Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: iYpWQ+37l4dv58OJcRKTG+45iO+ZNtFP5kvOCrIArd0=
Subject key identifier: 7B:23:35:7B:28:E5:87:AF:0D:56:E5:AA:7B:07:B5:67:4C:D8:E6:E5
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 0198906C10CD1C73B3DE2AC9319DB22FFAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 20:00:57 +0000
Manifest this update: Sat 09 Aug 2025 20:00:57 +0000
Manifest next update: Sun 10 Aug 2025 20:00:57 +0000
Files and hashes: 1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: NzJ6cd13EZaR2w9J0QfW6Z7SG/DafUYkP34NlXmiBc4=)
2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:10:cd:1c:73:b3:de:2a:c9:31:9d:b2:2f:fa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Aug 9 20:00:57 2025 GMT
Not After : Aug 10 20:00:57 2025 GMT
Subject: CN=7b23357b28e587af0d56e5aa7b07b5674cd8e6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:2b:a2:f5:96:c0:ce:f4:ea:64:26:a6:15:
7c:65:0e:58:2f:2c:1b:70:b8:54:39:24:8f:a6:9c:
5b:cc:d4:d7:0e:27:43:7e:e5:e1:06:41:a2:1c:7d:
05:6c:83:c2:e9:6c:51:1e:61:29:ef:57:9d:e3:30:
de:2e:fc:cd:0e:52:90:9b:ee:b9:1e:83:4e:1d:f0:
12:42:e9:b3:d3:4f:57:e2:e5:46:62:80:e5:eb:6f:
5a:90:e4:b0:2a:63:bf:1f:da:e3:22:e9:35:20:c8:
11:00:49:21:51:7d:ee:90:c7:ee:ab:31:db:cb:b1:
2c:35:b9:12:29:35:1b:a3:90:0f:59:2b:a0:38:c9:
63:17:81:ec:63:fb:ec:10:42:e8:a2:0f:7d:61:d7:
2e:71:e7:ec:53:e9:bb:d7:18:34:06:17:db:ec:17:
c3:c4:0d:51:0e:55:e3:7e:d1:bd:d3:bf:d3:e9:7d:
89:34:ce:82:51:9f:43:a2:a3:6d:e0:2d:0d:5c:fc:
09:b8:c5:08:92:3f:23:88:5a:f4:1b:04:c4:40:8b:
3c:f4:57:98:3e:e9:b2:94:ad:1c:4b:11:15:c5:0d:
13:59:c7:1b:10:43:9d:57:68:c7:84:bc:06:d7:46:
c1:8b:7e:c2:34:da:bd:32:a8:cd:87:72:ec:f1:4a:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:35:7B:28:E5:87:AF:0D:56:E5:AA:7B:07:B5:67:4C:D8:E6:E5
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:e4:d6:db:e6:21:8a:d7:5f:64:a7:20:b2:0d:92:18:3d:
81:74:08:00:e8:d4:82:49:6a:62:5d:a4:92:1f:f5:69:2d:88:
ac:65:79:66:7c:92:f6:25:bc:59:52:12:cf:10:e4:5f:72:c2:
50:4c:1c:3c:93:95:38:a5:73:95:9a:e1:4d:42:0b:29:07:20:
87:c9:5f:66:62:31:bb:b7:55:2d:d5:37:e4:02:46:ba:64:c8:
95:e8:3b:1c:70:ff:e7:d9:3e:15:ee:5e:65:19:24:97:9b:ec:
c2:d3:21:9b:05:4d:61:fb:4a:78:67:4b:43:87:4a:5b:6f:39:
a4:a1:3d:c2:5a:4e:1c:1c:51:c7:fa:01:00:f0:bc:e5:28:b8:
9e:09:13:a6:ed:3a:6e:02:3a:5f:52:97:56:7d:ea:15:5b:4c:
da:08:f7:e9:00:9c:97:c0:d1:1e:fc:53:4c:24:82:0f:f7:f6:
e4:f7:3f:80:13:53:03:d5:a2:6c:6d:ba:4b:45:6a:22:3a:fd:
31:57:22:99:b6:10:d3:af:d2:bb:91:5d:e0:38:e1:a4:d8:06:
e8:d0:87:a1:53:71:20:8e:b0:0e:e9:81:4f:25:1d:b5:39:02:
00:a0:61:25:77:e6:fd:20:8b:ec:59:78:8a:6a:51:ec:c7:90:
c2:6e:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:51 2025 by rpki-client