Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: cpWO0cgetF9mh0ZGqJMC0Nbm3cwOtu0ZjbGS7Gp2Xao=
Subject key identifier: A8:D2:31:7B:EB:1D:C5:DD:5E:4A:FF:0B:D2:67:E1:45:A9:49:16:88
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 01988243251527150CF47DF3915A0338AEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 0479
Signing time: Thu 07 Aug 2025 02:01:35 +0000
Manifest this update: Thu 07 Aug 2025 02:01:35 +0000
Manifest next update: Fri 08 Aug 2025 02:01:35 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: m0f/FbOAG0wlXS4+hg74AcTzVC/r2sXZ01624aWBXUw=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:25:15:27:15:0c:f4:7d:f3:91:5a:03:38:ae:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Aug 7 02:01:35 2025 GMT
Not After : Aug 8 02:01:35 2025 GMT
Subject: CN=a8d2317beb1dc5dd5e4aff0bd267e145a9491688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:5b:a7:e7:69:00:e4:e5:19:5c:0a:b2:54:
32:ba:13:56:dc:ce:fa:6f:a9:5d:e5:28:d2:b3:f6:
ef:4a:97:41:02:08:8e:cd:41:03:b7:6e:65:52:2c:
35:02:c5:16:79:33:d1:cc:55:ca:f4:d8:d5:13:90:
1a:47:da:3c:ad:8e:ac:28:c0:46:a7:af:1b:b8:a9:
2a:e7:b7:3f:d1:d2:0d:65:97:5b:4c:9d:55:b6:7d:
f2:5b:72:7e:ac:a9:87:f4:85:c5:a7:f2:60:73:bb:
47:ef:7d:45:7d:73:4c:67:af:98:9c:0e:dc:65:42:
01:78:a9:9e:b7:23:d7:2b:ef:f6:20:c5:95:dc:19:
cc:a3:44:3c:12:55:38:86:5e:56:15:e4:aa:87:8f:
71:3b:74:99:79:5b:98:c4:a3:c5:70:82:c5:01:4f:
d5:11:c7:c7:27:77:90:5f:d7:de:d5:7d:46:9c:76:
a8:df:f2:f1:45:45:0a:04:2d:3b:f3:37:69:1d:2b:
ff:e2:c7:48:cd:c7:37:aa:04:6f:15:fc:ff:40:8c:
b9:55:9b:ca:76:9a:e8:cd:b1:c7:11:13:62:97:6a:
f1:70:f1:6f:11:83:dc:7e:19:14:3a:45:ea:e7:2e:
24:15:ef:03:f8:4f:69:0b:f0:82:a7:0f:00:2d:12:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D2:31:7B:EB:1D:C5:DD:5E:4A:FF:0B:D2:67:E1:45:A9:49:16:88
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9a:b1:f7:1e:aa:c6:ef:b2:e1:21:99:bd:ec:42:bf:e8:ee:
71:84:86:c3:03:db:c8:38:67:6b:39:b2:b9:ed:92:e6:7a:82:
63:79:cb:57:aa:d4:13:de:24:cd:9d:24:83:e6:5b:99:e1:cd:
d4:7e:71:0e:d8:65:0e:59:67:69:7f:28:0c:88:ca:ac:03:3d:
d7:8b:d8:7a:ab:a3:6e:3a:08:e7:a5:0c:65:64:b3:05:62:08:
33:85:98:a3:fc:64:5f:52:62:1e:27:9e:da:97:c8:59:0f:b3:
db:d9:a4:d8:ee:b3:45:8d:57:d8:06:cb:95:53:ff:8d:d0:d3:
ce:7d:96:b1:61:15:f7:bf:79:79:c6:c7:63:7f:6b:44:49:ee:
a9:9f:ca:fe:11:7d:55:a8:43:f5:16:8f:6a:c1:c4:a2:b5:86:
c6:88:70:f5:67:c1:7e:f9:78:8a:4f:d1:a2:c8:54:82:12:22:
9b:1f:03:06:3d:85:c0:50:10:1a:95:d4:31:56:fe:3d:36:2f:
c3:11:f8:75:94:d4:93:03:62:fd:c1:9c:40:2c:6e:bf:4e:89:
89:19:d0:42:82:41:4c:1d:fb:1d:61:47:08:da:28:db:93:10:
0f:5d:17:72:8c:be:a4:e5:b3:60:9d:b5:50:12:e6:7a:00:35:
2a:13:27:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:56 2025 by rpki-client