Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: m8Q1FxZKozEmaMIxdncmbHGrtgwrfJRWRjoZJ/2cNP0=
Subject key identifier: 28:DD:9B:BF:B3:61:23:1F:98:AA:7F:E0:42:1E:1D:F6:93:AC:3E:30
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 01982710A746388D359906B4BA2EFB958ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 15F2
Signing time: Sun 20 Jul 2025 09:00:59 +0000
Manifest this update: Sun 20 Jul 2025 09:00:59 +0000
Manifest next update: Mon 21 Jul 2025 09:00:59 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: qxmWAQs05VpdOQyuW4zQD+n94eVYYe9cDUz+c10Y9cQ=)
2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=)
3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=)
4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:a7:46:38:8d:35:99:06:b4:ba:2e:fb:95:8a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jul 20 09:00:59 2025 GMT
Not After : Jul 21 09:00:59 2025 GMT
Subject: CN=28dd9bbfb361231f98aa7fe0421e1df693ac3e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:64:7d:51:14:82:14:45:ee:80:b8:bc:e6:
3b:4b:fe:b4:26:b1:a9:b2:7f:fe:f2:79:ea:80:8c:
a7:7b:c6:00:b3:88:b5:f0:a8:86:e5:a1:57:e9:b4:
2a:17:f2:91:48:1c:ae:68:64:12:44:0c:b8:42:b3:
f1:eb:2c:c2:38:75:b8:ef:20:13:e1:2d:2f:2f:cb:
fe:46:65:5e:e6:e2:28:7c:63:0a:81:5e:23:99:64:
31:02:65:fb:23:88:13:e6:26:a6:1b:ab:97:17:da:
9d:17:b6:cd:d3:99:c5:db:c6:ba:44:ff:80:f5:fe:
8e:15:74:f9:c5:b0:da:31:cd:d6:37:cb:f1:fb:a0:
57:c3:ef:7f:a8:ab:d4:f3:82:0a:52:24:57:91:8d:
3a:ae:8c:77:71:78:e9:71:ff:84:53:83:bc:7b:8b:
f1:e4:20:d6:aa:f9:23:4e:40:6f:5e:91:f4:92:ec:
09:8c:14:2f:c4:4b:e2:bf:86:eb:03:44:af:a7:db:
19:7d:be:c5:54:85:50:08:5a:0f:39:02:ae:d5:b0:
9b:7b:ef:38:8d:a3:9e:e3:a8:43:1c:5e:52:79:a2:
7b:5f:d6:f2:e2:28:ab:68:cb:e3:94:07:ed:6d:0f:
a2:97:c5:7f:c5:f4:a6:64:d1:72:66:b3:70:b6:97:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:9B:BF:B3:61:23:1F:98:AA:7F:E0:42:1E:1D:F6:93:AC:3E:30
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0d:2e:a8:b9:a9:f5:c5:b4:5e:2f:db:5f:34:07:8f:7a:6d:
95:53:82:8c:65:b9:9e:9c:b2:3e:9a:f1:78:5b:ad:04:d6:1c:
8c:bd:1b:87:ee:6e:48:65:4b:a8:0b:87:0d:fe:95:f8:db:7e:
fe:d8:97:47:62:b2:69:76:f9:6a:c8:62:01:ca:49:0a:7a:8a:
22:6c:3d:46:c0:e2:1e:0c:b0:ca:79:0d:e4:cb:e2:73:55:2a:
b9:69:ad:06:2e:9a:2c:f9:0b:05:96:3e:c4:43:70:9a:3d:ea:
72:30:5b:12:2c:d5:4d:9c:32:84:dc:fc:fc:33:9a:dc:da:b2:
ae:0b:74:dd:b9:66:e1:52:20:3f:fa:b6:90:a4:90:f2:03:0e:
30:9a:52:5d:00:4d:82:6a:9c:7a:30:f7:28:f2:dd:e1:80:1f:
6d:0b:b3:eb:ab:27:bf:ff:b8:dc:f9:f9:29:57:48:cc:4c:5d:
2c:bc:26:4d:5b:4b:4d:4c:c8:72:2f:25:e5:dc:2e:b4:8a:00:
0d:7d:b7:aa:d4:1b:06:db:c7:e0:c1:e5:e8:ba:e3:3a:1f:68:
b9:9e:16:52:89:5b:85:1c:41:25:8f:f9:ea:bd:01:f0:31:7f:
b0:96:25:8c:c7:bc:25:a0:c3:55:9d:a3:b9:c7:48:de:68:29:
62:ca:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:35:57 2025 by rpki-client