Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: yHgoEXLyA5D+NWlqyukQJwhp2jZcUo9OSkFedV5Ykfs=
Subject key identifier: 1E:67:27:2C:DC:5A:86:32:B1:3C:4D:11:D3:8E:69:C2:45:CF:91:5B
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 019877BF3C51AFCD62C7CE6DB1D2B446EA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 05C3
Signing time: Tue 05 Aug 2025 01:01:18 +0000
Manifest this update: Tue 05 Aug 2025 01:01:18 +0000
Manifest next update: Wed 06 Aug 2025 01:01:18 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: hlI9fMf0gT3/d8O/lnAt3exitXWTlRhnre0NboZuP9Q=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:bf:3c:51:af:cd:62:c7:ce:6d:b1:d2:b4:46:ea:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Aug 5 01:01:18 2025 GMT
Not After : Aug 6 01:01:18 2025 GMT
Subject: CN=1e67272cdc5a8632b13c4d11d38e69c245cf915b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:93:62:00:ea:a5:fe:60:3f:c4:51:99:54:
fa:48:f9:4d:2d:a6:15:ef:16:45:eb:38:f7:90:72:
f0:dd:97:d6:0f:f9:f7:c1:9a:b5:c4:c6:22:bc:c9:
70:0d:14:0c:4b:f0:ac:90:cf:d5:84:23:35:1e:6c:
62:a5:e7:7a:76:19:71:f5:fe:80:6c:b3:c5:2c:26:
ea:21:9b:db:89:54:7d:d3:85:ca:a1:c6:ee:af:83:
e3:9f:97:a0:5a:cf:6e:86:d6:94:22:cb:c3:0d:c8:
ff:82:1c:29:71:ce:82:30:07:8d:b6:1f:6a:6f:5a:
74:3d:ef:53:19:98:eb:5d:1c:4b:e0:bf:4b:48:2f:
d5:b4:a5:f5:2a:c7:2d:ab:25:b6:b3:32:43:bd:77:
fb:a0:88:32:f9:bd:89:bf:fc:00:bf:00:44:0d:a9:
09:7f:b6:ef:a5:28:0c:a2:06:eb:5e:cf:75:a1:b0:
2e:f4:4a:6d:ec:09:79:63:5c:4b:3e:fb:87:59:cb:
5e:c4:70:ec:fc:05:4b:cb:60:de:1d:2b:11:3e:51:
54:24:53:d9:8e:0e:d0:24:28:29:7b:22:62:9d:a7:
d5:3f:29:44:ee:8f:3d:9b:c6:e2:7b:ea:f4:bf:90:
01:1f:60:4a:48:14:fc:60:51:d3:36:8d:86:d1:38:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:27:2C:DC:5A:86:32:B1:3C:4D:11:D3:8E:69:C2:45:CF:91:5B
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:13:2c:db:2b:ea:2b:d4:a4:68:35:f8:ed:9d:fd:93:cd:33:
95:d0:04:41:d7:59:53:b8:5d:3e:62:9d:c4:bb:cb:d6:db:d1:
c1:ad:d1:e2:9c:bf:31:3b:af:d9:9b:50:8b:f4:0e:32:f7:e8:
d4:4b:58:7e:64:f9:4f:de:f1:bf:13:4c:a0:9e:b4:1c:82:61:
3a:e9:92:4d:35:07:32:e3:c8:0c:d1:95:7d:61:3f:b6:54:55:
26:e4:f5:2b:be:02:5b:61:d9:a3:ea:fd:46:02:5d:2b:32:67:
75:df:5f:e9:0b:40:51:47:d3:a0:92:99:a1:e6:fe:11:40:66:
4c:6e:42:85:f6:48:6c:9f:1a:64:e0:a1:fe:36:d5:e4:d2:d3:
c6:c2:ed:9a:3c:0b:b5:4e:54:82:83:3d:cd:10:2c:47:63:ba:
0c:6f:ed:68:3b:cd:7c:cc:ed:97:7d:39:dd:08:20:cd:03:f6:
5c:53:99:b5:56:17:01:90:9f:56:a0:bd:13:6f:1d:be:bc:25:
d8:50:0f:f7:6c:6b:58:84:11:18:65:3f:c3:55:d5:2a:d5:85:
29:74:af:a2:0d:27:e0:c1:ed:40:d4:63:66:d3:25:76:0d:6e:
1c:6c:28:fb:ad:c0:2d:f9:cb:b3:6f:6e:30:83:90:b4:d4:46:
cd:95:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:08:13 2025 by rpki-client