Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
File: NAahLsxTolGnXOe6yqyeQa7otMo.mft (raw, json)
Hash identifier: GKW+0kFWHIOVUrIkLlEv5YfpuuqGCbN77vIdTCz91Ow=
Subject key identifier: 25:42:4F:44:65:16:7A:7F:0A:5F:71:49:E0:2C:67:FB:C9:50:0D:B5
Authority key identifier: 34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
Certificate issuer: /CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Certificate serial: 01987DF85F77AE1A8548BC14BED4675C199F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 06:01:26 +0000
Manifest this update: Wed 06 Aug 2025 06:01:26 +0000
Manifest next update: Thu 07 Aug 2025 06:01:26 +0000
Files and hashes: 1: 9N71vXZ6iYuqWW-If0CgsO_Wjpg.roa (hash: plP8bbCihgTmT1C8mtLaGAuAfGPMZ93aIA1Z/LkRd90=)
2: NAahLsxTolGnXOe6yqyeQa7otMo.crl (hash: I1mArGk1zvsjUjh0g6PVqcTr6sUR4r8uxqZXbHrPfvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:5f:77:ae:1a:85:48:bc:14:be:d4:67:5c:19:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Validity
Not Before: Aug 6 06:01:26 2025 GMT
Not After : Aug 7 06:01:26 2025 GMT
Subject: CN=25424f4465167a7f0a5f7149e02c67fbc9500db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:74:43:23:ba:da:a4:92:18:c9:01:11:86:
ca:37:4a:e1:e0:a0:47:24:82:f6:be:6f:5e:fa:d8:
2a:21:99:61:95:82:51:c5:8b:1d:d4:e4:cd:e6:90:
0a:13:5e:99:bf:dc:7b:b7:a2:25:e7:64:31:55:1d:
c8:c4:6e:1c:c3:95:5b:9c:bd:58:42:60:c2:cc:9c:
cf:d6:0b:7c:45:e6:88:28:e3:d2:21:e4:0b:41:60:
5f:97:1b:9b:a2:cc:63:e6:5d:b4:de:f2:0b:fb:14:
59:87:f8:01:ff:5b:4d:57:7d:41:fc:c0:f0:62:12:
ae:62:77:c0:b8:00:ed:21:a4:70:6c:c7:f6:b3:b2:
c2:55:ba:ea:df:8e:6f:93:c2:e3:3b:b8:2b:e1:69:
eb:53:f1:6e:48:37:22:80:49:15:c0:58:df:97:1b:
94:31:04:be:0f:77:0b:c9:b7:b4:3e:27:4a:22:26:
d1:91:94:1a:10:38:51:0c:80:48:c1:df:21:07:7c:
c7:c0:88:15:6f:b7:cd:01:17:b8:17:ff:8d:ad:1c:
ea:09:1d:da:83:72:0a:3d:31:f8:a4:9f:f8:88:f1:
ee:61:8a:cc:e6:74:b9:1e:46:fd:8f:fd:41:d1:41:
9c:63:fd:11:bf:4d:b3:db:65:85:c0:14:92:0c:ae:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:4F:44:65:16:7A:7F:0A:5F:71:49:E0:2C:67:FB:C9:50:0D:B5
X509v3 Authority Key Identifier:
keyid:34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d9:7a:01:8a:e0:d3:58:76:db:96:20:40:8e:a4:7a:aa:76:
cc:6c:ca:85:25:d5:37:ce:19:86:c0:d6:4e:d4:0a:a6:b3:5d:
ee:58:1a:5f:7f:82:f7:00:ab:35:5a:56:3e:3e:cb:16:d9:20:
e8:a3:8d:97:74:5e:cb:ee:34:e7:92:e7:93:8c:0b:d2:b1:e6:
2d:c2:63:54:5e:5a:03:54:5a:91:6e:38:02:01:14:17:aa:29:
ea:0b:36:91:00:47:34:ba:e7:93:c2:7a:69:33:cd:89:80:10:
73:04:95:43:0d:04:8f:04:9b:b8:20:d4:ba:37:50:5b:24:08:
fa:2a:f4:25:19:78:3e:dc:0c:0d:9c:4a:53:56:1e:28:b3:46:
21:e1:d3:39:4f:4a:82:f8:92:62:13:86:33:39:7f:c2:6e:47:
11:15:9d:0e:45:ee:1a:ac:1b:a0:6a:4d:20:eb:48:f2:50:ac:
76:ae:ca:cb:0d:0d:78:75:40:d6:7d:9e:cb:96:3c:51:6e:23:
b2:16:5f:cc:3c:8d:d6:9e:58:7d:4b:1f:8c:6d:21:c8:9c:8c:
41:b8:a7:b6:b5:b4:da:05:e1:1f:5a:d1:a2:d6:fc:1b:e5:5b:
c8:7a:39:00:eb:2b:77:1c:2e:76:92:d4:af:cf:f9:70:66:48:
35:a0:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:40 2025 by rpki-client