Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: 4yoP1kL/boFFmhChoUaV9dq3wIyshJrHa4aiqmUQYfA=
Subject key identifier: D5:67:C2:2B:F5:4D:B7:8A:2A:DF:7F:4F:6B:6B:F6:EC:3F:BD:36:E0
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 0198A0BB02EC7EE1DD64084C28466EA67C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 0359
Signing time: Wed 13 Aug 2025 00:01:07 +0000
Manifest this update: Wed 13 Aug 2025 00:01:07 +0000
Manifest next update: Thu 14 Aug 2025 00:01:07 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: zLiX99FoHn1SidOi34rUWo/GsxnqTc+NtXM8U4diWSg=)
2: cEQi14kKuKL4ZWozyPewcuSD5kQ.roa (hash: AQa4zimuZDO+7ACyM4KJjx7KQcRwuoNCJUovJ5T5Vck=)
3: xGHkCj7QXTK91-IzTTuEVkNvzos.roa (hash: jRuba4ysEPA//Moy/YkHQHxGDPSKQ/jX38S+l3o0ZrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:02:ec:7e:e1:dd:64:08:4c:28:46:6e:a6:7c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Aug 13 00:01:07 2025 GMT
Not After : Aug 14 00:01:07 2025 GMT
Subject: CN=d567c22bf54db78a2adf7f4f6b6bf6ec3fbd36e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:a1:b6:f3:54:d3:83:a9:8e:ff:8c:5d:9d:
ab:55:ef:8c:0c:b4:34:5f:1e:c8:87:28:5a:8b:7c:
b0:b3:19:c3:df:fb:42:24:8e:6d:6a:f6:f0:d6:41:
01:b9:c6:db:c0:78:2f:51:2a:f1:05:3d:f7:fb:ea:
51:69:49:ff:40:a1:db:1a:e4:af:c4:07:9f:de:ec:
3c:91:42:0d:83:0e:aa:b7:ef:8d:5f:da:20:18:0d:
63:f1:16:28:30:51:cc:8b:3f:71:3a:74:14:0d:92:
41:5f:40:72:84:07:99:4d:e6:c6:56:6b:93:a1:dd:
cf:09:71:51:d5:37:2e:ef:79:18:65:f4:58:ec:34:
7c:cd:c8:10:18:65:55:70:1e:21:f6:1b:90:e8:13:
d8:97:af:66:66:34:6e:66:6f:45:4d:d3:a3:7f:d4:
4f:d6:7e:7d:e0:71:87:1b:1f:bc:c3:ff:83:f8:6b:
bc:43:bb:70:97:3a:61:eb:af:17:3f:ca:a0:fd:d8:
17:17:94:a4:61:a5:66:6d:39:47:6c:4a:36:04:ac:
3d:0e:de:d1:22:8d:eb:83:3c:a6:e5:68:d3:07:b0:
45:47:5a:03:22:d2:ea:c4:d8:e7:40:a1:e8:33:85:
e7:f9:98:b5:66:f0:c0:29:f0:8c:db:15:85:e9:06:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:67:C2:2B:F5:4D:B7:8A:2A:DF:7F:4F:6B:6B:F6:EC:3F:BD:36:E0
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:ae:59:39:c0:64:f7:b2:1d:35:c0:6e:64:e9:7e:95:4c:
25:d8:bd:d0:0e:59:fa:27:4f:70:74:ba:0d:2a:6a:fc:47:27:
7e:db:14:a4:8b:f3:c6:b1:2d:18:c0:ee:b8:1f:6c:0e:60:8e:
d6:13:95:dc:0a:26:f8:dc:38:45:7d:6f:4b:55:c5:50:cc:03:
95:7a:2f:3f:0b:db:8b:ba:84:f7:ca:2f:38:f2:61:fc:60:8a:
df:e0:15:9f:71:a8:9b:ca:8f:c7:f3:16:d4:1d:a4:c9:1c:e4:
35:d8:4a:60:f7:22:11:3a:e6:71:67:d9:7a:08:85:cd:39:0f:
0a:2b:2f:29:9d:e9:c5:f6:dd:ec:ae:c9:5c:dc:ea:3e:76:c4:
b1:a6:ce:f5:75:e1:64:ca:6b:41:3b:46:d9:e8:3e:db:5e:6e:
90:da:0d:49:c5:09:68:0d:e1:d1:ee:fb:f1:c8:6e:2e:8f:fa:
77:50:be:e4:2f:b9:84:7c:d1:27:ce:fc:dc:13:cf:da:8d:54:
ae:35:02:5e:9d:96:46:65:a0:9e:fc:07:59:55:a0:27:77:b1:
ff:68:19:7f:1b:00:52:5b:df:7a:73:00:fd:64:26:3b:c1:f2:
0a:ab:33:ee:14:dc:dd:1d:2c:98:74:2d:f6:2c:38:53:36:b9:
3a:e1:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:33 2025 by rpki-client