Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: 0vC8uRsY/kxjd60usDYFMGYlKIdLusARzdIIWJVpXFk=
Subject key identifier: 43:CB:DA:69:FD:F8:D2:C4:BE:79:5E:BC:3B:D1:83:D2:0A:6B:E6:DE
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019853E950499E64FBCC21611A3484080E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 160F
Signing time: Tue 29 Jul 2025 02:00:55 +0000
Manifest this update: Tue 29 Jul 2025 02:00:55 +0000
Manifest next update: Wed 30 Jul 2025 02:00:55 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: 6p3YM7DFsPjugBC82YagCrAMJjxwoRpUf0YjPe3jkiU=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:50:49:9e:64:fb:cc:21:61:1a:34:84:08:0e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jul 29 02:00:55 2025 GMT
Not After : Jul 30 02:00:55 2025 GMT
Subject: CN=43cbda69fdf8d2c4be795ebc3bd183d20a6be6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:99:5e:67:4c:13:1d:1f:db:fe:e3:7a:ea:
93:ec:8a:87:d8:73:41:f3:d5:2f:a4:0b:84:d0:06:
54:de:e6:20:75:d0:bf:d3:91:c9:45:74:05:e7:ae:
36:21:24:a6:3c:2c:57:bd:6a:08:f6:5a:dc:59:21:
c0:66:0f:db:92:4c:7b:8d:d2:cc:b8:51:69:62:49:
e2:ac:d4:9b:41:18:6e:12:b8:ef:6c:4f:33:5b:d9:
8d:d9:65:9f:8b:d6:b1:d8:20:2a:d1:83:98:53:98:
df:73:d1:a0:c4:ed:a2:2c:9a:34:78:ed:8e:a7:7d:
75:c0:c1:72:8b:a2:b2:5e:97:ae:88:2e:1a:c8:e2:
ae:75:83:b1:dd:15:ea:e4:56:54:d7:45:08:a7:63:
a0:67:dc:5f:f3:27:cb:a7:7a:de:90:0b:4d:a1:06:
4f:84:99:d8:b3:fc:32:a1:3e:1c:8a:b0:3d:33:f4:
44:ff:e0:e0:02:4d:b5:fe:83:b0:be:b0:77:53:c0:
1f:7b:0b:b5:59:73:5b:8d:e9:a0:bd:9c:6e:df:68:
f8:e3:62:21:6f:29:e1:2e:a4:df:db:df:e2:5f:86:
da:87:34:7f:11:74:f2:50:52:95:5a:13:f9:cd:58:
eb:5c:7a:ea:b6:e3:b6:d4:8f:17:c5:ac:40:d0:8d:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CB:DA:69:FD:F8:D2:C4:BE:79:5E:BC:3B:D1:83:D2:0A:6B:E6:DE
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c5:84:f6:15:26:c8:c5:09:45:a0:38:38:b2:5b:43:f1:fb:
31:41:96:a1:0b:5b:c5:8c:aa:59:2c:8b:ec:fb:66:4a:a5:af:
be:eb:14:93:ce:81:d4:e1:ee:f5:29:d3:43:86:a2:6e:5f:e0:
c5:17:4e:f7:61:21:f8:d8:a1:e5:49:0c:9a:e0:f7:fe:ef:9b:
9c:f9:65:69:89:b4:12:19:f1:a4:c6:0e:95:28:2e:e8:7c:fe:
f8:9b:8d:29:47:20:3a:c2:4f:ce:0d:0c:72:69:02:6e:00:63:
56:d4:5f:0a:22:a4:85:4f:d1:4f:12:e1:b3:84:f0:b2:78:15:
1e:82:41:0e:e4:f8:10:51:6b:10:cd:55:a3:2b:0d:95:c2:42:
53:a9:8f:61:a4:d4:e5:95:e6:f2:9d:41:27:84:75:ff:1f:03:
49:a8:04:cf:e2:48:20:4f:29:fb:f9:dc:bf:6e:88:c4:40:12:
9e:bf:1f:99:27:05:ed:81:25:0c:4a:53:b6:c8:53:e0:e9:5d:
93:a0:69:2e:81:31:6e:7c:22:3b:92:ef:b4:7a:05:6e:20:7f:
54:bf:ed:a0:78:3c:9c:f3:22:04:e6:1d:81:a8:2a:6d:70:a1:
d7:65:e0:21:2a:03:32:a2:b8:14:99:43:27:a2:ba:f5:8c:13:
68:71:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:04:41 2025 by rpki-client