Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: IWur3uHtTcM+H0NoNMb+vNUo3zM/YeQpLNVCbDWLQmc=
Subject key identifier: 98:A9:18:88:04:10:6F:36:9E:A5:D2:06:96:ED:B5:15:17:7E:A6:88
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 01987C0936BD7EF82D44DCA9F505E88E22B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 1160
Signing time: Tue 05 Aug 2025 21:00:35 +0000
Manifest this update: Tue 05 Aug 2025 21:00:35 +0000
Manifest next update: Wed 06 Aug 2025 21:00:35 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: eFmYAGPticW5S35J3g5RSQHvb/rp+Ojz5wGGenpUdP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:36:bd:7e:f8:2d:44:dc:a9:f5:05:e8:8e:22:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Aug 5 21:00:35 2025 GMT
Not After : Aug 6 21:00:35 2025 GMT
Subject: CN=98a9188804106f369ea5d20696edb515177ea688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:5a:5c:f2:ae:6a:eb:0f:22:8f:e5:d1:f5:
88:16:27:44:1e:0b:2d:c8:07:18:ef:7d:db:a5:dd:
4e:48:57:13:01:95:63:09:d7:bf:11:7e:28:13:7a:
6a:76:c5:6f:d0:a5:a0:70:9f:39:02:3a:15:8d:f2:
66:30:dc:11:dc:11:b8:0d:c6:53:6a:47:0e:81:a2:
a8:64:4e:92:c2:2a:bf:32:6d:c5:fe:8a:4e:bc:19:
fc:5e:aa:0f:8f:46:c6:75:68:a5:58:e3:be:c2:6c:
7e:23:b1:56:a2:43:1f:89:66:8f:e1:06:11:9d:24:
c1:ba:26:67:c9:0e:90:8e:5d:38:7d:84:04:7f:78:
03:79:e4:5b:27:5f:4a:18:54:b6:94:f1:5f:c9:8e:
03:cb:19:90:76:34:6b:21:ee:86:5f:12:d1:bf:3c:
5a:2d:19:ea:30:ed:7a:4a:73:08:45:32:7c:64:f2:
68:23:84:4b:ca:10:2b:4d:f1:ac:a3:1b:3b:d3:66:
71:82:fd:5c:89:75:5d:5c:11:b3:d5:91:80:76:c8:
fe:ea:a1:18:d9:03:37:2c:64:1a:6f:bf:f0:35:c9:
e2:13:e6:a4:54:b2:b0:2c:28:a3:51:bf:7c:86:05:
31:ed:06:34:05:2d:32:4d:45:75:89:fc:b3:29:1d:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:18:88:04:10:6F:36:9E:A5:D2:06:96:ED:B5:15:17:7E:A6:88
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cf:5d:dc:76:6c:26:f7:65:98:26:5c:61:b6:06:d2:4b:4e:
ae:71:bb:cc:19:3b:06:b1:20:6e:60:e1:fd:73:6f:dd:0f:c2:
74:4e:70:a1:85:29:81:c9:d3:fe:fd:de:b6:7b:11:f0:7a:60:
f1:2f:a0:ae:50:2f:a6:a2:9c:a2:b9:e8:04:85:e4:32:1f:ea:
fb:f0:2c:6f:54:24:f7:16:01:dd:0a:2d:f5:25:6d:4f:d7:2c:
9f:5b:41:dd:a6:2b:99:37:81:96:a3:a2:80:21:ec:cf:18:11:
77:a4:ff:54:73:e8:b1:a8:d1:a0:30:20:3b:e5:55:bc:95:db:
17:71:01:b0:41:cb:28:ce:e8:6c:0a:1a:69:fd:02:88:5e:b3:
ea:4a:ca:88:70:85:3f:fb:26:8e:be:a2:b1:a7:85:e5:89:55:
8e:16:47:e6:f4:fd:10:d6:91:dd:51:7f:15:d7:67:70:b5:06:
fd:bb:29:a1:b6:1d:f4:01:b1:f3:a4:68:b3:83:cb:c0:cb:36:
fd:91:4a:3f:0b:44:7f:c1:78:f0:48:50:fc:eb:4d:19:62:73:
3d:73:14:b6:26:6c:ab:34:c5:ba:75:ab:07:e2:1f:a8:10:d7:
91:ec:9e:53:fd:68:cc:62:b9:00:4d:b4:bc:79:19:a6:d8:7f:
25:32:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:53 2025 by rpki-client