Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: J4EjNl5n1xu7f74SyPJWL6Gt4n8FSjt3JRZP6x8OmmQ=
Subject key identifier: 52:99:15:1B:07:C2:A7:CF:4F:E7:09:9E:B9:BD:6F:FD:05:60:22:B9
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 01988FFE223B9D0EF808AEFE6DAB414C9B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 1432
Signing time: Sat 09 Aug 2025 18:00:53 +0000
Manifest this update: Sat 09 Aug 2025 18:00:53 +0000
Manifest next update: Sun 10 Aug 2025 18:00:53 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: UhLE15BKi6IIlQwmIfpDk77bv5st06T0PH4oWj/Ws4g=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:22:3b:9d:0e:f8:08:ae:fe:6d:ab:41:4c:9b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Aug 9 18:00:53 2025 GMT
Not After : Aug 10 18:00:53 2025 GMT
Subject: CN=5299151b07c2a7cf4fe7099eb9bd6ffd056022b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:ef:5e:e4:a6:4e:1a:59:9a:69:15:45:7e:
34:01:ac:98:52:f9:d9:d4:3e:2e:4c:67:8d:77:a8:
ab:c7:38:c8:63:7c:a3:c8:95:58:ba:75:f2:cd:1a:
51:3a:34:73:84:21:6c:ef:d6:35:1b:b8:ae:26:7e:
7e:7d:af:d8:d6:26:f9:75:ac:78:5e:eb:67:c0:77:
3e:bc:eb:eb:cc:8d:ef:59:e9:bd:dd:4e:2d:11:96:
9c:f7:ba:6a:3d:69:58:33:1a:2a:15:b6:8b:5a:6a:
a3:26:ec:55:6f:67:c4:bf:54:5e:13:6b:1e:04:08:
c4:47:7a:63:49:2a:74:bd:dd:14:3c:e1:7e:08:a2:
e7:15:91:d3:d2:c6:55:0b:9d:97:07:5a:54:a3:b3:
07:df:d3:cf:46:e6:b7:6c:bd:e1:48:28:81:d1:8a:
d8:ab:ff:77:b2:08:22:3c:7b:65:13:ae:12:48:98:
48:37:0d:ab:98:60:cd:34:c2:24:8f:64:e8:0e:f1:
49:3f:b8:30:5f:01:9b:74:44:a0:9b:2d:c1:4b:d7:
15:ce:eb:03:a5:7f:bb:8c:78:8e:a0:8b:70:09:3c:
a9:21:77:8c:a9:fa:95:a7:86:ba:98:b0:9b:a4:41:
77:e9:b2:4f:e8:46:96:d7:06:9b:65:6e:b8:b1:c4:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:15:1B:07:C2:A7:CF:4F:E7:09:9E:B9:BD:6F:FD:05:60:22:B9
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:b5:6c:b5:9f:f7:7a:43:e6:82:06:aa:56:ab:e2:0e:b9:
b0:23:02:d6:69:98:5c:0b:d9:80:8d:f8:ef:37:c3:10:b8:e4:
f3:46:74:9b:14:ef:13:95:42:2a:64:db:6a:87:49:db:9a:db:
46:0e:63:55:68:f1:06:b7:eb:19:4b:d7:fb:50:7a:dd:dd:33:
d4:05:57:d4:a2:7d:40:7e:98:d8:32:0e:a6:44:f9:ec:d8:a5:
5d:e4:bc:a6:46:00:20:ab:14:69:19:aa:6e:cf:05:31:b7:3a:
f9:7a:bb:88:b5:39:ea:84:b1:74:60:59:b9:38:4d:39:ad:9f:
52:36:03:85:23:dd:e5:3b:90:cb:ed:34:11:e2:91:68:2e:be:
a8:b8:3f:be:5d:38:c9:45:9a:97:5a:30:e1:89:e0:75:48:e1:
c0:fc:ee:3a:65:24:f8:1b:42:12:35:38:c8:55:2f:e8:fa:0c:
d9:36:6a:ef:63:d7:99:9f:a6:93:4e:26:1a:a2:39:02:74:33:
f5:d7:8f:26:c1:63:d7:96:69:0f:70:41:e1:db:f3:e7:ce:52:
c6:6d:1c:50:a9:a4:be:5f:62:65:00:04:fe:a1:b9:91:7a:20:
c2:02:26:30:59:65:c2:63:55:6b:65:6a:eb:be:8a:16:38:f1:
9f:ac:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:35 2025 by rpki-client