Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: nmRwz7mhMn4nXHSEikVy7r93/Tavz1X6Mru+aY69dl0=
Subject key identifier: F9:C7:65:86:19:52:7C:85:B0:29:78:82:C2:1D:D5:E9:21:4A:2E:27
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 0198744FBA44D8D0B8AFD1BEC7B788BB9768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:00:38 +0000
Manifest this update: Mon 04 Aug 2025 09:00:38 +0000
Manifest next update: Tue 05 Aug 2025 09:00:38 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: mnBAo/i5pHEuPMGTU/3FlWKKfEoNqqz3bC0cs+8Nz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ba:44:d8:d0:b8:af:d1:be:c7:b7:88:bb:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Aug 4 09:00:38 2025 GMT
Not After : Aug 5 09:00:38 2025 GMT
Subject: CN=f9c7658619527c85b0297882c21dd5e9214a2e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:56:7e:21:07:c4:da:01:ed:49:c4:ff:11:
87:d8:b5:11:d8:74:ee:5d:d9:f4:e5:48:c5:ff:e8:
a4:12:dc:df:5d:6b:8b:7e:9d:ff:aa:79:49:9b:b2:
ec:42:5f:09:75:ca:45:f9:6c:d2:35:51:24:79:81:
0c:d3:ba:7d:ca:db:26:2a:2e:fa:0d:eb:d9:a2:23:
b4:38:7e:85:b5:51:c3:a1:64:82:6d:18:d2:8b:6f:
e9:71:ac:eb:a3:47:38:38:7d:cc:13:36:47:74:bf:
00:52:61:4a:fa:9e:3f:b4:35:4f:42:12:d1:13:40:
c6:6b:25:23:e3:0a:6e:55:47:7a:11:95:5c:b2:aa:
7a:2c:2a:71:3e:dc:c7:0e:3d:e7:70:cb:63:c4:97:
4d:e6:fe:6b:21:c5:f3:36:eb:41:08:b4:e6:70:bd:
e3:d6:5e:e0:10:1f:6c:4a:a5:8e:83:31:aa:43:61:
38:7b:e3:3d:96:87:81:32:a0:04:32:93:07:1c:66:
4c:d7:6b:24:b6:e2:1c:f7:7d:a3:5e:ac:c6:9a:67:
80:b8:fa:c4:d5:cd:3d:0b:e4:6c:b2:d1:77:9a:99:
1a:58:f1:3d:e4:64:f0:9c:e2:a8:6a:09:0a:32:99:
94:61:93:0a:6e:a1:73:51:9b:5b:37:43:38:25:eb:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C7:65:86:19:52:7C:85:B0:29:78:82:C2:1D:D5:E9:21:4A:2E:27
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:12:15:62:82:45:eb:40:1b:7c:f8:55:ca:34:18:49:28:d1:
d7:49:da:5a:db:6e:d7:34:b2:21:ab:0b:ca:0d:39:11:73:88:
2b:e8:af:94:44:4b:3f:f7:9f:35:1c:80:d0:b9:33:e5:83:b6:
13:51:19:9d:a7:05:86:e9:0e:4f:04:66:87:0c:fb:c5:e0:35:
47:83:3f:60:cb:f7:dc:13:b7:fb:70:d1:39:fc:f8:e1:64:57:
4f:16:b2:b7:e6:33:b9:8a:82:58:4c:0b:70:70:b4:2b:b7:28:
66:ab:ec:51:00:f5:ad:cb:b5:35:26:16:71:a4:be:9b:ad:b1:
3e:20:3f:74:09:3e:d0:15:b8:7c:43:41:1d:f3:0c:4f:e4:c2:
d3:c4:de:90:c9:5d:54:e3:cd:72:58:d0:b8:79:74:d8:5f:f5:
b3:fb:01:10:fb:54:a3:bd:a4:39:66:8c:a1:62:9e:18:a5:16:
b5:c6:0e:ff:47:fc:95:96:de:40:f2:ae:00:52:cf:37:cf:fc:
49:f3:f2:06:b7:91:61:0e:34:12:60:fc:c0:2e:5c:f5:ef:2d:
61:45:0d:3c:d1:db:46:6b:fa:4f:f3:10:3e:52:f1:b2:11:0a:
93:c4:51:5c:bc:f1:67:36:8e:9a:4b:84:89:af:88:68:02:ad:
88:bd:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:10 2025 by rpki-client