Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: r8SZpHEtnoDdlJBAclyUz+/dzhYdoJYGN5YhI7eAhKc=
Subject key identifier: D5:29:6D:CF:41:6A:54:28:1D:72:0D:7C:36:78:55:95:1C:94:A1:65
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01984B55405C44E20C212A186A95695B77A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0C35
Signing time: Sun 27 Jul 2025 10:02:14 +0000
Manifest this update: Sun 27 Jul 2025 10:02:14 +0000
Manifest next update: Mon 28 Jul 2025 10:02:14 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: fP759lTa6xUDfyCQT5cdPqa5FlvcWKZS/4Psw6pVRug=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:40:5c:44:e2:0c:21:2a:18:6a:95:69:5b:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Jul 27 10:02:14 2025 GMT
Not After : Jul 28 10:02:14 2025 GMT
Subject: CN=d5296dcf416a54281d720d7c367855951c94a165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:ea:99:63:bc:19:ce:54:72:15:9c:58:69:
42:f9:3e:b1:cc:64:81:a4:0e:8d:6a:83:03:8a:78:
93:30:86:48:70:be:75:5a:eb:91:e0:1d:ca:bc:c3:
81:86:73:a0:29:65:32:bf:ce:88:9b:da:e9:6f:97:
44:64:75:21:b6:d4:63:a1:df:5d:9f:11:bd:73:b9:
cd:3c:11:04:97:d2:0c:d1:1b:1f:9b:1a:94:e5:1e:
6a:e4:b6:a1:fa:02:9d:72:47:68:00:4a:93:05:71:
46:e5:3a:89:30:9f:9e:a1:96:55:dd:cf:53:b1:c0:
07:c2:a2:38:2e:8f:ee:98:df:b1:5d:7f:67:d8:86:
db:94:83:bf:3d:30:a6:df:ca:2e:49:b2:50:ae:2a:
6d:c4:d1:b3:9c:e9:bc:b0:52:8b:db:27:b2:25:cc:
66:f2:04:5c:27:31:27:fc:48:b5:a1:3a:9b:75:f2:
7e:96:93:54:d8:57:32:d9:6e:93:75:e8:4a:4a:04:
36:04:d8:b2:91:36:5a:fe:a5:11:3d:8c:ce:c6:0b:
f3:07:3a:0b:f3:c4:b8:0d:15:f4:be:73:6c:2f:4f:
18:4e:d3:ea:30:0f:be:c8:e5:90:26:b1:c6:06:1c:
10:d3:a3:0d:ec:b4:c8:1d:ed:3c:3c:df:b5:79:5b:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:6D:CF:41:6A:54:28:1D:72:0D:7C:36:78:55:95:1C:94:A1:65
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ed:e6:b3:3f:df:25:23:9f:eb:40:9f:f5:f6:a9:fe:5a:b2:
2c:95:61:67:fd:1b:78:e1:a4:c9:54:4f:7f:cc:42:64:f0:54:
c3:31:95:10:32:e4:6b:a6:dd:8b:c2:61:47:8e:d2:30:04:2c:
46:d1:97:1c:7d:ce:00:f9:6c:34:3b:8e:35:3c:35:d2:a2:f1:
5b:da:aa:30:7a:83:df:01:87:52:21:6c:58:3e:0c:73:a9:cb:
96:8e:76:df:01:4c:0e:c0:53:f9:dc:63:3a:57:35:92:b4:72:
53:f7:2b:e6:5f:39:77:43:f4:39:2a:b1:cb:bb:ce:4c:71:ad:
cf:1b:09:0b:04:a7:cb:10:d3:ad:12:d2:f5:a9:ec:59:e9:6c:
e8:76:fb:dd:4e:16:36:93:01:20:8a:3b:8b:09:ba:11:4f:ed:
6e:00:13:e8:f4:29:e2:cb:8c:ce:59:87:78:45:29:20:ac:18:
d9:4f:a2:04:86:ad:7e:ac:66:b7:2d:b9:95:8a:ab:e9:9f:5a:
96:e1:b6:df:c2:c7:ce:5b:70:95:87:77:99:a3:7e:49:c7:10:
17:6d:7c:35:ef:30:7d:27:fb:99:62:b5:bc:01:32:dd:4a:9d:
8e:ad:3a:9c:26:df:7e:fa:bf:f6:05:af:94:d6:d9:5f:ae:b8:
83:34:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:59:21 2025 by rpki-client