Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: mTaHImJa+qmHkckAvo5QoS/ZIimwRc7o2o+DKhKPw4I=
Subject key identifier: 24:4B:7D:A4:BB:9D:8F:56:64:B3:61:9C:81:FB:D9:D3:C6:5A:F1:72
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 01988166998633FB7B5BE351221FF53D6F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 0C03
Signing time: Wed 06 Aug 2025 22:00:41 +0000
Manifest this update: Wed 06 Aug 2025 22:00:41 +0000
Manifest next update: Thu 07 Aug 2025 22:00:41 +0000
Files and hashes: 1: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: 4GkAjZW+X7jFVKhgOf+9O0StP+oOtRTJ3Sdv76UEhJ0=)
2: ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa (hash: BaCHQlpNW/709AUvEnmAV++DQu/RFZCpGAAySqc5kGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:99:86:33:fb:7b:5b:e3:51:22:1f:f5:3d:6f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Aug 6 22:00:41 2025 GMT
Not After : Aug 7 22:00:41 2025 GMT
Subject: CN=244b7da4bb9d8f5664b3619c81fbd9d3c65af172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:b7:20:1f:fe:ed:a2:02:6e:b1:3d:64:11:
6e:61:94:89:c7:0c:5b:73:b9:eb:b4:6b:ee:62:99:
64:4f:f5:7b:b3:68:f6:0f:f4:e7:38:1a:66:58:ff:
68:b3:e5:87:da:53:6c:a4:42:d3:f2:b6:71:a6:2c:
13:c5:de:71:f6:ae:ff:68:0e:da:36:c2:8b:69:d3:
57:aa:14:2a:85:08:f7:bc:67:70:18:ae:6b:aa:51:
5f:17:52:70:d2:d5:05:2d:f3:bb:5b:95:b7:4a:e9:
9c:97:e5:1a:fd:d6:fa:69:09:94:f4:bb:26:7f:80:
bb:58:20:65:b7:6c:16:d7:48:54:87:f2:f8:c5:40:
3c:8f:d9:ca:df:5d:18:dc:9b:9e:4c:b4:5e:77:14:
91:2d:df:cb:5d:a7:3d:44:04:8a:a4:0b:ab:ee:f2:
d6:46:5b:eb:41:61:c6:27:3f:a2:a5:6d:88:9f:34:
83:fc:4d:0f:4d:31:f0:80:1f:e4:f0:40:3b:d3:3e:
7b:7e:24:77:06:b9:20:1a:97:4b:a7:17:4a:f6:72:
d2:f5:63:47:4f:b3:d1:d0:fa:2a:f5:d6:03:1c:d1:
4e:f8:e0:a7:d8:69:be:1f:08:eb:bb:bf:53:91:57:
5c:d1:17:25:69:23:a4:2b:c8:d7:ae:93:0d:4b:96:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:7D:A4:BB:9D:8F:56:64:B3:61:9C:81:FB:D9:D3:C6:5A:F1:72
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:08:42:3f:2b:c7:fa:68:06:68:f2:73:f6:e5:39:c0:2d:9b:
ba:91:f4:4b:b3:93:3e:45:58:9b:ff:c4:62:e7:72:40:bd:42:
b5:c5:bf:3a:07:16:b3:16:4f:73:fc:1e:f0:d0:53:6f:60:35:
e7:6f:68:ce:91:40:d9:c6:ea:73:8b:87:dd:5a:41:00:98:21:
96:04:2b:20:32:89:fe:6b:66:4b:06:bb:6b:ce:5f:ca:23:19:
79:ac:56:c5:9a:b0:6e:97:4a:3a:9e:70:ad:48:87:0f:2f:8b:
96:a2:cb:d0:c6:f3:a1:fb:cb:0f:82:0d:01:17:a8:11:90:25:
9b:4c:6a:82:0b:b5:2f:25:8c:0e:5b:66:a9:51:7e:7f:e3:51:
e7:fb:5d:7e:e1:f9:ee:d2:f9:e7:ea:d0:10:a3:1e:b1:d3:42:
2a:99:d1:b9:96:31:7d:ab:cf:e1:f6:01:bc:5f:64:cd:75:25:
75:d7:b9:93:ac:07:e5:9c:56:11:df:de:47:c6:81:dc:11:2e:
d6:99:be:ed:ca:0a:65:94:37:08:e6:41:d3:c5:36:19:35:ae:
20:60:2f:55:ef:a2:df:22:25:83:35:ac:e6:ce:05:3d:8e:11:
70:89:5c:81:ec:a5:3d:05:68:05:61:de:3b:c6:f8:1d:7c:30:
f2:c1:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:40:16 2025 by rpki-client