Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: GEuQ5OfhmKhvcfjUBrSkQmDYGAJ2U0nNdMVRTar3hLc=
Subject key identifier: 4C:DE:7D:0E:5F:06:D7:D6:19:50:AF:B2:0D:EF:4E:52:23:48:D4:94
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 0198906BD51E9F437DF77BE17AFF943439E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 20:00:42 +0000
Manifest this update: Sat 09 Aug 2025 20:00:42 +0000
Manifest next update: Sun 10 Aug 2025 20:00:42 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=)
3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: y5/W0BgeF+PZW9J3hMe91kyKApydEonXBtb4CvR80CI=)
6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:d5:1e:9f:43:7d:f7:7b:e1:7a:ff:94:34:39:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Aug 9 20:00:42 2025 GMT
Not After : Aug 10 20:00:42 2025 GMT
Subject: CN=4cde7d0e5f06d7d61950afb20def4e522348d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:05:fc:78:fd:32:12:78:45:5c:e9:c3:47:
42:6e:49:ff:a2:a4:c8:aa:b0:56:1a:82:ec:45:d2:
52:5d:35:10:e5:16:51:d7:48:c1:ef:29:4f:a1:b4:
8f:da:66:67:19:09:b3:c7:65:1b:fc:76:ee:68:c5:
6d:3e:0a:3c:d9:93:ba:47:5d:f3:c1:51:af:32:47:
63:9f:98:b2:98:0b:3b:2c:fa:42:90:e3:00:f0:3e:
3f:b7:31:ae:ee:5f:27:fd:dc:e4:d0:44:0d:38:03:
63:65:f7:68:41:be:ab:7e:6b:9f:c5:56:c4:bd:66:
80:99:15:ea:8b:c7:30:62:e5:7f:5f:b2:1e:78:52:
9c:85:bc:4b:7d:48:a6:a4:84:2d:4c:3a:9b:07:f3:
47:79:8a:48:b3:33:d2:34:6a:b2:11:8f:92:f0:c6:
9c:00:67:48:a1:c8:8c:e1:3c:be:d2:f9:39:26:1f:
4e:e5:6c:5e:80:0f:96:0a:54:56:53:46:bd:ba:73:
12:82:6b:95:bc:61:b7:f8:80:a4:d9:c4:e8:31:f3:
8b:74:13:d8:0f:c7:a0:b0:ef:86:05:a5:7a:fc:60:
14:b4:06:21:8a:39:41:a9:bb:e2:3b:ef:8a:d5:fd:
94:56:f2:e3:03:95:e3:78:5d:f2:f6:e6:0e:cc:fe:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:7D:0E:5F:06:D7:D6:19:50:AF:B2:0D:EF:4E:52:23:48:D4:94
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8a:4e:09:62:ab:da:d7:18:11:8a:21:cb:7d:3d:80:99:f5:
01:54:f1:9d:e6:2f:b8:a1:56:1e:73:29:ae:76:b7:c5:03:48:
ee:37:54:0f:63:5e:90:62:a9:5d:43:e7:76:23:7d:7c:86:6b:
ea:fc:d9:9b:a5:9e:75:67:c4:5e:2d:4d:2c:97:93:7c:d1:3f:
6f:21:0c:a1:0d:e8:47:10:0e:b5:3d:b3:17:db:f0:f3:42:f4:
e3:9e:91:e6:f4:9b:d0:83:0f:fd:ba:29:9d:9a:8f:93:2a:8e:
00:2f:7a:81:db:88:42:67:9a:8a:7e:eb:22:b9:e4:ac:df:af:
fc:ec:a0:7a:e9:04:0b:99:b0:48:1d:dd:76:0f:17:da:eb:2a:
dd:10:8e:9d:6e:03:a4:70:63:5e:87:6f:82:8e:56:11:d6:f6:
24:8f:90:97:37:70:39:00:c5:f3:38:83:e9:02:79:c3:9d:16:
48:a2:f8:09:86:f6:e3:63:81:7d:48:d4:36:5e:1b:b2:de:57:
ec:e9:55:57:c2:8a:60:e1:63:cd:9f:74:75:37:53:5e:98:d5:
03:79:fa:69:47:47:21:c3:56:50:a6:b0:8a:04:2a:19:2e:d0:
e7:29:cb:3e:0c:47:d9:e6:93:40:a4:d4:d1:ba:60:03:a7:6f:
1e:51:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:00 2025 by rpki-client