Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
File: NQtAztNuMfkF4abo4DxiHp-_yyk.mft (raw, json)
Hash identifier: jkk7ihQQbpGFbZ6xLSp/DArMsb/CsEtNLHkxscBEJoM=
Subject key identifier: D9:82:03:A6:86:F2:9E:49:50:D6:A5:D3:59:BA:AC:77:D1:93:18:73
Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
Certificate issuer: /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Certificate serial: 0198458858B7398914591545F73E8B7DD839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
Manifest number: 133C
Signing time: Sat 26 Jul 2025 07:00:20 +0000
Manifest this update: Sat 26 Jul 2025 07:00:20 +0000
Manifest next update: Sun 27 Jul 2025 07:00:20 +0000
Files and hashes: 1: NQtAztNuMfkF4abo4DxiHp-_yyk.crl (hash: /1UblZzO59QmjN/BnUdUu656B27B0PZ6+9Yj9205QgE=)
2: u7-gL9wSp2bGW7DIF24NVuhmOKc.roa (hash: tP75Wdne3vqUbGN0hrtXpkGNXdZlPHZwjnI3xiXFlak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:58:b7:39:89:14:59:15:45:f7:3e:8b:7d:d8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Validity
Not Before: Jul 26 07:00:20 2025 GMT
Not After : Jul 27 07:00:20 2025 GMT
Subject: CN=d98203a686f29e4950d6a5d359baac77d1931873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:aa:06:ca:51:b5:06:94:cd:81:2f:32:fb:
98:89:5b:a5:fa:54:0f:25:02:df:d4:16:20:45:d1:
90:52:4d:7f:75:c9:51:7d:cc:c4:84:10:67:d7:ad:
8c:20:b1:03:d9:c8:5b:10:c4:49:bb:73:0d:8f:32:
83:0e:8d:e2:75:2d:ad:16:6e:19:eb:49:86:5e:21:
d4:ef:e0:ea:28:55:4e:a9:15:dd:58:99:4d:c8:11:
63:00:e6:c7:b3:d2:e1:49:8e:05:61:4c:44:16:24:
04:e1:bb:1e:9e:a9:a2:04:6a:ed:74:5c:aa:8b:8c:
de:94:9a:0f:3e:74:79:aa:e8:1f:5a:df:60:f1:27:
9c:af:bc:e7:67:6b:2c:7e:4b:a9:05:ee:7f:ed:b8:
95:4a:57:1f:a3:f2:f9:0a:58:4d:36:d6:8c:98:ba:
a0:96:5d:2b:f3:ec:52:b3:5f:4d:71:91:38:5a:b9:
07:3d:b8:1f:dc:9d:13:e3:63:fe:59:cb:b5:5b:51:
bc:cf:92:62:43:0e:d1:ae:df:79:24:36:18:21:48:
d4:b8:3a:f2:ca:e7:15:80:ce:7e:2b:99:47:81:7e:
a5:45:f1:b8:f9:d9:ad:f0:68:c1:32:0e:b3:9a:d1:
fe:4b:36:14:ae:77:c5:ac:a2:09:0d:66:4f:b2:e1:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:82:03:A6:86:F2:9E:49:50:D6:A5:D3:59:BA:AC:77:D1:93:18:73
X509v3 Authority Key Identifier:
keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a0:6a:0a:db:2d:9d:5d:65:f3:b0:92:b7:03:72:8b:1d:5f:
0e:64:96:09:7d:df:0a:df:7c:50:e9:e7:7c:37:e0:36:8b:42:
58:a5:a3:8b:ab:e4:8d:5d:28:37:12:dd:dd:c9:17:a4:7d:84:
00:61:3d:e6:71:aa:17:e3:a9:c3:8c:19:63:1c:2f:f9:82:5b:
be:31:34:d7:df:db:5a:02:fd:c5:80:09:04:db:bc:9d:1b:7b:
e5:5e:a1:59:a2:5d:39:96:87:6d:73:a8:25:9f:c4:5e:b2:6f:
0c:e3:4c:57:13:22:bf:44:d3:ba:ce:a8:bc:31:49:06:a4:c0:
52:76:c9:ca:c7:2a:ef:4f:32:f8:26:51:c5:b8:2b:f6:12:c6:
1a:4e:6c:13:c8:1d:6f:0e:f3:8d:29:71:f3:6a:31:b4:d0:1b:
9c:d9:6b:cc:9d:21:c2:0f:0d:e0:82:b3:1d:a9:9b:91:63:a9:
34:f0:bc:5e:e0:b8:f6:14:70:e9:92:9e:db:29:6b:b2:27:9d:
ef:0b:68:ce:50:45:51:c8:dd:d7:57:a0:5f:26:71:ad:ec:a1:
6f:2a:26:ae:32:45:53:87:88:c3:a7:7c:92:70:95:4f:53:44:
99:b5:4b:5f:1d:81:70:a2:fd:ce:e7:83:bf:a6:c7:1e:15:0a:
d6:56:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:21 2025 by rpki-client