Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: mHjNPt2pZhFEHG6kpZ3YCIb1AM/YGNRaClkHPDLCTP4=
Subject key identifier: 67:DD:89:24:42:AB:40:BE:84:38:54:88:94:F9:1B:B7:7F:83:48:A9
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01988544CAF26F1111318EA8D92A9EC2B33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0C53
Signing time: Thu 07 Aug 2025 16:02:14 +0000
Manifest this update: Thu 07 Aug 2025 16:02:14 +0000
Manifest next update: Fri 08 Aug 2025 16:02:14 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: prJbMTgYktOJJlVhHuqBa1IA2yT6MN1DTdEaIAj0/Rs=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:ca:f2:6f:11:11:31:8e:a8:d9:2a:9e:c2:b3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Aug 7 16:02:14 2025 GMT
Not After : Aug 8 16:02:14 2025 GMT
Subject: CN=67dd892442ab40be8438548894f91bb77f8348a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:82:b6:38:26:4d:10:13:85:a2:2a:12:8f:
2d:df:84:b4:09:b6:5b:72:f4:b4:37:e3:6e:60:9b:
a3:3b:1c:f6:e2:fd:69:88:d7:fc:15:ff:f6:32:94:
8a:2d:5a:84:58:73:ed:dd:be:29:7f:05:c6:05:df:
af:60:82:be:28:ac:7f:9f:0c:4f:ad:ff:b6:13:86:
49:6e:63:66:78:32:d1:7a:94:a5:2c:ed:4f:26:99:
bc:e2:9f:72:4c:60:63:53:85:5b:d8:ea:c5:5e:b8:
d3:d7:79:c0:a2:33:fd:a3:dd:66:49:b8:94:7c:2d:
60:a2:c2:bd:a7:3f:4e:72:85:10:e7:1d:b6:e4:6e:
f1:95:37:69:b7:37:e0:2c:a9:b4:7a:15:17:e0:a4:
03:2d:10:fd:b2:55:90:14:d8:d6:d6:f7:28:31:36:
25:69:cd:11:53:85:5a:c5:f2:f3:99:3a:ea:91:fa:
7e:7b:b3:e2:b3:a0:fe:a8:e4:d1:1b:64:d5:a3:57:
bb:a8:9f:2e:a0:0f:cf:6e:6b:37:40:5a:c9:19:24:
d8:8d:c0:98:78:cd:9b:cb:ee:6d:bb:26:13:49:0d:
60:e8:53:40:86:cd:1a:54:63:9f:24:53:7b:3b:c2:
2b:04:33:78:ba:fe:20:30:d9:08:ff:78:7c:ed:6d:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DD:89:24:42:AB:40:BE:84:38:54:88:94:F9:1B:B7:7F:83:48:A9
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e4:03:e6:a9:6a:4f:7a:c1:02:fc:c7:cb:4f:59:c5:bc:cd:
3a:bf:b1:56:fc:c0:9a:18:ad:0f:96:6a:41:fa:78:0b:93:e1:
8a:7d:8a:06:cb:72:82:b0:b1:9c:34:e7:c7:1d:02:a5:91:f2:
42:a5:8a:30:e3:f7:88:90:a6:0b:15:55:58:b3:09:91:60:9a:
1f:8a:55:56:e3:9d:e6:c8:41:34:02:87:33:82:a0:82:d7:38:
cb:fb:d5:a9:3c:27:0b:36:41:24:50:1e:30:54:fc:d1:22:5a:
cb:7b:c2:ed:8c:d6:a0:26:23:79:9e:b1:69:6c:d5:af:29:35:
eb:33:0e:c7:ff:be:d7:6b:7e:bb:36:1f:2b:c4:1d:b2:5b:d2:
bc:6e:b7:66:96:d9:28:cd:d4:20:54:86:aa:c7:60:05:96:0a:
b8:87:98:69:4d:ca:49:41:91:14:7d:21:a8:95:0d:a2:c5:d5:
a0:c7:d0:d2:96:80:da:8f:9d:1a:b3:eb:92:f6:9b:8b:2b:63:
c5:29:58:14:2c:22:11:d8:52:7a:fd:47:ac:86:49:87:99:52:
d4:1d:31:23:42:2d:89:1f:c8:7e:70:9d:42:cf:8d:dd:c9:d1:
a2:f9:4f:d4:0e:ff:b6:80:14:cb:f7:fe:03:bb:0f:d7:4a:68:
25:6a:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:07 2025 by rpki-client