
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: 85tEN5Gl0bmi51qGAgfT8Toa2TokewDtlQEfqM5tn7Y=
Subject key identifier: E2:92:AF:D3:C1:4F:CB:60:55:B0:58:F2:09:01:ED:E1:CD:9C:91:F2
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 01987CE520DF1580690B13248193E4F7AF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 15AD
Signing time: Wed 06 Aug 2025 01:00:47 +0000
Manifest this update: Wed 06 Aug 2025 01:00:47 +0000
Manifest next update: Thu 07 Aug 2025 01:00:47 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: 2QLZdkgkWmsNuuZ2KYa8PHmzSRC6z2PesGZjOwxTzCw=)
2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:20:df:15:80:69:0b:13:24:81:93:e4:f7:af:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Aug 6 01:00:47 2025 GMT
Not After : Aug 7 01:00:47 2025 GMT
Subject: CN=e292afd3c14fcb6055b058f20901ede1cd9c91f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a4:ac:30:f9:44:e1:5d:67:ba:87:0f:82:4b:
d0:50:d2:0b:9e:85:48:1d:f4:ae:64:e6:be:2e:cf:
fb:9e:d3:78:27:16:8a:56:a5:15:b1:e0:46:cf:fc:
17:2d:5f:38:ca:16:9e:ac:23:e8:a6:87:f5:2c:cf:
e0:7f:b1:cc:a6:3e:59:1a:05:d0:8b:e3:43:2d:0d:
ec:48:c9:cb:ac:87:34:68:d5:15:e2:2a:7b:69:19:
7a:83:43:e5:79:91:9d:12:5d:34:d3:ef:8c:16:5c:
78:6f:9c:5b:12:92:65:d3:ed:0f:9e:40:17:dc:47:
de:49:50:a4:0c:7c:60:72:43:60:a4:51:e4:e9:81:
91:2d:b9:15:7b:d4:b5:db:07:5c:db:7c:fe:b4:d4:
e8:0d:74:9c:29:79:73:f2:fe:52:0d:43:78:e6:2b:
56:c6:32:dc:8e:78:cc:99:2b:e1:9e:01:a8:91:c7:
cb:5e:9d:5d:cf:3b:d1:06:d1:b6:d0:d9:11:cd:04:
8f:a9:e1:4c:b8:30:34:20:bf:9a:d0:3a:75:8d:21:
e2:bc:28:f1:95:03:28:5b:65:bb:be:86:99:3a:66:
25:9a:60:93:44:8f:6e:90:d9:94:06:6f:2f:51:b1:
a7:ec:43:67:88:25:52:f5:4f:fa:82:c4:4c:ba:40:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:92:AF:D3:C1:4F:CB:60:55:B0:58:F2:09:01:ED:E1:CD:9C:91:F2
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:09:a4:5d:a9:5d:c9:d6:ab:6d:2b:b5:ba:3e:66:cc:c1:b4:
44:46:a7:b0:af:e7:fc:7e:db:50:6e:67:67:33:97:08:19:38:
f7:df:f8:83:bd:66:1f:3f:1f:57:ba:10:6e:23:5a:04:92:dc:
84:0c:9f:4a:63:bb:83:43:6f:2a:f9:a7:4b:ee:d2:0a:4a:41:
ce:78:66:26:bd:61:c0:ac:e3:c4:59:9f:10:30:e5:55:af:05:
4c:09:ec:82:b1:8b:09:d8:00:64:9d:20:46:95:74:3a:27:a7:
38:30:20:f6:9d:d6:e0:52:82:80:9a:47:8c:30:db:69:58:bf:
a7:67:ac:67:c1:6f:35:e7:36:c1:d2:76:ff:96:55:7e:c8:02:
e5:3b:f4:57:24:c8:d1:98:16:6c:45:8e:19:1e:8b:a8:6e:30:
48:74:b3:9d:57:91:95:30:6f:fa:e9:8a:f1:c4:79:28:e6:50:
fd:1e:4f:f0:27:0f:c9:aa:68:d7:13:4a:d5:33:d0:16:93:87:
0b:9d:2e:d1:41:57:d1:28:20:73:0c:7c:c6:05:7d:ed:f8:6a:
39:33:25:07:1f:8a:52:af:b8:3c:e3:5f:5b:38:0b:5c:61:32:
d1:ab:1a:29:4b:86:f8:f0:71:4f:c2:30:04:f1:73:a2:05:50:
a8:88:5f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:22 2025 by rpki-client