Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: q4f06O8Z0lPyYnyw6tsYt8CmpgVQ4kIZX5wuFD5o0vg=
Subject key identifier: FB:90:F2:81:89:A6:87:AB:31:3A:31:43:40:38:29:5D:A7:8B:C0:D5
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 01983EAAB17085D7AD89D441A20F6D7DCECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 0694
Signing time: Thu 24 Jul 2025 23:00:30 +0000
Manifest this update: Thu 24 Jul 2025 23:00:30 +0000
Manifest next update: Fri 25 Jul 2025 23:00:30 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: NrklhMlymKW4nnQP5QIfjssCId7FjO3+jukRtZtuqWM=)
2: jCF0UZxubcg2boAXKn66J2n2ZyE.roa (hash: Jnz70fxzRetWB+WwfJpKB4S2++FXBxK+gp589kR2o6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:aa:b1:70:85:d7:ad:89:d4:41:a2:0f:6d:7d:ce:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Jul 24 23:00:30 2025 GMT
Not After : Jul 25 23:00:30 2025 GMT
Subject: CN=fb90f28189a687ab313a31434038295da78bc0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:fa:cd:14:d1:de:36:b2:66:89:e9:18:2a:
a0:d6:04:8c:0d:db:93:99:51:47:da:8b:6e:3d:13:
2c:fe:85:34:09:af:74:99:ba:3a:1f:4e:b9:43:9d:
3a:8c:73:aa:ca:01:76:b9:ea:08:ba:ed:dc:b2:b0:
68:43:ea:4e:e5:4a:40:80:c0:63:68:83:aa:3b:d0:
ce:ae:2f:9c:35:f9:02:b5:4f:45:d7:bc:d6:04:bf:
92:09:04:a6:43:8a:82:7d:cf:63:6e:5e:f7:9c:6f:
2d:d4:64:a1:83:82:fa:d9:5a:44:ee:f7:2d:29:6f:
72:87:13:bc:1a:5f:8e:ef:97:9a:43:2b:c4:27:3d:
8f:b3:5b:6e:29:37:b4:d9:ec:3c:68:cd:7a:eb:2f:
18:a8:05:c9:a4:79:ac:e8:72:87:92:29:32:17:d3:
40:9b:6c:89:3b:d8:71:0b:90:30:c5:98:41:80:f3:
03:0d:51:79:11:8c:75:a2:4d:ce:14:50:5f:d0:f6:
cb:59:6d:7a:39:34:c1:79:f6:40:32:03:5b:89:31:
72:47:dd:1b:9f:25:51:f1:25:b2:2f:31:da:77:97:
f8:e4:95:2a:4f:fb:a2:77:1a:d7:94:18:c1:39:1a:
d9:6e:55:e6:97:e8:71:ca:a5:da:46:81:65:4d:82:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:90:F2:81:89:A6:87:AB:31:3A:31:43:40:38:29:5D:A7:8B:C0:D5
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a4:a0:1f:43:20:f7:65:70:97:1e:6e:76:44:10:a7:72:92:
3e:bb:a2:1f:60:34:65:64:75:79:49:10:67:33:22:26:fd:bb:
1a:74:a6:d3:d1:05:60:70:05:33:36:a8:f8:82:02:57:b1:01:
18:90:1e:17:77:50:32:ee:a7:b1:bd:7f:73:ce:a8:1b:50:2a:
dc:d5:02:c6:7d:b0:0f:61:ae:61:37:18:02:a1:9f:4c:ac:38:
e0:94:1a:86:13:68:4f:94:b7:e0:02:6a:8f:71:fa:3e:43:d1:
9d:95:52:1d:40:af:67:b8:0f:e6:72:78:a7:13:6f:3b:93:ac:
bc:37:b6:91:ec:b2:58:83:11:36:3a:1b:ad:94:56:3f:73:d6:
39:28:e8:d6:56:11:bd:b7:41:fb:c6:a0:29:11:f7:ac:a3:2e:
88:72:8a:56:29:b5:f4:50:bc:24:06:cf:08:c9:7f:fc:28:1d:
b3:f6:da:6a:e6:e7:e6:0d:2b:df:9b:b7:9b:ed:22:0e:e4:54:
21:3d:bf:90:49:54:ab:95:ce:46:c5:fe:87:0a:01:6c:33:83:
b7:70:b9:0a:b8:28:0f:a6:b0:36:34:f0:a7:12:df:d2:83:ac:
ce:bb:bd:68:46:b4:38:0c:b0:93:a2:39:c9:0f:33:84:1c:18:
8a:35:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:34:58 2025 by rpki-client