Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json)
Hash identifier: 2vAC2x/YHvOfbYddwNPyu194v57B82rGq4WiC0iHSWw=
Subject key identifier: 24:3C:DC:9C:57:87:69:9C:8F:3D:7A:AD:D8:72:F0:FB:4D:F4:70:A4
Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Certificate serial: 01988B7C7964F98ECDEAA7F7A3D5B057EE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
Manifest number: 01D0
Signing time: Fri 08 Aug 2025 21:00:47 +0000
Manifest this update: Fri 08 Aug 2025 21:00:47 +0000
Manifest next update: Sat 09 Aug 2025 21:00:47 +0000
Files and hashes: 1: AfyofESsKziO9R3ILuO1YYWUdu8.roa (hash: nUxsrIBKiuHD8xm10VmDY98apv5y2MdixCNIXLJz49Q=)
2: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: zhN8+xKbz7hWTTE1bblzTv6lSm0JNtBrF+wKQYYOLQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:79:64:f9:8e:cd:ea:a7:f7:a3:d5:b0:57:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Validity
Not Before: Aug 8 21:00:47 2025 GMT
Not After : Aug 9 21:00:47 2025 GMT
Subject: CN=243cdc9c5787699c8f3d7aadd872f0fb4df470a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:fe:67:06:ef:19:f0:d2:92:93:db:e4:4f:
d4:e5:84:af:0c:73:cf:96:5a:80:93:35:ac:f7:86:
0c:72:2c:91:13:cb:c8:91:1c:24:e0:d9:3b:5f:1c:
be:9e:00:e4:98:0e:c5:e3:89:c8:d3:88:52:4d:e6:
e0:f1:f7:87:d0:9d:4e:be:b8:40:e6:f8:9a:79:db:
7c:2f:22:1e:1e:fa:6b:f5:16:bb:f2:42:57:00:ad:
9b:0c:0b:96:f0:c6:27:cb:45:56:14:5e:7f:b3:a8:
49:67:0a:0d:dc:33:76:13:99:6b:c8:f9:02:12:fd:
52:28:f7:fd:95:c0:09:7b:b8:6e:58:4d:00:11:a0:
5c:72:9b:02:fa:95:d6:4c:7a:08:04:89:62:cb:bd:
8e:54:d3:cb:e7:e3:ce:fb:04:87:14:4c:a7:6f:92:
65:ac:17:d7:c3:28:fd:e1:3b:a0:d5:ac:3a:c1:06:
db:7e:d1:1b:23:e9:e7:d4:50:27:9d:c1:e4:05:6d:
db:8d:cf:9d:d6:fa:1e:ec:c7:a7:47:da:42:de:8f:
a6:5e:8f:50:53:b7:f9:15:52:66:17:86:41:79:3b:
55:22:7c:77:39:ed:fd:57:78:6a:37:36:19:18:f4:
d8:d1:23:dd:0b:1a:63:05:5e:95:11:cb:a9:36:d3:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3C:DC:9C:57:87:69:9C:8F:3D:7A:AD:D8:72:F0:FB:4D:F4:70:A4
X509v3 Authority Key Identifier:
keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3f:88:5e:75:81:27:1b:82:69:2f:41:1c:6d:da:42:3f:6d:
8f:14:d3:0b:05:be:df:2e:63:78:5c:f9:13:3a:64:7d:c6:dc:
f5:84:e1:c3:fb:4c:91:3e:30:62:fe:ea:10:e6:cc:32:28:60:
25:79:2c:3c:a3:08:d2:45:14:5b:05:7a:af:a7:a1:ff:cb:56:
30:46:87:b3:a0:91:4b:48:16:76:47:23:7e:1c:cd:d7:ee:8e:
bb:08:62:b3:ae:16:14:f7:40:9c:bc:26:0d:4d:71:02:93:d1:
3d:11:1d:38:7a:c2:c3:9e:bd:77:01:7c:d5:64:eb:46:86:14:
bf:c5:11:61:bd:a5:bc:6f:3e:b2:28:92:c2:db:84:da:ba:fe:
d7:80:fb:33:51:be:66:56:33:00:7a:a1:6d:87:a3:10:b0:fb:
c8:3b:15:01:a1:d5:81:31:67:ef:7f:ea:bd:ea:82:48:47:4a:
bb:61:2a:de:c3:2e:7e:75:75:17:28:03:43:18:77:52:ba:fb:
d6:36:99:2e:c4:07:7a:61:07:42:32:1d:34:cb:04:5d:50:4a:
48:20:b3:57:f4:e4:eb:dd:76:ae:8e:26:1e:a0:c1:15:02:1e:
0c:a6:ae:8b:d9:cd:71:60:e2:04:be:ae:3d:1d:9d:e5:df:48:
19:2b:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:11 2025 by rpki-client