Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: qvMollEvffkSy/3tg+khB3hGU0WovpWg8ad9e8TkPKs=
Subject key identifier: D7:26:11:6E:CB:98:92:55:2A:F8:ED:AE:CF:32:ED:51:76:71:BA:DC
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 0198730690B68BEE1822F0B51CF05AB85193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 03:01:06 +0000
Manifest this update: Mon 04 Aug 2025 03:01:06 +0000
Manifest next update: Tue 05 Aug 2025 03:01:06 +0000
Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: OxL4JWdf7gZbqYEElqj3pS8rXFXw79sKAsMz7ww4eCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:90:b6:8b:ee:18:22:f0:b5:1c:f0:5a:b8:51:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Aug 4 03:01:06 2025 GMT
Not After : Aug 5 03:01:06 2025 GMT
Subject: CN=d726116ecb9892552af8edaecf32ed517671badc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:e1:19:f1:57:03:7d:0e:41:44:17:e7:a8:
f6:8b:3f:04:b2:4f:0c:68:b2:09:58:8d:c1:2a:69:
82:75:46:8d:f5:f4:94:e8:bc:d8:b2:33:84:21:27:
76:6f:54:c6:d6:b2:45:f5:68:65:09:3d:8c:23:e1:
41:f6:b2:c1:22:7b:15:7b:99:5f:bb:b7:40:98:4e:
4e:50:f8:e2:e2:1e:20:3e:e2:c7:f8:8d:1a:d7:9f:
a3:66:c8:33:10:07:37:d7:ee:69:b6:07:87:ae:72:
62:5c:5c:fd:29:ff:aa:cb:40:8d:ce:f6:28:1e:1e:
83:38:05:fd:5c:86:75:a1:9a:d5:2a:90:22:f7:43:
14:7b:03:88:05:91:6e:2a:ec:39:18:ea:7d:c8:b6:
36:2f:e0:40:7e:13:b6:c9:7c:a3:3f:63:a2:6d:15:
62:6c:50:df:a9:68:5f:d4:2f:2a:19:5a:90:d9:ff:
43:d2:62:6b:ed:f4:98:97:91:e0:2c:b8:da:a2:91:
8f:9c:69:4e:a2:6c:c9:b9:a9:57:f8:aa:22:57:41:
6d:39:a1:35:be:92:e6:44:c6:2e:96:fc:d0:9b:81:
2a:2b:8d:91:bf:5a:f8:56:bc:60:9c:09:d4:c6:15:
be:92:5a:fd:81:b7:3a:8e:a1:b8:15:bc:4a:b0:47:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:11:6E:CB:98:92:55:2A:F8:ED:AE:CF:32:ED:51:76:71:BA:DC
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:03:b2:36:56:fa:44:e2:4e:2e:fc:50:cd:2e:d8:f2:83:
5a:ca:9c:61:10:ec:40:cd:4a:f5:46:1e:e9:6a:ff:a4:f5:de:
60:20:c8:1d:36:67:a3:9d:a2:0c:dd:e5:e3:66:5c:bd:a5:aa:
3f:80:0b:10:4d:0c:0b:d8:20:4c:f8:10:97:01:a7:5d:c0:39:
9e:a9:5b:bc:0c:05:41:cc:fa:51:31:2a:90:c3:e5:32:64:d8:
71:d9:b4:81:04:40:85:96:7a:5d:74:74:f7:a8:50:ff:bd:4d:
ff:3c:45:d1:48:b8:32:90:ab:47:23:86:39:2f:fe:a7:65:6a:
14:c1:47:74:37:52:6f:35:54:1d:b7:c0:57:f2:60:df:2f:05:
87:fc:27:9b:1b:be:3c:1e:d7:e2:07:4d:d9:0b:67:86:51:21:
96:30:d8:3a:b7:c3:0e:da:8a:35:a1:1b:b0:e0:2f:9e:37:ab:
c0:d2:ba:13:f8:ff:54:28:f4:5a:31:99:76:88:0a:b0:27:70:
9e:cd:d2:66:59:7e:08:57:b3:ed:f2:40:3d:75:8a:2b:51:b9:
d0:72:03:63:ad:79:17:c2:66:18:6c:10:54:20:01:9d:bd:48:
e2:ff:31:e0:5e:a1:05:c1:21:2c:57:27:26:b9:9a:6f:d6:17:
6a:5d:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:36 2025 by rpki-client