Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: ZugfYDMg+TBRSKw1K5+LCDZNYgwbMISU+KRB/kMccDQ=
Subject key identifier: A8:E3:A9:50:AD:2F:3D:08:F6:D6:2E:08:27:80:D2:77:D4:25:26:FB
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 0198A0BADF30AFF8B91B822DE0B1FB23F018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 0D5A
Signing time: Wed 13 Aug 2025 00:00:58 +0000
Manifest this update: Wed 13 Aug 2025 00:00:58 +0000
Manifest next update: Thu 14 Aug 2025 00:00:58 +0000
Files and hashes: 1: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: TmgoUsVUBupXu96C+zjQwI0nvNZLnqatwi+ZAfMvXfU=)
2: WQDK9xlCqpMVg3-ZBWFZfqNRgDU.roa (hash: 5EEZG5yrAU7W8n0dqk+GpepBnaLmDeUxI+tSTrknSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:df:30:af:f8:b9:1b:82:2d:e0:b1:fb:23:f0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Aug 13 00:00:58 2025 GMT
Not After : Aug 14 00:00:58 2025 GMT
Subject: CN=a8e3a950ad2f3d08f6d62e082780d277d42526fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:c7:ca:37:0e:ed:6e:7c:9c:50:97:94:b7:
38:a2:bd:2c:b2:44:c5:aa:18:8d:91:a3:7e:4e:d6:
70:17:ce:b8:04:10:f3:fd:b1:5c:3b:e7:5c:90:ca:
f1:09:e3:fe:1a:48:ca:ab:22:3f:13:84:8f:1d:4c:
12:86:e0:3d:8b:ee:45:a8:53:f8:fd:81:59:6d:0d:
44:54:fb:22:97:42:92:2c:18:f6:2b:f1:ce:05:42:
77:a1:b7:dc:da:25:60:1f:ef:3e:76:de:b1:58:29:
f4:b5:07:0b:50:ce:af:ea:a0:7a:f9:64:40:7f:c9:
bc:d3:7f:51:46:2b:72:04:63:d3:97:0d:44:0c:f3:
c2:61:8e:2f:df:92:20:47:27:a6:95:db:1b:57:d4:
03:7b:a3:52:ee:db:84:c1:b2:c8:4a:a7:75:79:05:
0e:e9:21:29:0d:29:18:d0:f4:ad:0e:58:13:77:88:
19:d5:d0:29:1d:f6:1c:08:09:35:26:38:5d:6a:a0:
87:c7:16:37:76:40:9d:fd:38:c7:54:86:8d:b4:f0:
e8:b8:9d:d7:5a:0e:46:85:39:78:32:e1:c2:b1:7c:
8a:32:24:8d:c3:66:f2:8d:e7:2c:65:19:2d:ad:c7:
69:bc:30:2e:d4:fc:5d:82:8c:1b:a1:30:a6:61:b8:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E3:A9:50:AD:2F:3D:08:F6:D6:2E:08:27:80:D2:77:D4:25:26:FB
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7b:3d:b4:bd:07:54:c0:ab:f2:8d:a2:f8:ef:c4:9f:1c:55:
46:a5:89:50:30:13:da:dd:b4:4c:77:f9:3b:1a:a7:e2:08:e6:
04:47:8e:67:e1:77:2f:c1:17:69:eb:ac:63:66:90:be:0c:96:
de:07:c2:59:98:35:74:00:21:c9:84:39:66:87:3b:04:92:4a:
d1:e1:a2:2b:9b:0e:11:85:af:31:7c:0a:66:6f:29:aa:4c:52:
e1:5e:e0:45:6c:06:32:f0:be:28:86:79:0f:61:bc:3c:5e:1c:
3e:14:cf:1d:ef:76:f2:55:86:12:7c:7c:38:ab:f2:50:17:3d:
6f:03:7b:ef:2a:82:19:29:92:89:87:fb:d7:35:c5:c3:1f:ce:
45:91:8f:28:39:93:e2:e2:f6:c4:44:98:ce:a6:36:70:fb:84:
38:b2:bb:7e:91:1a:83:cd:6d:28:e7:1a:de:8e:5f:26:66:57:
43:7e:76:24:63:36:30:6f:8f:8b:a9:74:a5:f6:62:6e:b5:42:
ba:6b:34:af:71:3e:07:17:2a:35:bf:08:6f:08:2c:10:f0:f0:
ab:78:81:fa:f8:b4:44:e2:03:b3:d5:5e:57:c2:11:62:71:53:
14:8f:2c:6e:36:23:b7:1d:fd:60:63:41:5c:ac:c5:45:a4:6a:
79:34:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:33 2025 by rpki-client