Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier: unAWRKvcCtrdHixw1O8aKupLbIZ9db61Tuh6nL793sk=
Subject key identifier: 2B:DA:94:00:63:55:AE:C0:85:5F:F2:A0:BC:37:7A:95:4D:DA:64:1A
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 01988D6AC024DB7CABD2C486D71522E97F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 06:00:40 +0000
Manifest this update: Sat 09 Aug 2025 06:00:40 +0000
Manifest next update: Sun 10 Aug 2025 06:00:40 +0000
Files and hashes: 1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: jbaEp4B1jRx5cA5aPegO/kGjtJbURZx3L2dVpksnH14=)
2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:c0:24:db:7c:ab:d2:c4:86:d7:15:22:e9:7f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: Aug 9 06:00:40 2025 GMT
Not After : Aug 10 06:00:40 2025 GMT
Subject: CN=2bda94006355aec0855ff2a0bc377a954dda641a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:e9:8d:45:de:2b:7e:85:51:eb:2b:64:7a:
1b:77:b4:74:b4:b7:17:d5:0d:c4:03:87:4e:88:53:
15:41:de:00:bf:77:cf:e6:c9:71:ce:c4:f3:04:1f:
e0:bf:37:69:ee:cf:6b:da:97:95:2c:47:75:57:46:
ff:92:63:29:79:5e:89:f4:ee:ff:3e:b6:a0:d8:c3:
62:d0:5b:0a:fe:d3:24:55:aa:50:d8:4b:3d:8c:c5:
f7:f5:3b:9e:35:85:dc:aa:2c:bc:a4:8f:4b:8d:6e:
4f:b4:81:84:f9:68:7f:db:63:f4:a4:cf:27:74:f6:
bd:02:52:84:de:00:9c:bc:36:00:6a:cd:80:8d:ff:
6d:82:c7:a1:76:eb:e9:fa:f3:54:f3:d4:b5:ae:d6:
d2:6c:e3:f5:d9:8b:02:75:98:5b:b0:8c:3f:6d:59:
46:64:15:3d:44:ff:a2:0a:d6:ec:dc:10:ed:ed:c3:
be:92:a0:8f:ae:e8:4f:35:67:41:19:3a:71:c9:09:
79:fb:61:e5:49:92:52:98:3a:a5:c6:df:e7:c0:2a:
0a:0e:3e:20:59:ba:80:91:b5:d4:02:b8:d0:74:5e:
64:49:8e:2f:48:05:0b:a3:0f:02:65:c7:bf:c2:6b:
d9:e2:90:31:99:d2:26:48:eb:53:75:0e:49:8a:ca:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:94:00:63:55:AE:C0:85:5F:F2:A0:BC:37:7A:95:4D:DA:64:1A
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:43:6f:7f:23:12:97:b4:53:3d:94:47:02:15:36:e9:7e:73:
1b:8e:82:e5:39:b3:9c:a5:20:f8:68:1b:84:38:cc:42:2a:43:
5e:c3:39:2f:82:69:3e:d3:52:41:f4:85:02:92:14:d9:f4:e0:
f6:2d:82:bb:b4:c9:a7:ee:bc:a8:17:71:59:31:f1:76:5e:27:
e4:6a:90:9b:25:51:f4:71:ac:73:41:b5:a1:72:bb:18:8f:eb:
7a:7b:f3:b9:bb:58:e3:93:00:d1:c9:5c:7f:ab:42:49:49:bc:
dd:09:fa:9b:91:1e:91:6e:c3:f6:47:eb:27:5f:c5:cf:f5:3e:
88:00:72:ff:6f:4e:ca:25:7f:9e:ea:17:95:5f:c6:51:cb:31:
d1:65:86:a7:1d:1b:76:74:e2:56:97:de:bb:06:24:3f:8a:21:
50:97:e6:ec:d0:d3:16:f0:0a:c4:25:fd:55:b0:84:8f:81:cd:
f0:47:35:58:69:7f:92:cb:ad:1c:d7:5d:ee:0f:b3:21:95:23:
4e:a3:5d:b9:fa:24:17:0d:cd:f0:bf:71:78:46:85:27:5b:96:
38:be:5b:7b:87:7c:26:3c:d5:f0:ef:8b:e7:fd:5b:96:ba:92:
e5:75:bd:01:e5:88:43:0e:73:ab:29:5c:1b:04:bb:9a:1f:81:
95:da:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:30 2025 by rpki-client