Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: Gim3P3tmw9X9F0TDSLMpTXqTY42upZkDuUK7VJjf3eE=
Subject key identifier: 47:64:6B:F4:4F:44:38:B1:43:F1:A6:E8:A3:FD:75:D6:A6:FD:C5:A8
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 01988CFD960F93FA31C8C098C2BD3A0A949B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 04:01:25 +0000
Manifest this update: Sat 09 Aug 2025 04:01:25 +0000
Manifest next update: Sun 10 Aug 2025 04:01:25 +0000
Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: egHuQYf0XK86hTkzu7zQd3zmpDSOdjVNzQJXTmWQFqg=)
3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:96:0f:93:fa:31:c8:c0:98:c2:bd:3a:0a:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Aug 9 04:01:25 2025 GMT
Not After : Aug 10 04:01:25 2025 GMT
Subject: CN=47646bf44f4438b143f1a6e8a3fd75d6a6fdc5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:06:70:6a:ac:d0:74:d1:84:4e:21:da:01:
dc:02:fe:86:56:2c:0d:52:64:63:52:61:f7:0d:07:
42:8f:96:7c:89:2b:1a:01:d1:fb:40:7e:65:bb:21:
32:ba:84:41:3d:1d:96:71:ad:d8:bc:b9:52:5d:28:
23:ba:40:51:64:47:b1:63:52:e3:0d:8d:21:d9:6b:
2a:79:03:70:5a:c0:f7:ed:ab:ec:26:7a:db:d4:8c:
8e:e5:a7:33:6f:be:09:b7:1b:0b:d0:ab:7a:04:40:
52:c4:2f:73:7d:ce:2a:2a:2b:ab:25:13:6e:b6:6e:
aa:64:1a:cd:27:2c:70:0c:e0:70:75:78:2e:b7:19:
22:6e:d5:5f:24:63:0d:d1:b8:91:aa:41:6a:db:7d:
b7:0b:b1:7b:e3:0e:3e:b5:15:05:dc:2b:b6:0c:02:
e8:34:07:aa:0e:53:ed:7d:b2:94:79:6e:5c:15:4e:
79:fd:34:c7:c2:c4:96:74:d8:25:00:2f:24:e4:25:
40:50:41:a1:71:51:95:e5:11:9a:1e:10:b3:e1:de:
c5:93:b8:fc:53:6c:3e:cf:7e:40:f3:d1:ee:71:71:
ec:13:8a:f1:86:70:30:f5:15:af:c8:7a:06:c8:e3:
90:16:87:4c:df:8c:ad:91:98:8e:48:04:53:28:22:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:6B:F4:4F:44:38:B1:43:F1:A6:E8:A3:FD:75:D6:A6:FD:C5:A8
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:42:a9:3c:34:9c:d4:2d:2e:26:bd:88:14:0f:c6:5d:e6:03:
38:6c:f8:93:21:25:3b:3b:a8:46:60:df:68:43:8c:0a:c6:df:
0d:a2:ef:da:87:d9:2a:36:89:6f:7a:47:13:4a:37:f4:89:5b:
70:97:47:61:28:01:51:83:f6:4e:82:71:c2:4c:ba:6c:50:d9:
1d:ee:99:61:30:d3:74:1c:60:4f:f7:af:b9:1a:07:be:12:e7:
01:eb:f8:85:66:32:b2:fa:ac:e8:82:75:9b:0c:a5:c0:94:25:
dc:bf:78:a3:6e:9d:74:0e:13:4b:af:e6:e0:dc:f2:c0:35:60:
59:33:09:60:5b:5b:79:2c:cf:23:b0:2d:75:68:d7:06:7b:b1:
87:62:72:14:0d:b1:f3:50:36:9f:83:31:d7:18:c5:5e:d9:bb:
e2:76:de:ab:07:ac:42:ce:b0:62:da:82:9a:6d:46:1b:f3:e9:
70:be:f7:f0:43:f0:09:ff:ca:e4:51:c5:c9:ac:b5:d7:2c:a3:
4f:67:93:7e:14:8e:ef:f8:0a:a6:49:d3:a4:3d:28:fd:10:dc:
89:70:cb:0a:49:13:77:57:a6:2a:14:49:e8:1f:37:5e:a3:e0:
08:a4:44:45:e4:7d:5d:5f:dd:d7:f3:13:08:80:93:c7:3b:10:
08:0e:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:11 2025 by rpki-client