Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: Ka9RZtyfG06miU4iMyVFIAaFYxrLaNRMOw+0jM/p0G4=
Subject key identifier: 79:27:2C:0D:B1:3F:72:48:38:C9:97:C1:1B:8A:45:7A:8F:AE:6F:8D
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019893A3E8D4B844FA567B3C2231EBD848C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 0192
Signing time: Sun 10 Aug 2025 11:00:49 +0000
Manifest this update: Sun 10 Aug 2025 11:00:49 +0000
Manifest next update: Mon 11 Aug 2025 11:00:49 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: sLf46eCe9wo2e2SWAJBNzwhE/T+rHqNKx3HZbm/4S7o=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:e8:d4:b8:44:fa:56:7b:3c:22:31:eb:d8:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Aug 10 11:00:49 2025 GMT
Not After : Aug 11 11:00:49 2025 GMT
Subject: CN=79272c0db13f724838c997c11b8a457a8fae6f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:79:de:4c:ad:e5:ba:58:02:28:aa:b7:68:
56:44:96:32:cb:27:36:4a:de:76:fe:7a:a2:02:4e:
7a:a9:89:8c:3a:8e:f4:2d:03:30:77:fb:2b:8b:cb:
54:75:8d:24:37:8b:71:8f:d8:76:2b:bf:6a:ed:47:
e8:1d:d8:59:f6:e5:8f:05:da:b7:5b:db:ca:11:35:
f3:50:87:e6:09:f9:35:9d:ad:df:01:ff:4a:6e:b3:
d9:8b:97:9b:9c:d3:e8:71:41:8e:4c:ba:14:e3:01:
9c:76:42:e5:1c:65:cb:43:c5:f9:a9:98:16:f7:1d:
f7:a9:85:58:e2:ad:ff:40:02:8f:67:fc:ca:7e:af:
09:30:e2:0a:e6:e3:73:87:6b:53:0e:92:90:62:db:
d8:04:e7:90:ef:3a:db:47:3e:7e:15:1c:b0:04:6d:
37:8e:1c:96:bf:c9:14:03:80:71:54:68:bd:6b:d6:
07:0b:7a:4d:b0:05:dc:06:dc:d5:0f:24:2b:6a:aa:
12:38:e9:d0:31:ff:0d:0e:b4:fe:a2:2c:85:c7:8d:
8b:df:ab:47:c3:30:73:49:7e:4a:e0:94:ba:0a:87:
da:6b:fc:43:8c:b8:05:80:f8:19:cb:ed:83:31:36:
fb:86:6c:90:59:85:14:b1:27:a2:3b:fc:7e:13:9e:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:2C:0D:B1:3F:72:48:38:C9:97:C1:1B:8A:45:7A:8F:AE:6F:8D
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:8d:9a:0a:ae:e3:36:29:6f:f0:9b:af:4a:41:fb:3b:18:ce:
f3:4f:48:f5:d4:8c:77:17:09:57:ce:a9:a8:d0:79:6f:85:92:
87:22:c0:f4:a9:43:f8:8c:12:13:31:a5:24:88:0a:50:a4:8f:
17:ac:58:1f:33:f4:74:ba:4e:2d:32:dd:d4:a8:2e:73:db:7a:
3c:b4:77:c3:62:7e:ed:c7:2e:26:eb:38:71:05:c8:99:b3:7f:
13:96:68:74:4d:3f:da:39:31:52:fe:2a:be:53:91:c0:71:4c:
79:bb:d3:ce:1d:c2:92:6d:c7:d3:43:96:b2:70:e1:bf:1a:97:
4d:6f:59:3c:d8:21:bc:57:6c:74:e4:ae:59:39:ac:b4:d0:74:
69:ef:5f:c9:f6:02:c2:df:5a:d3:c7:1c:da:69:46:4e:d3:37:
52:5d:df:13:a7:3e:e5:e2:2e:e0:ad:ac:19:cb:a0:09:9e:80:
df:f2:42:54:ec:f5:a3:c9:e3:ab:71:b7:37:ff:ba:70:c1:81:
22:c6:63:0a:fc:de:4a:23:bf:b1:a0:5e:8b:15:93:ca:b3:6c:
cb:31:04:99:59:c1:15:da:79:37:bd:b6:5a:e5:58:bf:45:87:
d7:1b:95:4c:e9:98:e1:89:2e:3b:cf:22:88:25:6f:5c:c8:f5:
20:65:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:57 2025 by rpki-client