Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: 6AYKKpiyg+NfNCwkXPis+wNOYXWayRDdicR5u3UD8ec=
Subject key identifier: FC:29:EA:C8:44:F2:77:37:D6:B1:F7:D7:D1:46:2F:0C:65:AB:B2:0B
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 019848C077F135492B94F8C4DA913FB87F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 22:00:29 +0000
Manifest this update: Sat 26 Jul 2025 22:00:29 +0000
Manifest next update: Sun 27 Jul 2025 22:00:29 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: +94fo86RYEHMBVUrh9tT7XRyiJP9O+VfsE7X4JM7c1g=)
2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:77:f1:35:49:2b:94:f8:c4:da:91:3f:b8:7f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Jul 26 22:00:29 2025 GMT
Not After : Jul 27 22:00:29 2025 GMT
Subject: CN=fc29eac844f27737d6b1f7d7d1462f0c65abb20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:36:82:c6:e6:44:75:7c:2d:69:56:52:a8:
22:93:ee:27:c4:fb:83:67:90:29:35:70:9b:81:0f:
39:da:b3:6f:05:7d:4c:64:59:79:8c:80:ed:1a:5f:
5a:61:b7:ab:54:2d:03:e6:ee:6e:f4:f6:84:65:83:
8d:2e:eb:d1:63:dd:5b:ec:c6:12:c0:85:b2:00:1b:
ee:a8:55:f6:ee:2a:a2:74:22:be:b0:69:15:cb:59:
a2:07:4a:2c:60:5e:42:d0:05:77:fc:fd:f1:53:87:
b5:95:de:90:a1:07:3c:8b:98:d7:e7:67:cd:be:82:
a8:62:4a:7b:82:a8:6a:9f:eb:7e:6a:70:92:2d:f8:
0d:34:ff:51:1f:82:7e:77:14:a4:3b:18:d3:46:c3:
da:06:b0:9f:f2:61:6c:46:7b:fc:dd:50:71:b4:f5:
f4:b8:ec:ed:0e:12:33:68:7d:f2:08:00:24:5d:1e:
58:bc:66:12:ec:68:e3:f7:63:dd:1c:23:74:f7:47:
a7:69:0c:92:e3:a2:9c:ce:60:17:d1:3b:0e:fc:e8:
58:20:cc:73:43:c7:fe:e3:47:30:b3:1b:c4:99:e4:
f0:c3:9d:96:6e:d5:d1:53:a4:75:ff:08:a5:47:8e:
30:38:b4:b0:41:1b:fc:ab:f0:17:41:93:b1:56:f5:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:EA:C8:44:F2:77:37:D6:B1:F7:D7:D1:46:2F:0C:65:AB:B2:0B
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2d:bd:40:27:1b:62:cf:7c:f9:ba:39:4d:24:71:f2:36:e9:
ad:68:06:db:8f:52:4f:78:1c:91:90:70:5b:13:86:0c:b0:ab:
7e:fa:e1:53:7b:71:ad:f3:59:65:63:81:19:fc:4b:a3:5a:37:
37:1c:d1:dd:db:a5:ad:55:e9:ba:bc:0c:12:a8:da:e3:44:af:
0a:22:42:f9:94:97:c1:c6:05:ce:2d:ed:b5:8d:d6:99:17:f9:
55:ab:10:08:42:8b:02:4c:5a:9c:7a:27:d5:47:d0:31:de:ec:
51:a8:86:89:61:55:e9:e9:68:1d:94:b2:e3:8e:d4:15:61:39:
f0:43:a4:48:de:47:79:3a:17:2a:66:84:5a:a1:60:4f:d5:bd:
ff:c7:d9:b7:bf:1b:cf:20:59:65:e1:52:80:f4:d1:48:b2:e8:
ab:8d:3c:b7:ce:41:4a:8a:d4:dc:9b:99:c5:df:b5:43:95:65:
6d:89:29:dd:4f:2d:3c:64:4b:31:0f:ac:6c:1f:fc:3e:48:4a:
63:75:f2:7a:fe:53:b8:21:64:69:e7:0c:47:2f:b0:bf:ca:a5:
87:48:14:82:0d:e8:c1:58:51:20:db:fa:e0:2e:cb:90:57:03:
7c:b2:d3:95:8b:8e:52:52:a7:4e:7e:3b:d3:8e:f8:d8:7f:bd:
c1:fe:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:45 2025 by rpki-client