Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: AWBSijnbHzuPoY1rFlCD+WW7KS5Xw0SWMd+m9U5ysMs=
Subject key identifier: FE:4C:57:12:2C:37:62:6B:22:7D:C5:E6:5E:A7:03:68:F8:48:01:9C
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 01987F0AA4B7CA3138F689FF9A0D3A3595B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 0336
Signing time: Wed 06 Aug 2025 11:01:00 +0000
Manifest this update: Wed 06 Aug 2025 11:01:00 +0000
Manifest next update: Thu 07 Aug 2025 11:01:00 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: 7s0IDJ4+4dXfs5m1pQD5ndmieasSXDkwXspc4UNqo34=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:a4:b7:ca:31:38:f6:89:ff:9a:0d:3a:35:95:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Aug 6 11:01:00 2025 GMT
Not After : Aug 7 11:01:00 2025 GMT
Subject: CN=fe4c57122c37626b227dc5e65ea70368f848019c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:7c:3d:46:1c:46:43:3a:c0:d3:35:c9:d4:
c1:52:df:57:26:2e:a9:e8:cd:53:6e:5e:7e:15:c4:
a6:bf:3f:5d:c0:da:16:b5:10:9c:af:31:42:8d:ab:
af:f1:b4:80:56:2e:d6:f1:3a:ba:1b:da:13:e0:d8:
d4:d8:04:f1:ca:f9:20:9f:56:75:03:3a:e6:1c:ec:
9f:d0:1b:d6:e5:88:80:81:31:bf:1b:1c:0a:1a:3c:
aa:1b:67:e7:80:8e:7f:07:28:89:9e:a9:7e:54:ae:
ba:aa:20:4b:fe:47:d9:9d:09:54:69:62:47:b8:45:
05:3c:d8:1c:7e:3a:4b:5b:ec:76:fa:1c:82:61:75:
85:fa:04:b0:7b:ca:7b:21:d1:81:c5:59:52:02:cf:
bb:02:b8:7f:9d:22:15:7f:43:ce:0a:d3:c5:d1:a3:
3d:87:68:ce:ae:1d:14:b2:ef:04:39:65:e6:3e:1b:
1b:a8:f6:33:b7:39:ef:82:45:50:8b:ee:2c:7b:0c:
88:b6:0c:17:53:3c:40:7c:a1:e4:e0:b1:90:4f:18:
42:2d:1f:f2:e5:40:3b:1e:7e:f4:3f:58:2d:93:a2:
6c:3b:4b:17:f2:c8:a0:30:b0:04:17:4c:d6:64:bc:
ae:29:ea:97:62:9a:7e:9f:df:c2:47:b3:1e:ba:a1:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4C:57:12:2C:37:62:6B:22:7D:C5:E6:5E:A7:03:68:F8:48:01:9C
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:02:a7:8e:24:b3:d6:cf:2f:f8:2b:bc:48:a5:34:78:97:4b:
c2:13:da:bb:41:48:3c:23:42:62:35:f3:51:e8:2a:c1:f8:59:
ae:95:7c:e2:d1:c8:db:46:bc:a9:cb:0e:04:9c:2e:97:f5:8e:
fb:24:7f:42:76:2c:09:6b:1f:5c:74:81:8d:7b:1c:f4:80:10:
df:ca:b8:90:6a:24:b5:bf:f1:cc:a8:1f:52:8a:0d:aa:9f:aa:
b7:13:75:6f:44:fd:7a:b6:78:8e:85:05:09:6c:a1:56:2a:dd:
e8:67:a2:ad:0d:1b:e5:b2:1d:ca:49:fc:e5:ba:56:4a:c6:36:
40:a9:0f:bf:e9:7d:2b:9b:11:10:1a:91:90:6c:57:61:e2:6f:
32:64:8f:09:bd:6f:19:ed:77:a9:6e:19:8c:e4:c6:3f:6a:7f:
e0:04:95:97:82:88:81:52:02:09:4a:eb:1c:a6:45:b3:2b:44:
bd:24:a1:17:f2:78:6b:47:06:35:6a:d1:ca:bd:3d:53:0f:ba:
48:9d:2a:b2:2d:6e:fb:17:f3:25:8e:21:12:e1:e2:dc:f2:0e:
4b:08:27:1e:b1:3e:18:22:00:45:6b:55:7b:d6:02:10:b5:16:
b9:27:78:33:c8:68:c6:25:46:ef:9e:58:b5:6e:f3:23:c6:fa:
e3:0f:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:02 2025 by rpki-client