Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: EWbMUPosRNrUde4HF1n0DB07hkSf4BkbA4zRBADGER4=
Subject key identifier: 5B:CA:32:76:8C:B9:C0:78:B1:CE:F2:04:51:8A:4E:30:4C:59:32:30
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019873745A40F0D74B6A981200750143157A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 107A
Signing time: Mon 04 Aug 2025 05:01:01 +0000
Manifest this update: Mon 04 Aug 2025 05:01:01 +0000
Manifest next update: Tue 05 Aug 2025 05:01:01 +0000
Files and hashes: 1: 57xvgs1C64qj87aIpNvXlZvGXRo.roa (hash: zjoFwMxs5GYLsG8xg0G8PjPosJWEnHUje1reYWnSt8s=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: 0td0HhbUrGLCnisDUeauX2zfsbY7eQ/Jgq2H8mOfYYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:5a:40:f0:d7:4b:6a:98:12:00:75:01:43:15:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Aug 4 05:01:01 2025 GMT
Not After : Aug 5 05:01:01 2025 GMT
Subject: CN=5bca32768cb9c078b1cef204518a4e304c593230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:d3:aa:11:03:08:40:f6:6c:ff:cc:18:20:
5e:41:aa:2c:33:bd:2c:27:24:4b:01:9f:f0:ac:bf:
67:87:5f:f2:7a:f2:c1:45:33:3e:fe:51:e9:43:92:
ba:ca:d7:bc:7a:72:e6:6c:95:f4:33:e5:89:81:35:
12:bc:5b:24:02:ba:4e:9b:34:94:f8:3b:61:c6:f1:
6d:02:95:7e:ac:9e:2a:0d:f4:8e:f0:0a:e5:89:04:
19:3b:ba:33:78:20:4f:eb:e9:ce:a6:86:50:47:cb:
85:62:c5:d9:0b:4c:a8:1e:92:63:2e:2b:44:fe:0e:
dd:79:32:5b:34:9a:72:94:6f:71:0b:a5:df:dd:28:
91:fd:2c:a7:94:48:c2:7a:3a:7d:c7:b4:6e:e1:88:
c5:4d:df:f4:50:e2:6b:d5:2e:15:88:03:a2:66:83:
11:a6:bd:14:e3:9a:78:f2:bb:96:6a:24:48:7f:ff:
2e:04:58:03:91:7e:25:7a:36:51:ed:f8:a6:51:80:
d3:b7:55:f0:ef:07:c3:76:91:5b:2c:6b:43:8c:80:
1c:bb:8f:19:b3:4d:68:26:85:e3:50:b5:1b:a9:af:
03:e7:93:a4:80:83:19:c0:4f:ef:26:30:8a:3f:9a:
c5:ba:49:09:d3:11:77:30:9c:d5:cc:8d:01:6f:30:
e3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CA:32:76:8C:B9:C0:78:B1:CE:F2:04:51:8A:4E:30:4C:59:32:30
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:d8:59:8b:bb:de:10:d7:10:32:ea:25:6d:b4:ac:3a:79:
a6:e4:f3:c7:1f:ff:99:fa:7f:6c:21:58:41:94:22:72:b3:55:
0c:49:27:d5:a4:36:d0:7a:d5:50:31:74:47:fe:8b:d5:de:47:
bd:17:48:ce:0b:8f:72:17:1d:16:d1:f9:c7:51:f4:cb:5a:a7:
a7:6d:e6:8d:5a:6c:7b:2a:e7:61:b6:9e:f6:ec:0b:fd:d4:33:
02:65:6c:b0:79:5d:51:ba:7b:8d:1f:a4:ca:3f:81:57:0a:07:
e5:1e:9f:9c:84:42:7c:b6:87:5b:1c:82:91:32:26:32:93:f3:
24:fc:f5:ec:36:07:39:44:40:21:61:e5:27:cb:73:53:3c:4d:
6d:5b:8c:20:49:7f:2d:65:a0:6f:44:d9:bf:41:b7:92:d6:d7:
1d:01:d7:b3:68:ac:71:f6:28:fa:f9:04:7b:61:02:9c:e6:9d:
5f:b0:35:0f:a7:a3:25:28:c0:df:a3:73:db:fb:51:68:52:4b:
d3:f9:0d:fb:c1:72:7c:84:ab:be:d8:96:91:74:4b:7f:7e:f7:
6f:4a:4f:79:b8:df:6a:3f:b2:f7:3b:bd:56:59:6b:c8:bc:a7:
2e:b1:0e:7f:1a:38:58:95:28:20:bf:31:44:10:ef:53:02:c3:
1f:14:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:15 2025 by rpki-client