:eb:24:9a:25:66:4f:90:a1:ac:25:66:f5:
77:dc:89:7e:a6:0b:22:b4:f1:00:50:69:7e:7c:44:
38:b0:3b:df:c8:b2:0c:58:fc:33:03:98:cf:9b:30:
35:58:07:6d:ad:34:d1:41:17:ff:00:fb:cf:c3:79:
86:a7:01:c4:ef:a2:72:9a:2f:8f:da:24:d5:7e:8c:
7b:69:95:f4:85:e1:55:96:a2:00:2f:18:c1:84:27:
6e:30:43:e8:9c:f9:3d:c0:2c:ca:33:f0:7d:68:68:
74:a7:99:a9:55:ae:4d:a7:09:20:4b:fe:ba:eb:8a:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6C:60:EA:63:D9:1B:AE:29:D2:FD:88:12:9C:7B:AB:CC:82:23:8A
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:99:47:dc:cc:3b:05:9e:02:cb:46:79:bc:62:ae:72:ef:58:
8c:81:8d:8c:e1:80:82:10:fb:87:d8:ca:6b:23:94:27:69:88:
d3:cc:88:10:41:68:5f:a2:e4:1e:b1:87:a9:91:7c:71:9b:07:
af:b6:49:5c:45:94:23:50:2e:99:fd:52:58:47:cf:9d:5b:d4:
b6:ab:9c:d5:2a:45:a0:a1:9e:f6:9e:16:8b:4e:b4:fe:01:5e:
ed:3a:49:1e:73:db:aa:f1:b5:4e:db:9c:bb:55:be:95:e9:c0:
b9:57:a7:98:4a:56:4c:ee:1e:87:f0:7b:73:04:d8:57:f5:28:
35:ad:9f:ba:ac:80:cc:c2:a1:6c:77:fc:50:8b:60:d6:40:21:
b9:c0:23:5c:ac:61:6d:d6:42:01:7c:19:32:19:5e:cf:9e:d9:
09:2e:84:61:0d:31:63:6f:4c:58:ba:8b:f9:1e:b1:74:22:1b:
16:76:5e:de:43:9f:b2:78:df:22:bf:f2:b9:ab:05:55:c1:ad:
73:62:e8:28:a8:68:b2:24:07:36:20:99:25:66:5f:d4:89:a4:
9d:0a:e1:ea:66:5e:a0:db:f7:84:36:45:a0:8c:75:63:cf:a8:
31:5c:99:19:93:63:f0:c6:e1:d0:7a:7d:eb:c2:d1:cc:19:a5:
59:22:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:52 2025 by rpki-client