Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: SlEIyW6M1+ZCtgP757btEYGkb2p0pok8VRwfB9uGcdE=
Subject key identifier: 39:51:AC:23:F7:3E:DE:F3:C1:4E:5F:CB:6B:99:AC:54:94:8B:87:2E
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 01987A1B706CBCEED8CF2F48FB7D74943D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0B5F
Signing time: Tue 05 Aug 2025 12:01:15 +0000
Manifest this update: Tue 05 Aug 2025 12:01:15 +0000
Manifest next update: Wed 06 Aug 2025 12:01:15 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: Nr+sBts9R9dklBEoBv3erYrzfs8jzQwu8eU2t0t6Akg=)
2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:70:6c:bc:ee:d8:cf:2f:48:fb:7d:74:94:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Aug 5 12:01:15 2025 GMT
Not After : Aug 6 12:01:15 2025 GMT
Subject: CN=3951ac23f73edef3c14e5fcb6b99ac54948b872e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:b4:84:c0:e2:3b:f9:34:66:5f:79:e9:aa:
83:11:37:0b:0b:4f:9c:5d:98:ca:09:f9:66:40:77:
c0:bc:37:bc:17:59:59:f6:03:10:f9:59:ec:d9:fc:
5a:fc:58:53:4a:31:ed:ec:49:52:f0:8a:5a:26:af:
c5:34:0e:ae:b0:cc:11:10:a6:6a:a2:c4:b7:7c:50:
15:d9:8d:06:1a:ab:ee:43:60:0d:af:02:9c:c4:9b:
e7:73:04:d8:df:92:e1:2c:b6:42:2c:f8:59:93:d1:
32:f9:9f:8f:d9:fa:ee:27:07:f0:5e:c8:97:bf:9a:
a7:9a:3d:e3:ec:1d:2b:de:ea:a4:ce:99:37:39:ec:
2e:b5:77:0d:f5:2f:d9:a0:4b:be:88:5e:53:88:3c:
93:69:cd:e5:aa:e1:2d:80:80:32:4f:43:6e:d6:5e:
59:a3:57:d8:24:90:34:ff:8d:08:65:ec:4b:8a:11:
ff:f9:62:b9:d4:95:96:11:a9:b1:f5:96:d7:f9:18:
9f:0a:5e:38:4c:1b:47:8d:b8:d7:09:cf:c3:79:6c:
83:68:95:97:19:6c:87:7a:9c:2e:31:89:f6:c4:fa:
2c:0f:03:3e:8c:35:d3:97:d2:e4:08:c4:89:30:04:
37:16:b8:11:96:6b:c0:9e:e5:6f:65:c4:03:3d:6d:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:AC:23:F7:3E:DE:F3:C1:4E:5F:CB:6B:99:AC:54:94:8B:87:2E
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:86:74:24:60:44:78:0b:cc:ef:d0:64:e3:f8:36:73:1d:14:
09:da:25:25:f0:cf:74:8c:66:d4:7c:b2:a5:f7:72:f6:b2:03:
49:1e:52:02:3a:4f:66:91:f6:ca:08:8a:b1:fb:be:28:83:a8:
9c:59:3f:c0:5d:df:03:ec:93:2d:f0:ff:9e:18:c8:aa:c1:06:
c5:08:11:e0:94:00:7f:66:8f:98:e9:1e:75:bb:53:a6:0e:7d:
39:d5:cf:52:48:13:83:af:38:2e:a3:cc:42:d7:f0:02:65:68:
14:35:b8:e5:56:72:ab:e0:cc:ed:97:dc:33:3f:bb:64:b9:13:
6e:eb:89:45:95:f4:18:72:d8:b1:fc:bf:5d:d2:a8:20:7d:fe:
2a:60:f3:c2:8a:73:04:a7:2e:8e:b7:3a:d3:bb:87:66:73:13:
a0:25:98:5e:56:89:44:28:ac:e9:37:09:a4:f2:30:e6:ec:be:
e2:16:6c:22:a2:64:92:17:9a:e7:50:75:b4:f6:0e:03:0c:3a:
81:53:b8:30:fb:ea:18:d6:b4:43:e9:4c:c5:32:a2:1b:9c:41:
ea:50:08:bc:80:25:68:cf:05:b3:f8:21:f8:e9:c5:8a:bc:1f:
2d:9c:72:b1:73:7c:2f:72:34:9f:f4:24:20:93:20:18:b6:25:
4c:85:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:29 2025 by rpki-client