Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File: NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier: UWxBgc1LssR+IVf/28Cxkx8mZB7/o2VDCg19KsNCPpM=
Subject key identifier: 80:AF:AA:8C:2B:13:BF:F3:68:2B:51:40:D2:BF:17:60:C6:36:B0:F0
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial: 019849D31E3CE46071F35EFE1347DB5543D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: ah2ELmBxx8jkS+SqP9VSJR5K5eWAbgR7QtO3tP6wNps=)
4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1e:3c:e4:60:71:f3:5e:fe:13:47:db:55:43:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=80afaa8c2b13bff3682b5140d2bf1760c636b0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:fa:e8:41:f6:69:37:b2:3a:c6:2e:6b:8d:
30:f1:e0:6d:7b:ea:9c:bd:24:2f:83:2e:e7:be:c0:
ca:92:dd:ac:cf:d3:21:f7:93:dc:89:e0:0a:01:d5:
72:d9:fd:d3:7e:64:a1:08:e7:06:84:a4:2f:79:fe:
49:33:6d:9f:9c:b8:30:ec:42:29:34:bc:45:5e:34:
8f:79:3b:a9:7d:6c:b6:f9:59:8d:06:d3:e9:0c:b8:
84:7f:b4:9c:81:e3:73:8b:26:32:19:22:60:55:7a:
93:39:54:d9:74:f4:dd:ab:08:54:8c:21:ef:b6:a9:
21:3d:c2:65:a3:f7:e0:39:fe:7f:fd:d4:95:a6:8c:
70:50:7e:77:1c:a2:a2:17:38:b5:81:ec:c5:ef:1a:
1b:b4:3b:fc:b5:12:3a:bb:5a:5d:37:90:7e:8f:9a:
e0:ca:77:b4:70:45:35:96:3c:99:32:fb:43:9d:e9:
42:af:61:75:e3:49:43:38:ac:3a:9a:74:08:c4:02:
c9:91:86:90:f0:d2:a5:31:55:ce:24:fa:68:2f:08:
55:3d:5a:df:5c:37:79:44:57:e7:9a:1f:2c:44:50:
56:88:f0:e1:b8:bd:c3:a8:60:15:0c:8b:bc:42:31:
ba:76:37:73:d4:0a:78:14:19:77:bf:b4:b5:86:36:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AF:AA:8C:2B:13:BF:F3:68:2B:51:40:D2:BF:17:60:C6:36:B0:F0
X509v3 Authority Key Identifier:
keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:73:74:d5:6a:f6:2f:ff:ce:b7:54:35:20:dc:21:3f:f7:9c:
8a:54:1d:d1:0f:43:83:c9:d4:34:6b:26:c4:51:07:f4:ae:d1:
f0:70:f5:40:f7:3c:cf:32:74:ed:02:2b:69:20:65:57:2c:a2:
96:53:6a:dd:c4:96:1d:b1:ef:02:45:85:d2:9a:8c:6d:5c:9d:
e0:35:02:19:45:cd:64:e7:6f:a2:28:30:6a:08:7c:c8:b3:6e:
3c:94:50:6e:c8:c6:57:47:cc:b1:56:1b:de:3e:2d:c1:93:58:
1b:38:c4:e3:73:5d:27:7b:04:03:97:23:fa:e8:50:61:35:3d:
c4:ba:bb:2f:30:2f:f4:1b:f7:16:76:ed:ec:c0:fd:7b:e6:0c:
2d:d4:da:2a:c5:23:79:e0:b3:7e:ab:e0:71:1d:74:ef:e9:72:
b6:6f:77:d8:b8:b1:c5:c8:46:13:1b:a8:b8:78:06:fa:7a:b7:
09:5c:e9:c7:aa:af:e7:33:49:d7:e3:1e:0f:aa:0f:ac:00:d0:
c4:dc:8a:be:1b:d6:31:6a:a3:6d:94:f4:22:f1:82:39:95:a9:
94:59:de:16:ae:b2:21:a4:e9:f4:e9:63:43:28:ff:86:ea:9e:
a2:ea:9c:1f:13:2e:15:89:4e:c6:d2:58:97:fb:e7:0c:94:f6:
a0:e7:21:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:18:40 2025 by rpki-client