Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: UG+LgPOGbylwIpP9LxWWBDn28C8/otOIcvbQfxeBgZo=
Subject key identifier: AE:5B:20:2C:F3:94:A8:6C:93:75:DD:7F:51:08:D7:56:FE:F0:AA:D1
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 019873066974CE05C8643BD883D45E272B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0E95
Signing time: Mon 04 Aug 2025 03:00:56 +0000
Manifest this update: Mon 04 Aug 2025 03:00:56 +0000
Manifest next update: Tue 05 Aug 2025 03:00:56 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: jWi/MtY4362Bs7xxYfkQvzpB8lCVDs5LO5b0jQVVoHk=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:69:74:ce:05:c8:64:3b:d8:83:d4:5e:27:2b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Aug 4 03:00:56 2025 GMT
Not After : Aug 5 03:00:56 2025 GMT
Subject: CN=ae5b202cf394a86c9375dd7f5108d756fef0aad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:8a:5e:1e:60:c0:a5:1a:13:91:c3:b4:5b:
61:77:e3:84:3e:67:ee:03:63:a6:69:86:66:95:85:
40:3d:be:59:d9:e7:95:e4:d1:fb:1a:5a:2d:92:0d:
cb:b8:4e:47:f4:14:bb:9e:bb:26:99:3a:40:9e:fa:
8d:ce:f1:bf:2f:ca:1f:53:85:f8:29:28:e7:f9:cc:
de:c0:1c:42:d6:2d:70:98:14:0b:37:66:01:46:5b:
b4:85:b2:97:f6:3b:c6:3a:01:cb:55:7e:19:3a:c8:
09:fe:bb:18:c3:c1:38:91:ed:cf:34:28:04:e0:cc:
d9:f0:7d:bc:9d:c0:97:91:61:77:6e:54:c0:c0:b4:
d3:a0:c0:79:72:03:86:28:c6:31:f5:cd:51:21:20:
ae:2d:ef:0a:08:ad:62:47:cb:4a:61:da:af:cd:17:
ed:7c:f2:c6:49:79:68:4b:1d:12:ec:c5:06:d4:09:
26:62:cf:48:b7:02:ff:1f:3f:e3:f7:45:2c:62:56:
01:97:00:e7:5a:6d:55:85:dd:a9:ac:2d:98:70:5a:
66:1f:71:8f:9c:29:8d:56:8a:f8:a9:2d:f3:be:4d:
d2:7f:0d:7e:0c:06:9d:22:04:96:7f:0a:0d:10:d6:
39:0f:88:a1:66:86:31:f9:73:7e:2a:4c:f1:43:dc:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5B:20:2C:F3:94:A8:6C:93:75:DD:7F:51:08:D7:56:FE:F0:AA:D1
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6f:2f:05:50:41:21:08:0c:dc:a5:d1:f8:1f:bd:e8:e6:d8:
03:c6:5f:80:7c:fc:e0:88:4d:9b:b3:9a:0e:f6:fb:fb:b0:2d:
b5:ad:d3:4e:53:41:ae:32:51:da:06:02:ba:45:bc:92:d0:09:
7e:5c:28:11:6b:47:b5:96:89:2b:3a:0b:7a:94:2e:54:c1:70:
f5:5e:e2:12:e8:81:f5:eb:cd:9b:78:b7:e8:c9:80:63:3d:b3:
95:e5:27:37:a7:e4:4f:53:6e:01:5c:03:5c:fb:e4:ae:58:5f:
cc:de:59:f0:68:a4:a9:9a:ed:60:8c:40:4d:78:f6:b9:13:d9:
3f:06:e6:c2:9d:5c:23:b0:1a:d6:be:68:f1:4d:a0:d2:88:24:
a2:26:6a:15:01:10:2a:59:2c:58:ce:aa:6a:c3:ca:1e:91:ab:
2c:8f:12:3b:35:aa:b2:8d:3e:7f:8d:3c:37:c7:7f:64:48:57:
3b:16:e6:e2:4e:9f:78:1d:3c:7c:03:05:e7:ec:24:87:6b:5a:
8b:53:c8:6f:78:cb:c4:83:fb:96:74:95:08:21:4e:38:80:4b:
89:56:95:4d:69:b5:8b:71:16:32:53:6b:5d:5d:06:d1:d8:5f:
61:e7:9e:2e:18:69:3b:77:5a:c7:3a:2d:e3:81:e9:dc:10:02:
44:1c:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:56 2025 by rpki-client