Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: MaO9e90FJUOMy+eb+1wyfmKD+S3KtPIH+aYDSUvTQKk=
Subject key identifier: 72:A8:1F:B3:58:6B:D2:8C:2E:83:7C:AE:6C:59:5D:99:B5:4F:A4:21
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 0198277E4028204D812BCE604223B6C0BC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0EB1
Signing time: Sun 20 Jul 2025 11:00:42 +0000
Manifest this update: Sun 20 Jul 2025 11:00:42 +0000
Manifest next update: Mon 21 Jul 2025 11:00:42 +0000
Files and hashes: 1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: vcS0uA0AAM6buU/YEsg3MQcmhg0zWIe5c4QOjGy201w=)
2: pD83cCgQmkTqmybL4Qe3QLOSsJI.roa (hash: Dc3wCA5yOgFeVk3/J+FU53rFpNzosD7EmU4+ejzw5Hc=)
3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:40:28:20:4d:81:2b:ce:60:42:23:b6:c0:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Jul 20 11:00:42 2025 GMT
Not After : Jul 21 11:00:42 2025 GMT
Subject: CN=72a81fb3586bd28c2e837cae6c595d99b54fa421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:fa:65:43:26:cc:e0:c8:4a:65:7e:c4:44:
4a:f2:8f:80:53:d8:00:81:50:9a:f9:71:1c:91:1d:
63:24:2a:d4:18:2a:7d:5c:bb:8a:d4:0b:e6:7f:6a:
71:ba:67:59:f6:9a:f3:c5:b8:54:49:85:ca:69:ee:
f4:51:ce:1a:2a:20:f7:d7:4c:55:99:f8:bc:c1:e0:
dd:d0:b5:70:0f:c9:2d:de:73:02:fd:4b:5d:b0:bd:
ce:8d:3e:68:60:d7:29:02:70:f6:6b:a7:7c:cf:15:
c7:fc:1c:c4:8a:a7:a2:01:0a:0e:45:27:3b:d6:53:
6a:d4:1b:ec:73:7f:06:0c:cf:22:15:17:b4:75:06:
31:3f:32:59:40:b1:2b:ed:b3:31:b2:e7:bd:dd:d6:
ee:df:c4:d8:9c:e0:b5:6e:55:2c:7d:e3:58:b5:e8:
56:6e:da:40:1c:d9:74:cc:27:5b:54:74:d3:d2:69:
62:6f:75:ba:bf:2b:0d:b1:53:53:a0:b4:1f:f7:43:
48:56:14:03:c8:c3:54:56:df:ca:8e:9c:36:c0:9d:
5b:ad:40:91:20:ce:e4:c2:a4:14:72:9f:3a:b0:36:
91:4c:c9:6e:74:28:7c:f0:a4:b2:96:cf:81:ef:97:
ae:56:b4:f7:78:aa:ba:12:ff:11:3b:f3:57:26:b5:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A8:1F:B3:58:6B:D2:8C:2E:83:7C:AE:6C:59:5D:99:B5:4F:A4:21
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ba:69:04:97:cd:c9:03:02:b3:a3:66:af:17:ee:5d:11:a2:
74:84:d5:1c:26:6d:34:56:72:55:ba:ca:fb:e3:8f:d4:07:1a:
43:55:1a:1a:03:c6:2b:52:6c:b0:82:55:b7:a2:ed:ae:1e:e8:
b6:23:8b:c7:d5:e3:53:81:6d:a1:c6:f8:79:f1:e5:30:b3:c5:
49:7a:11:50:cf:e1:dc:9b:04:5f:bd:58:88:e8:74:ae:0f:f3:
b0:24:02:d6:05:49:f4:16:89:b1:af:57:6c:88:48:e2:9b:37:
d6:d0:96:d4:c8:a1:bb:a9:26:59:c2:81:a4:cb:25:00:76:17:
cb:59:42:32:48:2a:62:9b:c0:06:b5:59:b0:b1:96:31:b8:e9:
26:6b:51:2b:ec:f5:da:32:18:03:bc:ae:98:a8:94:13:3c:66:
f2:6b:28:09:b4:a5:6d:e2:e3:ae:2b:ef:63:6f:1a:0c:0d:bf:
d3:88:01:1c:ec:0e:0a:af:70:5c:dd:90:89:a3:94:7e:37:a9:
9e:e3:03:05:b0:b7:bc:1c:f0:30:7e:0e:9d:a7:53:6a:b5:56:
50:7f:84:78:2e:1e:6c:13:9f:e9:08:8d:7c:26:e1:31:57:0f:
d8:61:33:e0:89:86:ad:95:b6:2c:e7:0b:95:49:d1:c0:42:85:
21:4b:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:28 2025 by rpki-client