Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: lxaYK+YyA7HDxPCnTa1E1aQu3bxb7LTpRgwpCqW06NA=
Subject key identifier: 8A:F2:6A:C4:77:10:51:35:B9:EB:E5:AE:88:1C:88:B5:7A:90:B9:2E
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 01984A78121AC8C1A4C053C9E8741D4195B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0E80
Signing time: Sun 27 Jul 2025 06:00:39 +0000
Manifest this update: Sun 27 Jul 2025 06:00:39 +0000
Manifest next update: Mon 28 Jul 2025 06:00:39 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: G92PJ712pDNf22YIbp1/bSuYqLj/xI4efmioTHEo8io=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:12:1a:c8:c1:a4:c0:53:c9:e8:74:1d:41:95:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Jul 27 06:00:39 2025 GMT
Not After : Jul 28 06:00:39 2025 GMT
Subject: CN=8af26ac477105135b9ebe5ae881c88b57a90b92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:e1:fd:f0:53:72:e0:96:48:2a:22:16:eb:
87:5a:2a:5d:5c:6e:8c:b2:48:1b:79:aa:76:35:77:
29:15:1a:80:01:cf:fa:b2:4d:ae:17:a8:46:2b:89:
e0:32:5d:43:24:87:d4:bb:48:16:0a:ab:90:f6:8d:
99:1b:b1:a1:13:92:a8:63:0a:8b:95:95:31:75:d7:
9d:49:b2:b0:b2:d5:cb:c4:1e:fd:96:97:c2:6d:2a:
43:78:65:bb:d6:a9:fa:9c:71:38:7c:bf:2a:9e:3c:
e4:31:39:01:5d:69:6d:58:d3:54:a8:76:a2:64:88:
c9:8b:b6:2a:30:ff:f3:ee:13:a8:67:73:40:64:29:
4e:bf:87:e5:4d:2c:61:0b:4e:7f:2f:10:72:19:3f:
06:04:21:fa:a4:58:16:3e:30:14:c2:f2:2c:9b:dc:
35:e5:15:09:6d:73:c1:5a:b9:49:5f:97:19:8a:61:
91:a7:2f:e9:ae:9b:de:fb:39:61:0e:13:29:5d:0d:
18:f5:01:35:8f:8d:44:e8:16:22:b7:00:93:4a:49:
ca:7f:c2:f8:e3:8d:fe:6c:0c:93:c2:e7:36:dc:c4:
7f:94:bc:3b:40:c0:f7:4d:d9:bf:d6:80:b4:71:a0:
3e:8c:25:67:ac:83:9a:49:53:db:33:b9:65:15:68:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:6A:C4:77:10:51:35:B9:EB:E5:AE:88:1C:88:B5:7A:90:B9:2E
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b2:93:79:80:4d:16:a3:41:33:f4:03:a8:02:f4:3d:70:3b:
23:c5:2f:7f:88:2b:82:d4:e3:ab:36:17:56:83:98:d4:09:24:
1c:7d:ac:55:a3:77:38:29:c3:bf:db:33:30:98:00:f3:3d:43:
b1:06:86:75:06:dd:91:c5:87:99:48:ac:91:35:19:b0:a0:7a:
22:7e:ba:2d:51:2f:2b:f1:a3:4f:23:5c:0e:63:62:45:fc:30:
6d:d3:73:05:01:35:d7:d8:5d:c9:b6:4c:59:57:2a:c8:81:60:
c1:c7:48:f8:d9:26:22:2b:e8:04:7e:15:2c:9d:c2:f3:1c:a0:
56:c7:a9:ab:cc:1a:c5:29:27:d4:35:41:31:ca:39:c1:b0:05:
ee:7a:00:ec:bf:45:df:3f:ae:b2:2c:ae:9f:23:cc:d6:a0:7e:
aa:a9:1a:22:ec:9b:d4:6d:9c:9e:74:6b:fd:0c:b5:d0:c3:73:
b7:9b:0f:d3:86:b7:c4:47:19:63:39:d8:0e:90:f8:ac:b9:be:
6f:24:bf:b9:4e:60:ee:de:52:e0:a8:e0:c8:f2:57:e1:d3:61:
e5:19:2b:17:a9:65:b4:02:29:8f:34:b1:06:11:4f:3d:f3:5d:
b7:04:3f:97:18:fe:52:54:d2:44:0d:56:e1:f9:8d:f2:ac:e2:
42:bb:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:11:21 2025 by rpki-client