Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: Pxh6dMExo5D3xevlSZg5b2Zm/z1CmqDNFK7BYsgwkm8=
Subject key identifier: 33:23:B9:01:31:5F:6C:D1:75:3E:5A:B8:B4:BD:55:3F:95:70:A8:65
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 0198485281A17A6A7B80F10600010C756FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 045B
Signing time: Sat 26 Jul 2025 20:00:23 +0000
Manifest this update: Sat 26 Jul 2025 20:00:23 +0000
Manifest next update: Sun 27 Jul 2025 20:00:23 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: Xq6DK87q8a/W36zvO6U0vCM6qQromr4yrqWv42lCW54=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:81:a1:7a:6a:7b:80:f1:06:00:01:0c:75:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Jul 26 20:00:23 2025 GMT
Not After : Jul 27 20:00:23 2025 GMT
Subject: CN=3323b901315f6cd1753e5ab8b4bd553f9570a865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:70:ed:1a:99:fe:8f:53:44:fb:31:e4:e3:
4e:6c:44:10:ff:a6:8f:81:ca:81:35:28:25:66:53:
d0:cc:26:ed:8c:ce:01:00:11:9d:1c:41:10:c1:2b:
01:83:e8:0b:2b:e1:5c:7a:ef:8e:be:09:ae:40:9a:
c2:11:b2:1d:97:4d:e6:08:75:cd:81:ee:15:50:55:
0f:fa:3f:d0:ce:d3:20:46:56:a4:0e:d1:49:92:07:
d1:3c:fb:35:a8:93:a1:3e:44:a8:d1:08:13:c3:0e:
d5:a8:8f:69:82:c9:2b:66:3f:f3:3f:32:c0:fb:4f:
23:5b:90:7f:71:28:46:83:09:a6:b8:ba:b0:88:38:
84:ee:14:65:cb:ba:35:41:87:e7:b7:43:1e:8e:5a:
3e:86:01:df:7b:c0:6c:9e:ef:b6:51:ff:9b:aa:44:
6f:0f:28:ea:3c:d2:a2:bf:79:b0:9e:a6:96:5e:54:
28:d4:af:d3:1d:61:57:e6:8b:6c:51:70:b7:ec:07:
3d:6e:4c:87:cd:6d:73:48:81:8a:c0:08:d6:bc:66:
d6:66:0c:52:41:60:89:a7:61:f7:b9:6a:82:60:dc:
d2:a2:8c:fa:ae:57:f0:e9:10:de:b9:a2:f9:7c:8b:
f0:2d:73:fb:40:88:37:4f:87:e6:b4:06:b2:2b:6c:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:B9:01:31:5F:6C:D1:75:3E:5A:B8:B4:BD:55:3F:95:70:A8:65
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:62:60:75:2b:29:28:72:f9:87:a8:4f:83:62:54:0a:ce:b6:
b0:da:53:a8:8f:fa:3d:0b:64:80:80:27:69:ad:19:fe:de:87:
e2:4f:a0:23:45:68:d3:ab:b9:37:1a:28:94:c1:ec:47:f7:5b:
4f:b4:1b:25:50:98:34:28:fc:23:dd:8b:5e:69:a8:17:4c:df:
c3:b5:6b:2b:49:c9:5a:50:15:ab:ec:b9:22:6d:4a:1d:3d:63:
e6:b2:f1:68:27:b4:e8:6d:4a:77:0b:98:4c:93:c2:20:46:0d:
6c:de:1e:42:9f:34:d9:8e:5d:d8:9a:3b:bf:8c:0a:e5:f5:69:
4e:d1:5c:37:bd:e9:be:c2:d0:c3:1b:d5:40:c1:0f:76:07:f3:
00:29:dd:a2:c0:b9:f8:74:f6:b3:35:fa:6b:dc:27:52:12:20:
08:a4:a9:13:1a:b5:1c:8e:40:1a:fb:58:57:c5:ab:fc:fe:bb:
7e:b8:8d:8c:34:91:d5:b4:a9:4d:40:72:a1:5d:aa:c2:b1:db:
8f:4a:3b:ad:01:79:3c:7f:e7:e9:54:df:36:9a:30:1c:51:b9:
2c:b6:5a:4b:fa:e1:1e:36:2f:e3:5a:0b:81:cd:17:1d:0b:48:
93:0b:bd:d0:f2:36:5b:7d:cc:9e:3e:7e:ee:f3:e5:10:c5:8e:
06:ce:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:23:18 2025 by rpki-client