Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: YN86jcJxKe+ps9uZLyX5/P5uLLeqZFEnXq3rPae0SUg=
Subject key identifier: 4B:CF:D2:F6:17:5A:55:71:33:A6:68:F8:EC:56:0D:D8:B5:5E:02:05
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 0198451A5DE13E9DD3511025FB2E259FB586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 05:00:12 +0000
Manifest this update: Sat 26 Jul 2025 05:00:12 +0000
Manifest next update: Sun 27 Jul 2025 05:00:12 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=)
3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: liG6CSVmVQwDxK2nloYTHOesEDeVBF5vfeh9BoVw3WU=)
6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:5d:e1:3e:9d:d3:51:10:25:fb:2e:25:9f:b5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jul 26 05:00:12 2025 GMT
Not After : Jul 27 05:00:12 2025 GMT
Subject: CN=4bcfd2f6175a557133a668f8ec560dd8b55e0205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:22:f2:f7:b0:cd:63:bf:7b:42:b8:36:74:
1a:d3:a5:16:43:a3:ae:23:9a:c1:0a:63:8a:8e:08:
51:2c:b5:d6:02:fa:af:7c:6f:51:ef:dd:6a:90:24:
d9:2e:2d:2d:fb:78:61:ae:95:aa:12:0c:ef:82:71:
9b:88:50:d4:2e:7d:20:7e:de:68:9d:ed:c7:6d:36:
1d:9a:52:92:7d:16:a9:ca:e0:68:d7:d8:9e:f2:35:
60:74:ab:6e:d6:c9:40:77:ab:a9:45:57:7e:de:bb:
2a:1b:b8:56:c0:da:f8:99:45:6d:f5:d4:ed:17:3b:
8d:65:1f:28:5e:ea:50:8f:02:7c:59:49:32:a1:85:
36:2b:15:ce:d9:eb:bc:a0:5d:6d:e8:2a:d8:7f:7d:
1c:85:92:a4:f5:cf:f6:f4:bd:a8:7e:da:be:8e:db:
93:5a:99:d9:a5:a1:83:d5:fa:f3:01:89:3f:67:5c:
c2:1e:9d:af:1c:49:06:90:5d:e8:7e:33:59:41:bf:
10:10:aa:87:17:1f:d8:46:79:c0:96:6a:b2:28:b6:
35:72:0d:cc:0c:68:c8:55:51:b7:66:b5:cf:6a:13:
85:c9:6c:67:1c:db:1c:52:89:79:f9:4b:9c:e7:dd:
58:74:5d:e9:7a:cf:5d:ea:a8:66:9f:da:d2:67:dc:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:D2:F6:17:5A:55:71:33:A6:68:F8:EC:56:0D:D8:B5:5E:02:05
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c3:62:a7:40:4a:e5:fa:7e:40:3d:40:43:51:26:8a:b4:52:
ca:5e:0f:3c:83:aa:f2:e0:12:0d:8c:2a:ac:c6:d6:c2:a4:df:
5f:9a:00:65:15:08:c0:23:16:3c:37:a7:59:be:1a:c8:23:16:
1e:b7:e6:c2:12:b2:10:e9:bd:38:74:85:96:ad:0f:95:03:9a:
1c:52:81:f3:1d:f9:c7:ae:05:f8:ef:90:8a:9d:e5:28:27:31:
5e:d0:d4:00:9a:12:a2:32:e1:1d:4a:7f:89:54:65:78:f8:c0:
56:30:45:47:0c:40:43:a0:1c:2c:19:b9:5b:1d:31:d0:b8:2d:
18:fc:33:30:53:c3:1b:58:14:72:b9:90:85:eb:a3:c6:d9:4d:
e0:58:1a:2d:5f:d3:bb:78:e3:9d:2b:eb:5f:bb:8c:87:1e:97:
ec:fb:77:34:1b:cf:86:85:d8:7d:e8:e2:38:aa:70:30:a1:02:
67:ba:a2:a1:6f:53:d2:a9:7c:de:2d:06:20:a4:fe:2d:c3:02:
b9:09:50:ee:70:1f:c0:1a:7e:a5:2b:ad:c9:02:4e:c8:0d:f2:
6b:98:bc:dc:93:51:60:a7:85:3b:fe:14:dc:af:67:7e:ee:1a:
c0:28:6c:90:48:3b:84:75:b8:12:31:97:3e:2b:6b:4a:f0:5c:
59:bf:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:36:30 2025 by rpki-client