Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: 0nrMEqZFAWgfu0gpeSTRT7l00AlmXHl1HCjC+fft3Ig=
Subject key identifier: 78:01:D9:D8:C2:61:26:DC:81:35:B6:1E:56:86:77:23:FA:45:74:3A
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 01988B455DA2728BBB6D5DD73C32453B9257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 20:00:35 +0000
Manifest this update: Fri 08 Aug 2025 20:00:35 +0000
Manifest next update: Sat 09 Aug 2025 20:00:35 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: UrYaa7tr9F1rCybDcTEIDdwZ3pigx17zA3lRMsjCN+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:5d:a2:72:8b:bb:6d:5d:d7:3c:32:45:3b:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Aug 8 20:00:35 2025 GMT
Not After : Aug 9 20:00:35 2025 GMT
Subject: CN=7801d9d8c26126dc8135b61e56867723fa45743a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:5c:59:4e:e4:aa:aa:7e:1a:59:03:5f:5c:
f3:70:cf:04:af:31:43:d3:05:fc:97:a5:a3:0e:50:
6c:1c:b7:ec:04:dc:e5:1b:eb:d4:f0:ee:ca:a4:c1:
29:38:20:7c:6b:59:ac:96:1b:c4:0c:39:f9:6d:f8:
b7:1d:4b:31:6e:a0:29:9c:3d:8e:5c:4e:4f:b0:6d:
15:00:af:8b:ec:5f:cd:82:79:78:3b:eb:5b:d2:cc:
fb:de:66:c9:96:54:b9:54:8d:0e:75:75:9b:55:7a:
b4:04:a5:ee:e6:c6:0c:ac:3b:b9:a6:22:2b:d4:d5:
34:fd:b1:55:5d:3d:6c:52:0a:c7:95:6c:a7:1f:cb:
40:72:6f:43:d5:21:09:ca:b5:73:8b:b8:67:43:7f:
4a:1c:3f:3b:b7:4c:e9:94:6e:d2:c2:f5:e3:83:9a:
c4:4c:ef:d7:37:f7:15:be:33:53:6f:45:32:bf:e2:
0a:7e:cd:5f:67:7d:89:99:6b:a6:ad:40:f7:f2:e1:
1e:eb:de:6b:fe:38:fe:68:f2:2b:4f:bf:55:cf:33:
a3:c0:48:09:75:47:d6:fd:54:e4:b5:b1:09:ab:1d:
18:59:c1:5e:39:d8:45:b8:8c:90:76:14:bc:20:c1:
64:78:f2:bf:82:3b:4c:99:03:44:27:a9:58:a3:1a:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:D9:D8:C2:61:26:DC:81:35:B6:1E:56:86:77:23:FA:45:74:3A
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:04:fc:93:6c:cf:5e:9d:8b:64:23:6f:60:a8:c3:23:39:e8:
d3:95:56:d0:08:8f:85:b5:cc:b1:82:e9:25:58:30:bd:33:38:
94:bc:33:61:8c:6c:17:b4:ec:1e:bd:ed:05:35:d9:5c:80:36:
aa:31:f4:29:73:fd:79:38:74:50:b3:0b:89:a1:e0:c4:ac:e9:
eb:d9:6b:fc:53:82:57:4d:92:72:e0:75:b7:72:f4:de:54:20:
bb:14:7b:ac:a4:d5:7c:0d:9d:43:cc:da:1c:1f:cf:18:78:d2:
a2:aa:78:bc:f6:2f:ac:b6:53:ac:7f:21:4f:21:26:b1:fb:a8:
10:15:05:0b:41:3d:f5:0f:cf:2a:1c:34:0e:83:2a:ba:0a:bb:
42:09:ed:64:1b:34:0c:8a:3d:17:e4:dd:47:64:3a:73:64:dd:
99:65:ca:52:76:27:a7:7c:b4:f2:d0:fe:74:76:38:68:d2:f5:
08:13:81:b9:f3:c8:4c:89:9f:5f:4b:2e:2f:c6:f4:b6:71:78:
bf:24:da:0b:f2:a7:13:56:40:ca:4b:48:25:b3:50:0b:09:cd:
c7:7c:3b:7b:9c:2c:ad:d7:62:20:b7:32:49:45:31:a5:5c:e7:
3a:e0:93:73:93:6c:f1:b6:af:17:37:ad:03:cd:7a:3a:df:a7:
d1:bb:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:00 2025 by rpki-client