Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: IHP53p1/Cyc7G19eti4DF/fgxZSo2mbVdmhk+/twYYw=
Subject key identifier: 3F:FA:D1:52:8F:71:91:31:F6:29:86:B4:50:5E:CC:7B:41:7F:FB:54
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 0198733D10ECE090A26991E05A216489DC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 1219
Signing time: Mon 04 Aug 2025 04:00:38 +0000
Manifest this update: Mon 04 Aug 2025 04:00:38 +0000
Manifest next update: Tue 05 Aug 2025 04:00:38 +0000
Files and hashes: 1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: H+gjx6heeQ9QYSN/1IrSO2KL+0CyPGRh8zN9QlxSPqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:10:ec:e0:90:a2:69:91:e0:5a:21:64:89:dc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Aug 4 04:00:38 2025 GMT
Not After : Aug 5 04:00:38 2025 GMT
Subject: CN=3ffad1528f719131f62986b4505ecc7b417ffb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:06:6f:6a:99:b4:54:73:59:c6:a5:4e:1a:
72:8c:e9:5b:3a:d1:c9:96:d5:c7:1d:25:55:05:f7:
7f:51:8f:cf:4e:fb:47:1a:a2:3f:a5:43:b8:ff:66:
8d:57:38:45:3a:5e:ff:e3:b4:a8:c4:3e:5f:06:ac:
21:c2:78:3a:2e:4c:b9:33:f8:b6:3d:62:6b:d5:c3:
aa:5a:f5:1b:54:0f:92:49:cd:0d:ea:5c:09:c7:34:
98:75:f2:1f:a7:eb:ce:af:0f:8d:36:db:22:54:64:
5f:1b:48:e5:e8:e9:ed:63:a4:81:39:be:33:00:f8:
9f:22:20:9f:44:8a:36:54:4a:29:81:b2:ba:e2:8b:
d9:ce:4e:96:9a:1a:a8:f5:f8:73:b8:37:2c:11:0c:
2e:49:e5:03:e3:95:6d:81:da:b4:d7:de:8c:46:dd:
f1:ef:9c:bd:bc:32:3d:89:b1:d7:ca:ee:e0:30:42:
44:56:b8:c0:58:44:a5:09:07:cc:af:f3:25:8d:3f:
ca:0e:cd:08:ac:b7:fb:bb:be:8e:20:56:4a:5b:f5:
58:40:40:ad:66:96:06:d5:5d:ad:22:33:c8:25:85:
ef:fd:86:15:f8:26:c0:df:89:2d:db:cc:b3:ef:2b:
4c:f6:8b:31:18:92:51:fe:84:03:a2:a5:43:b0:67:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:D1:52:8F:71:91:31:F6:29:86:B4:50:5E:CC:7B:41:7F:FB:54
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:47:b0:42:02:7d:58:d0:5d:b4:3b:74:41:14:53:dc:cb:ad:
9e:71:1b:1e:f2:e9:7a:30:50:d2:df:5b:5d:69:ef:d5:f5:34:
78:0d:37:2a:68:8d:34:f2:55:df:a3:1d:3b:7a:ab:4d:f5:ca:
e9:5e:f0:ed:44:55:05:ec:49:e5:c2:5a:8b:75:f0:6a:12:4b:
a2:86:fa:ee:bb:2d:26:12:3d:5b:cb:5f:ab:73:2e:53:1d:d3:
47:16:ac:e1:b2:11:38:83:d7:9d:97:f6:80:92:10:76:c5:2e:
35:ea:6d:7f:ee:cb:36:da:32:06:9b:b7:ca:4a:f3:eb:3b:3d:
6b:ce:c8:93:fb:a3:82:6b:68:cb:38:56:e2:bb:f9:f4:3b:a3:
cf:fb:90:95:94:0b:44:98:d7:7d:e0:09:1b:53:0b:35:73:f2:
38:f9:b4:d3:a3:d3:27:34:6c:23:6a:c0:b1:83:bd:1b:3c:6d:
a7:78:83:01:5f:33:c0:23:1b:e4:bd:71:e8:f6:ad:26:3d:cc:
71:63:4e:92:1d:69:dc:fe:8d:55:ba:f7:4a:80:60:9a:2f:23:
85:cb:22:18:7d:d2:27:64:ef:f6:8c:15:4b:32:eb:c8:99:3d:
10:26:17:8d:f2:bd:e3:57:4a:78:6d:46:f3:61:00:a8:be:88:
84:0b:6c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:48 2025 by rpki-client