Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: ldbUav8VYbqnAFn6MybYtBK95sKANYUmYA3ulEPo8Yk=
Subject key identifier: 52:8C:26:1D:A8:B0:2F:9A:C4:52:5A:83:5A:5F:83:9B:4C:E8:86:B7
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 0198898E235B87A9A38A9C51834A6D676BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 12:00:50 +0000
Manifest this update: Fri 08 Aug 2025 12:00:50 +0000
Manifest next update: Sat 09 Aug 2025 12:00:50 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: aPNgOe0+HUdGVhhuI/fJt8XfH8gikyRWSNc9I2fKtPU=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:23:5b:87:a9:a3:8a:9c:51:83:4a:6d:67:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Aug 8 12:00:50 2025 GMT
Not After : Aug 9 12:00:50 2025 GMT
Subject: CN=528c261da8b02f9ac4525a835a5f839b4ce886b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:86:82:a4:be:a0:c9:31:13:3d:f6:8f:ec:
85:47:2d:31:d6:00:89:0a:6c:c5:12:5d:6e:bf:44:
16:db:7f:27:3e:1e:89:70:c9:3c:5a:3d:5e:d8:66:
70:d4:64:36:a7:76:11:7d:ca:23:09:5f:79:87:4d:
d7:c7:9c:26:2c:d8:2e:db:04:d4:d4:f5:e9:4d:39:
e4:8a:99:2e:77:18:58:ff:d3:46:25:06:ed:5a:7c:
19:86:cd:c7:42:26:1e:00:5e:26:ca:a3:08:1a:d1:
17:77:43:3d:84:ef:8a:0b:c3:df:e9:21:9a:1c:b4:
b7:8f:90:0a:d8:d9:4d:b4:8d:70:b1:35:64:d7:e2:
24:39:38:54:8f:6f:28:77:53:88:94:3a:bb:b1:63:
3b:7f:e8:86:90:9f:79:bc:6b:a0:32:6c:1f:33:30:
92:8b:7d:b3:66:b0:87:58:59:ad:82:31:dc:0b:20:
91:de:f6:8f:ee:f6:c3:fa:cf:e2:43:bf:2c:6a:20:
64:ed:d2:e5:a7:35:af:69:b6:63:56:6d:4f:a6:03:
cf:d5:e7:c1:0e:1c:3d:4f:48:f6:0e:e4:e8:48:33:
f1:bc:94:fc:53:6f:59:b4:61:cb:a4:3d:27:15:95:
44:92:e3:71:9a:97:17:4c:b0:c1:b2:a6:0a:ac:60:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8C:26:1D:A8:B0:2F:9A:C4:52:5A:83:5A:5F:83:9B:4C:E8:86:B7
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:42:4d:6a:57:c8:17:3b:5f:e9:5a:cc:9d:73:5a:c0:3a:25:
3c:87:e1:6e:58:b0:9c:0e:4c:85:0b:5e:48:fd:53:8e:41:88:
5c:5f:ba:f8:34:29:17:50:0e:ef:90:8d:d9:bb:a1:4c:d2:ef:
f1:35:fc:06:a1:43:dd:d1:64:56:34:4a:be:e6:64:78:09:2c:
25:e8:0d:65:26:eb:7e:f5:68:6a:9f:f3:cf:4f:89:1c:df:03:
a1:58:0a:8e:4d:df:09:59:cc:dc:7c:d4:05:b8:cf:a3:ea:25:
7b:d2:22:d5:0a:ef:3e:71:4b:23:99:90:4e:c2:69:c7:ad:94:
bd:a7:37:b0:7d:a9:41:ca:a5:74:7c:65:0c:7c:ee:07:32:8e:
23:85:a4:49:68:f7:27:d9:26:f2:4c:e2:9f:dd:55:37:7e:c2:
50:3b:86:33:04:e7:d7:dc:7e:9c:14:c1:01:53:83:37:f6:aa:
7e:c8:45:34:4b:71:58:06:62:ad:62:b2:c4:6a:b1:57:63:a3:
f4:9e:d0:b6:94:b5:02:5a:e3:0d:ea:bd:a7:63:b6:bc:00:14:
d9:ae:36:0f:c5:4e:90:77:b1:f1:65:e8:0e:2b:40:d8:a7:b3:
07:fa:72:2f:2c:a0:ee:c2:75:b9:26:91:c2:5f:f3:f5:0c:bf:
03:b1:45:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:14 2025 by rpki-client