Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: RHuUpaeP6z57uOMyFQGYeV4U9ZmfaPbdGVERRuH9IqI=
Subject key identifier: D5:D4:F1:6E:77:91:67:FE:13:35:CB:3A:CC:C2:F3:32:3A:FA:FA:53
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 01984777015F7D26D8C55D32826A802DA86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 0BE5
Signing time: Sat 26 Jul 2025 16:00:38 +0000
Manifest this update: Sat 26 Jul 2025 16:00:38 +0000
Manifest next update: Sun 27 Jul 2025 16:00:38 +0000
Files and hashes: 1: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: HJwsDXdrwEyCcVuT7/51C6396iF1G53Ip+eCnAi98fU=)
2: ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa (hash: BaCHQlpNW/709AUvEnmAV++DQu/RFZCpGAAySqc5kGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:01:5f:7d:26:d8:c5:5d:32:82:6a:80:2d:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Jul 26 16:00:38 2025 GMT
Not After : Jul 27 16:00:38 2025 GMT
Subject: CN=d5d4f16e779167fe1335cb3accc2f3323afafa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:30:71:83:97:44:67:73:d0:e9:92:0e:cf:
12:a3:29:2e:39:93:13:a6:2b:6a:99:c2:ce:88:3e:
11:76:72:06:59:86:c9:44:21:2f:17:8e:8a:1f:4a:
2b:59:7d:0a:11:7b:4c:4e:37:a8:b1:3e:f5:ec:24:
c9:1d:8c:58:45:28:a7:f1:f4:97:df:d1:e5:fc:00:
5c:90:5c:4f:c7:c1:ae:f3:24:4d:0d:f4:38:86:af:
5f:e2:ef:f7:12:93:b0:30:c1:e7:61:d6:c3:c4:21:
55:4c:bd:b8:98:40:d4:7a:7a:95:8f:06:a7:16:1b:
33:bb:66:4f:42:93:61:00:c6:98:ae:d5:56:d2:1a:
43:97:7b:6d:a9:b7:63:49:25:53:e5:90:6e:ad:47:
65:a7:1d:7a:a2:03:d3:f9:aa:39:96:8a:80:e1:8e:
1a:f5:b3:6f:ac:80:a1:c5:83:c4:ba:f7:5f:50:4a:
1c:62:d6:e1:0a:d9:7b:39:90:b1:22:79:23:78:17:
67:51:fa:b4:12:d9:95:6b:da:9c:ed:78:1a:3a:93:
73:da:8e:6d:da:12:81:63:e6:a1:69:c0:c4:39:85:
4b:1c:28:39:87:d5:15:64:c1:95:4e:9f:fc:bf:47:
ad:77:14:b0:c3:0c:0f:53:26:ac:7f:e5:36:4f:ba:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D4:F1:6E:77:91:67:FE:13:35:CB:3A:CC:C2:F3:32:3A:FA:FA:53
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:03:c0:2e:b1:74:03:d8:09:6b:a3:2f:87:53:96:62:86:f2:
e3:6b:5c:29:6a:c4:e2:4b:4d:33:71:7b:52:3d:e9:17:87:c8:
df:16:91:9c:b5:e7:50:51:b5:15:78:d3:0c:91:94:3d:96:49:
21:01:1b:f8:d9:fa:8b:69:27:85:e4:03:81:80:bb:50:d4:d9:
76:fb:98:73:b5:ed:3c:39:5d:ef:7d:ef:91:18:9f:88:83:bd:
7d:d8:5f:6c:aa:de:72:a5:da:92:17:71:87:ff:52:9f:6f:71:
ce:35:cf:53:50:0f:b0:4b:ae:62:dd:01:5e:4d:a4:05:2b:a5:
5a:d5:34:11:6c:3b:f6:ec:ca:d4:3b:5b:74:66:91:1a:c6:5a:
bc:3d:ba:d3:4b:c3:c3:47:fa:04:03:37:2c:26:18:ab:e4:b4:
b9:58:39:83:b4:d5:16:70:59:25:b5:d6:95:0c:d2:ea:ae:59:
9b:03:0f:80:91:c9:b7:ad:6a:03:c5:fc:ed:46:84:58:11:95:
bc:9b:ed:d3:2d:a3:c2:9e:90:f5:10:26:9d:ca:6e:62:c6:32:
75:73:cd:81:a2:e2:ab:bb:e8:a2:7f:76:a5:dd:3c:f4:c2:f8:
85:68:04:52:ea:77:3b:02:a0:63:b0:7a:bf:11:30:b5:c2:d9:
19:e8:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:08:29 2025 by rpki-client