Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: X9j1itrNdqbLd3AbD5r3kLzX/8qZNCEdWdSAuK/Viyk=
Subject key identifier: 73:5F:0A:18:F3:C3:64:0D:C1:15:0C:E6:15:D8:F4:92:6A:9D:F5:D6
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 019875626D3FFA1B3BEFA4AEEFEE76AFEC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 14:00:41 +0000
Manifest this update: Mon 04 Aug 2025 14:00:41 +0000
Manifest next update: Tue 05 Aug 2025 14:00:41 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: klK01UDA/6OYSGB8iVDxnb7R2K3UCOO9tPNYBQr5+eA=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:6d:3f:fa:1b:3b:ef:a4:ae:ef:ee:76:af:ec:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Aug 4 14:00:41 2025 GMT
Not After : Aug 5 14:00:41 2025 GMT
Subject: CN=735f0a18f3c3640dc1150ce615d8f4926a9df5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:9d:f1:bc:28:81:13:e8:40:e9:23:b9:bf:
0a:2c:15:19:08:1b:4e:df:54:ec:fc:8a:4d:a1:31:
aa:ea:93:e3:84:30:94:72:87:aa:1a:13:69:30:da:
77:87:65:b4:26:2c:c2:1d:02:64:33:4b:7d:0a:ab:
4d:76:ec:cc:ba:4e:cf:df:57:37:a8:7d:d7:47:1c:
37:7f:bf:72:0f:ca:2e:d8:33:71:f1:78:a7:50:10:
35:ae:00:e9:45:2d:bb:d3:70:cb:6a:ae:7c:bd:8c:
01:57:b3:91:c7:4b:3d:c2:94:e4:0b:2d:f2:c5:ce:
04:45:cc:ad:ce:e1:f1:c5:98:2f:14:19:40:90:32:
2f:e7:fe:2d:06:56:8e:03:40:6a:b6:c5:76:fc:33:
5c:53:8a:28:b9:b8:fc:b2:2c:f6:bf:d8:80:e6:1d:
48:82:28:da:07:b0:f6:8c:f8:de:cd:43:c0:35:ac:
e2:9c:2e:03:40:e9:e6:ce:ea:b0:b4:37:26:24:33:
0f:5f:43:95:2e:d5:53:5e:b0:7a:34:d4:33:d5:24:
bc:04:1c:4d:58:f9:3c:66:2a:0c:4f:1e:b6:5a:84:
31:74:8e:60:00:ff:18:20:7c:e6:ef:0e:55:9b:fe:
73:2a:78:dd:09:39:24:0f:74:83:cb:ae:fe:35:37:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:0A:18:F3:C3:64:0D:C1:15:0C:E6:15:D8:F4:92:6A:9D:F5:D6
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:5d:30:93:b5:03:74:d8:d7:f4:53:9c:75:9b:bd:b3:b2:92:
19:13:3f:00:d3:61:2a:81:ec:88:74:5f:80:49:5f:d5:cd:30:
ab:81:91:97:c5:df:0e:a5:51:3e:05:f5:30:c5:eb:02:91:e6:
84:f6:e1:c8:af:e7:fa:4f:7a:50:ec:a6:15:a6:0a:fe:9a:db:
db:e2:08:c0:25:50:7b:fb:17:89:a9:36:5a:66:08:69:d5:33:
c6:20:2a:f9:67:c6:62:dd:15:84:a4:c6:43:31:01:ba:79:24:
14:f9:24:22:fa:9b:ac:94:7f:e2:10:40:ec:65:4a:d3:fc:80:
54:29:79:6c:f7:35:d2:a3:71:b0:df:78:10:9f:64:f6:a0:03:
92:dc:a8:77:5a:a3:f4:57:3c:4f:66:96:fe:e3:54:79:76:06:
cc:65:cd:2b:55:14:bb:8e:d7:c9:58:5c:3a:49:5b:cd:db:bf:
6c:d8:46:f7:3f:20:21:bd:b6:c5:79:1c:0d:97:bf:9e:58:8c:
63:87:29:10:9f:76:3f:7e:ae:05:bb:6b:af:b8:e7:20:9f:f8:
58:8d:e1:a0:55:1c:81:0b:7b:55:82:e1:b4:17:ea:ff:c1:ae:
64:95:6c:df:9c:11:bd:19:7f:9b:5e:c1:96:f6:0f:37:34:dc:
8f:b7:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:23 2025 by rpki-client