Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: TdpKsxRtNA1U00qufCUiX1zxIUobvBeannp6+aV9KRg=
Subject key identifier: 58:F5:C2:8C:56:62:E5:40:18:A4:29:22:6E:1F:92:6B:99:15:D6:9F
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 01989412042ABE82FFB00AA489C5F9B9CEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 13:01:05 +0000
Manifest this update: Sun 10 Aug 2025 13:01:05 +0000
Manifest next update: Mon 11 Aug 2025 13:01:05 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: R9GRM+60zAKto0OQ5Jnl/VT+5cIgtWgxnZD1PECdKOU=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:04:2a:be:82:ff:b0:0a:a4:89:c5:f9:b9:ce:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Aug 10 13:01:05 2025 GMT
Not After : Aug 11 13:01:05 2025 GMT
Subject: CN=58f5c28c5662e54018a429226e1f926b9915d69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:fc:7f:d9:80:ca:6e:cf:63:fb:40:a1:b7:
ce:ee:1a:14:ac:6e:71:0e:e3:8d:e6:f4:94:a2:00:
00:8f:f5:fc:3c:16:e5:4b:a2:67:cf:32:0b:66:84:
b3:51:8b:9f:f0:5c:35:6d:7a:b8:07:97:66:d9:46:
55:07:c2:8b:6b:8e:3a:a9:f2:0d:be:52:f2:06:84:
53:aa:15:f5:9f:73:e4:a8:da:34:32:11:9b:89:fe:
ad:12:87:d6:cc:6d:a2:ea:80:a6:cb:10:17:1b:da:
46:db:fb:6e:40:ae:34:1c:84:6c:df:e5:ce:6f:4a:
97:75:2f:fb:59:f6:cd:b9:39:a2:16:6d:de:64:ac:
87:6a:04:ae:79:ea:0e:7f:92:68:01:1b:ce:5a:ae:
0f:30:5a:b9:09:a3:d6:7a:a3:01:58:a3:b8:fa:60:
3c:8e:01:1e:26:fc:f6:ec:72:42:20:0e:c7:41:ff:
63:cf:2c:5c:ad:91:52:5b:4a:bc:cb:cf:ec:c6:c0:
58:ba:62:a8:9b:b0:2f:59:90:da:cf:89:4e:85:88:
7d:f0:88:04:a1:db:e7:7f:d1:c4:6a:15:e0:ad:11:
b1:d2:38:e1:54:b2:47:df:05:b7:6d:a7:bd:e8:11:
26:a7:e9:8b:bd:79:f4:44:a7:66:d8:bb:99:32:2d:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:C2:8C:56:62:E5:40:18:A4:29:22:6E:1F:92:6B:99:15:D6:9F
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:1b:42:d6:78:68:76:67:90:88:c2:4e:a9:27:20:a0:92:
11:cd:d2:af:8b:00:bc:ca:67:73:1f:d9:8f:87:bb:0c:8c:68:
64:c3:99:dd:16:be:60:46:50:56:aa:77:6e:1f:12:de:e9:98:
fa:28:a4:47:ca:76:a1:74:7c:73:7f:aa:9b:b2:b7:0e:38:5b:
99:fd:18:bc:b5:03:58:c0:d7:62:b0:e0:8d:63:88:df:1c:d2:
1e:71:6e:cc:88:28:5d:7a:62:28:e7:fc:2b:86:a5:4a:35:35:
62:02:88:47:77:e3:22:0f:ae:98:c6:25:10:1d:5c:2b:48:5d:
df:db:53:4a:3d:4d:f0:ef:8f:10:5c:f4:d8:43:81:4f:46:28:
91:3e:d2:fa:93:1f:7f:3e:d5:8f:05:a5:6b:f6:f2:cf:c4:52:
0a:df:ee:aa:c5:d4:56:ed:c5:d6:b8:b6:e8:f9:83:b4:1a:d1:
4f:d8:d0:95:b5:1e:8c:59:f4:3f:1e:24:a1:3f:1a:bc:c5:14:
86:b6:26:63:96:e8:3e:5c:ac:fb:1b:49:fe:68:ea:c2:c1:6f:
7b:d8:d2:c9:5c:3c:28:98:ba:f0:ec:48:74:30:12:87:ac:9f:
cf:e1:32:e9:6e:27:5d:2f:a2:a2:d2:58:6d:f3:36:5c:91:17:
50:92:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:25 2025 by rpki-client