Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: i30oxULzSu08qXT8GA4VdGORtXbt18+dJ8CocLPGo9k=
Subject key identifier: 6F:9F:C3:33:BD:BD:00:C6:5C:1F:48:DC:FF:25:CA:20:68:95:1E:15
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 0198481C05CF5970AAA7066DB738585BA318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 19:00:52 +0000
Manifest this update: Sat 26 Jul 2025 19:00:52 +0000
Manifest next update: Sun 27 Jul 2025 19:00:52 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: aWQ6NTcMTuLBZgPNeJPxLmdM/KZfKokw1JxptjiJ23E=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:05:cf:59:70:aa:a7:06:6d:b7:38:58:5b:a3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jul 26 19:00:52 2025 GMT
Not After : Jul 27 19:00:52 2025 GMT
Subject: CN=6f9fc333bdbd00c65c1f48dcff25ca2068951e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:ab:74:1a:b6:61:f4:ff:80:7c:9b:ad:ae:
a0:a4:38:08:6a:03:f2:81:f0:c7:95:a4:d9:4a:12:
a6:c9:f4:b6:7e:82:6f:ec:fe:9a:dc:0e:f6:79:41:
49:96:45:d6:f8:83:3d:d4:e9:1f:a9:0a:7f:36:40:
40:0b:c6:cf:cc:4a:e6:66:ec:9a:66:de:33:3b:e9:
8a:be:10:61:e0:03:2c:39:38:4c:27:43:f1:08:f2:
37:11:e8:82:20:a8:c2:b7:06:26:0e:69:a2:fe:c7:
41:7c:be:64:6d:77:1b:a1:83:80:bf:3c:36:9c:7e:
94:47:37:80:13:4e:04:02:b9:75:83:94:c8:0d:1b:
fc:4f:12:0b:cd:9f:16:70:9b:9e:07:b5:e4:13:65:
f1:2e:77:87:b5:42:b8:36:98:70:8f:02:fd:bb:39:
0d:e6:ab:d7:ad:71:0a:1f:d7:93:b6:bc:ae:f6:cf:
68:a5:2c:7d:0d:7d:5e:55:de:7a:31:fa:bd:fb:05:
87:72:6c:ba:db:82:9a:64:6d:23:53:94:1e:a7:c9:
6e:94:36:45:9c:e2:c7:b1:c5:b9:87:78:57:04:d7:
b5:98:3a:a7:9f:b8:f4:78:93:6b:48:88:30:01:92:
08:5b:c3:30:cd:e8:32:8b:e6:5d:81:ca:56:03:f7:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9F:C3:33:BD:BD:00:C6:5C:1F:48:DC:FF:25:CA:20:68:95:1E:15
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:38:94:33:78:bb:47:84:e0:f2:ba:6b:b9:e9:43:a8:ba:e4:
db:32:9a:1a:ac:f4:8d:7d:f5:a0:fc:ba:34:0e:c7:6e:80:f2:
1c:18:e5:49:45:47:61:32:07:58:88:bc:5b:85:44:e6:1e:16:
5d:27:48:07:49:cc:d4:67:a7:f8:2d:58:3d:d4:36:7d:ff:2d:
4f:27:fd:d8:45:20:f2:77:ae:51:57:db:7c:c7:98:d8:61:05:
1d:78:15:23:23:93:ae:9a:75:44:bf:71:3c:a5:58:5f:97:ec:
72:68:d1:89:9c:dd:57:8f:be:1e:dd:c4:7a:91:8e:b8:a8:d6:
25:c4:b9:2f:cf:ad:83:bb:87:a1:aa:73:3e:3e:50:40:6d:df:
bb:b6:6d:11:7a:12:b3:9e:d0:33:8d:4f:64:c8:35:c9:f3:3d:
98:8f:ad:43:a2:a9:08:c5:75:12:ab:2a:ce:f3:d7:47:ff:e7:
0e:8d:af:dd:4f:90:a5:e5:16:f1:de:d7:b0:ec:3b:71:bb:3d:
5e:77:ae:23:6e:53:69:35:00:ea:bb:9f:12:ee:fa:84:82:44:
62:64:41:a6:c4:cf:fe:ed:71:9b:e3:75:57:9b:ca:0a:66:d7:
bd:51:53:bd:6b:52:df:81:96:57:60:12:3c:5f:da:6c:14:66:
cb:50:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:21:53 2025 by rpki-client