Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: zJyM0oaim7dkDWlYzt5VsOxPNcAzMQ+8CdqmstFgDiQ=
Subject key identifier: 55:B1:98:51:60:D6:C6:E5:3A:BC:85:CE:CC:1C:67:24:7E:5C:FF:59
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 01984708A662DB7A311744B115A6176BB3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 14:00:05 +0000
Manifest this update: Sat 26 Jul 2025 14:00:05 +0000
Manifest next update: Sun 27 Jul 2025 14:00:05 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: +9D6RRkQG1+rTR0ixcbiCb3gi5IRltdvCgrdKiGEMEc=)
2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:a6:62:db:7a:31:17:44:b1:15:a6:17:6b:b3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Jul 26 14:00:05 2025 GMT
Not After : Jul 27 14:00:05 2025 GMT
Subject: CN=55b1985160d6c6e53abc85cecc1c67247e5cff59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:af:50:db:3e:7b:39:0a:f4:49:d8:f5:02:
3c:12:04:24:85:e9:e1:76:1a:7d:fd:67:65:02:80:
8d:c2:5a:25:6e:d0:9b:6a:23:7c:1d:34:7a:2c:ac:
74:7d:22:0b:fe:b0:e6:f5:ae:62:4e:f0:e9:fb:67:
a7:44:0d:0a:80:b3:ba:c8:a8:54:dc:59:11:e3:c2:
c7:61:95:fa:c2:e8:52:86:09:57:6b:0e:f5:bd:3e:
fc:52:fb:ad:11:5f:c5:05:77:eb:a4:16:a5:84:d9:
68:81:e4:97:ca:21:3b:98:ca:26:c0:a5:fe:f2:3f:
72:40:b3:a7:be:16:dc:34:1b:9a:10:7e:ee:17:3c:
f2:9b:9d:96:60:db:4c:47:98:ac:6c:46:4e:2e:a2:
2e:72:84:61:d4:03:de:ec:f8:38:04:30:b6:1a:71:
e9:3f:61:a3:b6:07:32:91:db:ac:1e:8d:87:76:4d:
37:4a:3c:e1:68:94:6b:cc:f5:98:87:00:41:3d:35:
85:cc:85:00:dd:7a:8a:ca:90:2a:5e:fe:0b:d3:a6:
b6:c5:3f:90:74:24:8e:2f:0b:2c:94:6c:a1:64:69:
78:a2:7d:a1:9d:8d:42:09:58:09:fd:8d:5c:f9:c3:
37:4f:80:26:17:c9:4a:82:cb:7a:29:f8:fc:ca:02:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:98:51:60:D6:C6:E5:3A:BC:85:CE:CC:1C:67:24:7E:5C:FF:59
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c4:8a:67:30:87:5c:6d:cd:0b:f4:98:18:d1:6a:93:55:69:
22:a9:79:20:d8:23:bc:ac:29:c2:a5:64:f0:2b:0f:85:af:39:
24:60:b6:44:e6:86:13:66:06:21:f5:b9:12:26:47:48:55:8f:
fb:df:34:4c:e3:52:9f:a3:a1:dc:b3:20:07:60:09:51:12:7f:
6b:46:20:0e:8c:14:4d:49:0b:09:4a:45:83:87:ad:9f:c7:ea:
d3:36:2b:c4:9d:58:a6:d1:e5:70:00:75:1a:5c:96:ae:89:a4:
92:24:1b:f4:ae:65:85:04:a3:36:1e:4a:1a:dd:1b:2c:a1:f5:
08:fe:52:a7:9c:54:03:c9:f7:93:8d:05:20:e7:0a:4f:f9:78:
d6:92:ff:e8:43:8a:00:00:3c:9c:5e:28:c2:6d:61:1a:36:63:
b5:31:25:3c:86:8e:53:94:10:15:b6:54:56:6c:e9:f9:3d:ce:
dd:ae:b5:98:41:ae:53:86:38:f7:f3:2e:c2:ed:d7:e1:3b:29:
a8:a0:35:d4:a8:c4:5a:11:b5:39:e1:d1:f9:79:76:b0:8d:a9:
32:0a:2b:4b:90:e7:56:30:6a:74:10:09:34:17:7c:36:0b:92:
b5:a9:3a:21:d1:dc:b0:3a:7a:ef:3a:15:1e:cb:b8:14:6d:07:
3c:6d:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:27 2025 by rpki-client