Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: r90JVO1wrVqLvPJdjp9fU8UNQyKJ8hdQgHpdr8h70g8=
Subject key identifier: 5B:90:D5:0D:39:EA:BD:F6:B9:F0:C7:87:1C:23:1C:9C:25:5D:F2:A4
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 01989CA6FA70FE28D04C2C9AE531F827B6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 05:00:45 +0000
Manifest this update: Tue 12 Aug 2025 05:00:45 +0000
Manifest next update: Wed 13 Aug 2025 05:00:45 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: MRnDHQ/wyNNaUbaREWOjnzdmBMn0TAk0DEGSwh920dk=)
2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a6:fa:70:fe:28:d0:4c:2c:9a:e5:31:f8:27:b6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Aug 12 05:00:45 2025 GMT
Not After : Aug 13 05:00:45 2025 GMT
Subject: CN=5b90d50d39eabdf6b9f0c7871c231c9c255df2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:9d:6a:61:2c:5b:34:2e:21:53:9a:64:4c:
ce:7b:b7:0e:9a:78:18:3c:3c:4c:a8:d3:48:a6:c5:
8b:50:35:12:f1:aa:9c:52:15:1e:df:1a:b6:32:a3:
82:df:cd:9b:0c:a8:94:7d:49:b6:b4:c8:76:23:f9:
75:30:f1:74:c7:d9:d7:b3:bf:9b:07:bd:bf:6e:30:
51:3a:5c:8d:bf:20:c5:ae:3c:b6:40:02:81:0e:86:
ab:20:27:c8:f0:50:4a:95:48:ec:8e:ad:88:fd:a7:
62:88:d0:ed:fa:1d:c4:32:ef:40:92:b2:22:8d:3a:
e8:c0:91:46:61:13:cc:00:5b:23:59:ea:03:b3:20:
e7:a5:60:23:cd:da:92:20:49:ea:8a:82:a4:35:3a:
89:3a:41:19:71:b7:4e:59:26:7d:b5:a1:c9:d1:53:
e6:6e:ec:db:95:7a:83:8c:06:3e:76:2a:9d:df:e2:
5f:52:3c:6d:54:79:a3:cd:91:f4:cc:cb:0d:33:fd:
2e:49:c0:de:33:d7:42:3d:52:df:47:bd:42:eb:2d:
dd:cf:9f:0e:b4:81:03:1e:cc:b5:43:c2:78:8b:75:
73:ee:e2:b0:ca:6e:85:fc:6a:f0:50:b3:bf:5c:3c:
2f:85:14:90:e3:c9:cd:dc:ef:58:61:b3:e6:0a:76:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:90:D5:0D:39:EA:BD:F6:B9:F0:C7:87:1C:23:1C:9C:25:5D:F2:A4
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:a1:c1:16:68:c1:b0:84:61:43:1a:2c:2e:40:20:73:91:
0c:a7:b2:d0:5b:11:0b:0c:12:c3:ae:4e:22:2e:24:81:47:b3:
f1:d5:38:da:63:10:cf:57:11:f7:1b:ba:b9:d5:c8:aa:31:6e:
91:28:09:af:01:e2:75:c2:4c:ac:55:59:66:79:20:af:c1:a3:
5d:eb:44:a9:0a:cb:80:e4:74:41:dd:9d:60:6a:99:51:8f:a0:
78:62:e5:58:0f:fe:f0:3e:20:c1:52:39:83:10:e3:1e:10:b9:
1e:5b:61:56:f1:9d:64:88:a8:f7:ba:f6:b5:f9:54:9b:ba:a9:
73:10:0f:a0:1d:ee:68:62:4c:e7:d6:26:fb:fa:d6:7b:8b:92:
17:ad:c6:46:4c:1d:ca:4f:1a:4c:92:3d:d9:13:4a:e9:5b:6e:
62:0f:da:e9:dd:04:bf:8c:d1:9f:be:83:63:cb:aa:d5:80:30:
17:34:3c:b7:e3:2b:f3:f8:4d:16:a0:98:81:c1:06:78:13:49:
84:ce:a7:51:ef:d2:d6:f5:52:30:43:27:b8:ae:5b:a5:12:f3:
02:99:ba:31:02:a3:7e:e5:90:c5:94:2f:89:4a:b0:9a:c9:3a:
c7:92:92:15:cb:7a:16:6c:86:e4:ea:d9:36:dd:73:a8:df:80:
fb:c0:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:56 2025 by rpki-client