Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: rpbZblVi3j/iP19ZhCbHcMHwbBYdg7JaPMLyqPGzbFI=
Subject key identifier: 80:3E:9E:4F:57:AF:B4:5E:EA:2F:72:65:4B:86:55:50:8A:5A:4E:18
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019897139124ECA74DF0879C86E19EC3E890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 162C
Signing time: Mon 11 Aug 2025 03:01:38 +0000
Manifest this update: Mon 11 Aug 2025 03:01:38 +0000
Manifest next update: Tue 12 Aug 2025 03:01:38 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: +EIkXjLexCHm9iHBPUYq7IZD4oJMOZqumJbHsfQFA8Q=)
2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=)
3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=)
4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:91:24:ec:a7:4d:f0:87:9c:86:e1:9e:c3:e8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Aug 11 03:01:38 2025 GMT
Not After : Aug 12 03:01:38 2025 GMT
Subject: CN=803e9e4f57afb45eea2f72654b8655508a5a4e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:15:16:60:f9:b0:d0:5a:dc:96:03:68:d0:
63:6c:b4:8b:e3:13:c4:87:57:33:f0:d2:bc:ea:0f:
78:bd:21:de:57:9a:2a:b8:26:52:04:3a:2f:40:3a:
db:30:4e:c9:eb:73:1e:1b:4d:88:b5:ab:76:c5:0d:
b8:6b:f4:39:ec:8c:ce:08:d7:24:5c:b5:52:2d:70:
b8:bd:66:6d:64:17:08:e3:ec:17:42:75:2f:27:54:
5e:c6:10:25:23:39:24:f8:8a:a6:aa:ad:20:79:1e:
cc:26:44:af:7f:b7:bf:9c:b1:00:27:7d:9e:0b:53:
62:16:0a:f5:94:14:bc:b7:2d:9f:bd:49:46:fa:0c:
38:36:59:fa:f3:ea:4f:84:4f:f7:f8:bc:8e:2a:bd:
4a:da:f3:15:e9:f1:c1:2b:1f:55:be:74:e4:5d:05:
33:22:5b:27:27:88:a8:07:8b:54:23:da:8b:08:e9:
a4:c9:ba:2f:17:eb:dc:9d:b8:46:22:f5:13:f4:d0:
51:ad:99:48:0f:45:dc:26:02:99:0d:23:9d:67:23:
b2:4e:1c:58:8a:94:69:46:f3:55:d9:62:e0:8e:84:
1b:22:2e:07:30:00:49:80:95:2f:c9:3e:26:79:c2:
3e:a9:cd:16:95:a2:da:ba:46:bb:6b:eb:24:7d:1b:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:9E:4F:57:AF:B4:5E:EA:2F:72:65:4B:86:55:50:8A:5A:4E:18
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:af:69:32:3d:f3:fb:44:a3:5b:84:79:21:76:50:bd:38:58:
d4:09:d6:d0:7f:b3:5d:c8:eb:73:f1:30:49:f0:69:b5:7d:04:
a6:61:34:89:e2:b2:e0:36:77:15:fa:8b:fe:fb:4c:a6:b9:90:
26:4b:81:03:6e:4c:3f:8d:3e:17:31:47:d2:ea:8a:de:32:a2:
70:20:d3:f1:08:27:1d:f8:66:9d:25:09:2d:da:09:d5:2a:04:
30:8f:49:ec:5e:2f:6f:24:e0:e2:60:6f:f5:56:48:43:8c:68:
13:9c:a9:74:07:5a:14:58:1a:f9:ef:a5:a1:40:01:70:be:0a:
d1:e4:09:a2:b4:b8:91:e4:38:a6:ec:33:2e:e2:c3:c9:43:93:
d5:00:79:b0:05:a5:a2:29:43:c1:d0:a9:9b:19:43:ff:11:20:
ac:21:c4:60:25:16:f7:d3:b0:93:e7:b8:20:ea:9c:91:34:87:
4a:f3:e8:7e:0a:12:73:b7:3d:61:30:3d:51:e2:f3:50:1b:b6:
ad:e8:e5:64:ee:15:fe:f0:e7:81:a3:1f:e6:26:54:0a:06:30:
49:67:54:c1:8f:7f:16:bc:13:6f:7e:b0:50:62:e4:c6:49:7c:
53:ab:e2:a4:a0:68:a2:5c:2b:b8:ce:75:f3:46:40:d7:cc:c4:
69:fc:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:11 2025 by rpki-client