Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: ubIaTntLMf3kRbYxFfSigB+2SL9efBVI1Slt/4fknSQ=
Subject key identifier: BE:61:54:55:A8:BC:B5:B0:4D:59:22:C0:DE:B3:90:A2:20:90:60:AC
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019849D33E8D252D4EBCB49A003B83EA6AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:37 +0000
Manifest this update: Sun 27 Jul 2025 03:00:37 +0000
Manifest next update: Mon 28 Jul 2025 03:00:37 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: a4gpLfrTCy258gRrkpLyKQdZVY+B/NhQSlWEY/MIv7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3e:8d:25:2d:4e:bc:b4:9a:00:3b:83:ea:6a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Jul 27 03:00:37 2025 GMT
Not After : Jul 28 03:00:37 2025 GMT
Subject: CN=be615455a8bcb5b04d5922c0deb390a2209060ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:a0:e0:65:de:58:12:28:51:09:29:77:a6:
94:50:a2:d2:d7:8b:73:29:b6:7d:5d:c1:8a:87:68:
b5:8f:08:54:03:c8:3b:d0:6c:7a:80:26:67:77:7a:
0a:a9:d7:69:65:db:fc:e9:65:3f:0c:ad:5f:46:03:
fc:a5:13:d4:31:4b:c5:f8:c3:a5:6e:3e:35:79:96:
a4:3f:f6:76:85:36:6c:48:5b:c0:29:a8:2b:e0:5b:
9e:7f:5a:00:7c:31:37:15:d8:91:a5:37:a4:af:9e:
41:f0:c6:7d:d0:14:44:23:f0:cd:9b:38:3f:55:c9:
c4:bf:eb:c0:2b:81:15:44:19:b3:79:a4:51:f8:17:
fe:17:4f:bd:62:76:4e:d1:cc:f9:f9:7b:05:27:21:
72:49:ad:c3:73:6b:07:ba:3a:1c:04:3f:5d:b4:e3:
a8:08:56:98:d3:12:f3:e0:f7:51:3b:a7:d8:cb:5f:
7f:21:a2:f5:49:cd:f3:94:d0:53:02:0e:ee:45:c2:
2c:3f:5e:0b:a1:4a:e2:71:5c:e7:c1:4a:3c:8d:96:
64:df:3b:1f:ba:02:99:59:4c:79:27:96:16:7d:52:
d1:c3:0f:f8:5b:84:9a:76:4b:b9:7c:f9:67:e9:fa:
53:85:c7:3c:24:d8:8d:a7:6f:f5:04:af:36:68:4f:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:54:55:A8:BC:B5:B0:4D:59:22:C0:DE:B3:90:A2:20:90:60:AC
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ea:9d:86:2f:69:8c:42:0e:81:8f:06:b6:24:3a:1b:78:95:
2c:c8:a2:54:9c:52:71:e3:91:e6:84:2a:f3:72:3a:9c:6c:e3:
5a:b3:9b:67:4c:da:9d:32:4a:95:67:91:f1:34:80:d2:72:98:
1d:e1:1b:01:4f:9a:7c:29:4b:7f:af:d5:08:1f:14:9c:e3:1b:
19:5e:81:94:93:3e:67:92:21:ac:39:98:94:7c:c8:97:d2:59:
f3:be:05:bd:69:d9:9f:de:77:a5:8d:e4:4c:9c:8d:73:56:c3:
93:7d:71:2a:58:4d:f0:ff:15:ea:7e:94:02:d4:fa:1b:43:c3:
bb:1b:a9:15:d2:d7:c1:78:c0:bc:50:bf:24:bd:0e:e7:8d:47:
19:bd:1c:6b:7f:8d:11:8f:01:f8:77:ea:6f:b1:00:e3:3e:1e:
52:f6:f0:71:cc:d2:f6:5e:88:ac:6f:4d:2b:4f:5e:d9:02:32:
4e:9f:37:1c:aa:87:0a:58:f6:e4:99:20:32:f5:ec:63:b6:af:
ce:90:85:55:ed:72:3b:dd:a3:05:fe:57:f6:2e:ba:7b:73:a8:
c8:ae:06:8f:3d:34:b6:b7:45:04:88:db:54:93:47:b5:ce:13:
65:17:9c:29:6e:29:88:d0:6b:9e:7e:62:db:c0:4d:e0:89:e7:
68:5e:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:31:55 2025 by rpki-client