Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier: XcD2vGfmm4yiUgVzxPkGJ6qaBUMvo9IcsMHP6s76k+A=
Subject key identifier: B1:20:7E:22:76:5E:61:3B:1E:42:E5:36:0B:9C:98:29:13:EB:1D:A7
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 019888B24A8CF9667CFBFC1701ED0505397C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number: 1331
Signing time: Fri 08 Aug 2025 08:00:42 +0000
Manifest this update: Fri 08 Aug 2025 08:00:42 +0000
Manifest next update: Sat 09 Aug 2025 08:00:42 +0000
Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: zeNNoCGdeE2MQc5NSnv8MI9xmkiuw+IOLtbTEjg98f4=)
2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:4a:8c:f9:66:7c:fb:fc:17:01:ed:05:05:39:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Aug 8 08:00:42 2025 GMT
Not After : Aug 9 08:00:42 2025 GMT
Subject: CN=b1207e22765e613b1e42e5360b9c982913eb1da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:3e:a3:b0:5d:9f:5f:d5:53:54:08:01:eb:
c7:e4:fb:77:f6:1b:21:10:dc:74:dc:be:89:03:66:
00:1e:db:bb:d5:83:e3:38:81:bf:2b:07:01:31:9a:
20:25:84:63:7b:c5:0f:38:d4:cf:49:a9:f6:bf:cf:
72:23:35:ba:5c:b0:d1:61:51:b8:ea:c3:63:b2:b6:
36:8e:e8:36:d2:52:b6:2c:c5:51:45:8e:8c:9a:39:
1b:6b:c0:1c:61:ad:6d:9a:54:0c:a3:6e:b3:9e:87:
56:d0:41:99:51:35:00:c5:f7:a2:a5:6d:ed:9e:f1:
88:d3:cd:ba:fb:7f:03:fd:ca:ea:1b:ea:50:18:57:
9f:1f:60:3a:40:62:f8:e8:45:d2:f7:ac:89:0b:e6:
60:4f:77:e9:cf:44:ca:35:f0:3d:1a:ad:c2:e7:3c:
46:0a:a2:a5:b4:bd:f3:55:ea:48:e5:eb:12:80:f3:
43:92:14:84:4a:3a:16:a4:60:d8:95:17:b5:ce:e8:
e4:02:53:5e:a4:84:86:7e:2f:c8:36:d2:af:eb:57:
26:a1:bd:cd:23:aa:e5:f5:f4:19:2a:cb:59:e5:48:
50:99:34:89:22:cd:98:eb:a1:91:36:dc:32:1c:6d:
89:d3:8f:e1:9d:05:4d:e9:fb:5d:33:ba:53:25:5e:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:7E:22:76:5E:61:3B:1E:42:E5:36:0B:9C:98:29:13:EB:1D:A7
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:da:7f:25:ad:54:53:b8:b9:71:42:4f:e9:9f:b0:e2:27:16:
15:87:5f:b5:5a:5a:42:cf:b9:08:68:e0:30:9b:bb:03:0e:0c:
7c:91:01:8b:25:cc:1c:b8:65:0a:78:43:f4:d9:a7:37:ca:cc:
67:81:fe:3d:8f:ba:c2:05:64:19:41:f0:cb:21:dc:b6:68:b7:
d7:77:67:d5:42:12:ca:2d:ee:e9:63:f8:2d:9d:03:cf:19:c5:
a8:61:24:4a:33:0e:a2:af:5c:22:08:31:57:27:92:7d:84:d9:
07:9c:cf:25:67:66:b2:18:da:5d:c9:da:f5:32:4f:69:44:06:
5b:58:19:83:98:71:52:36:34:d5:2a:25:0d:ff:15:a3:c1:e5:
85:30:b4:4b:4e:37:a8:d3:26:45:49:5d:75:8b:3e:7b:c8:0b:
4c:81:8a:f3:72:ce:15:7b:db:a3:68:b5:4e:ea:9e:37:15:ca:
d1:d2:a6:00:94:1f:2f:d7:b4:6b:d2:ac:cd:44:12:f6:a5:ec:
30:74:b3:c0:11:39:44:a8:ff:53:50:5a:b0:0f:f6:e7:2c:ae:
77:3d:76:b7:0f:fd:09:4c:da:31:e9:ef:ed:90:ae:22:a0:a0:
bd:18:c2:99:e5:2d:18:d1:b5:0d:1b:97:ac:48:71:6a:6a:0d:
88:1f:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:41 2025 by rpki-client