Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: BVRz6EA5T5aqeeaQInx5BVfFg9q0pFAZW7SiveF3TFU=
Subject key identifier: C6:48:F8:F5:10:38:52:9C:97:E2:48:AB:78:F0:30:43:DF:46:B1:C3
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 0198548DD078BEB5F11675B30FA7DB33C8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 05:00:36 +0000
Manifest this update: Tue 29 Jul 2025 05:00:36 +0000
Manifest next update: Wed 30 Jul 2025 05:00:36 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: MNj4Ohze/yQjGkWoshQuw37hcJ7OurJ+Z8Tn9YtR5P4=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:d0:78:be:b5:f1:16:75:b3:0f:a7:db:33:c8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Jul 29 05:00:36 2025 GMT
Not After : Jul 30 05:00:36 2025 GMT
Subject: CN=c648f8f51038529c97e248ab78f03043df46b1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:8c:2c:49:33:db:d7:03:b6:9f:fa:c1:89:
82:d4:cb:ee:2f:6e:51:2b:81:d5:04:d8:8c:c1:c3:
3b:78:9a:ec:5f:59:16:11:9d:bb:a8:f9:a5:bc:dd:
69:03:44:1d:7e:d8:f3:4a:b8:9b:f4:fc:46:50:85:
87:c9:b9:d5:69:cc:ea:7c:10:bf:d9:79:f4:b9:8e:
b8:cb:bb:e7:cb:dd:39:44:3d:bc:1b:08:a9:7d:ea:
22:da:38:0e:95:63:78:64:e5:e5:a7:7c:9d:34:7b:
5b:61:68:47:bc:0b:ae:8b:d6:89:f5:86:36:f9:e8:
3c:95:0e:47:6d:96:1f:3f:13:5b:6b:aa:bb:28:59:
27:9a:cd:bb:de:34:18:ac:1a:41:c2:e1:74:64:eb:
cf:66:2c:b0:85:06:09:f7:08:19:bb:d1:de:9f:33:
dd:97:5a:32:df:9a:5a:0d:b6:59:f9:4b:99:fc:d6:
ce:4c:9e:4d:76:8c:58:d9:c6:7e:dc:de:ea:57:7a:
4b:d8:02:ed:e0:fe:12:8b:2f:ae:78:73:9e:ba:01:
ae:e5:8c:65:4a:44:62:68:5c:b4:81:ae:c1:20:ee:
c0:55:07:4f:18:dc:f0:fd:0a:a1:a5:36:20:08:ac:
8f:b7:a9:bc:57:b3:a8:8a:fc:04:ba:7d:dc:1c:81:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:F8:F5:10:38:52:9C:97:E2:48:AB:78:F0:30:43:DF:46:B1:C3
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2e:43:8c:92:28:5a:8c:9d:5a:27:77:62:fe:89:71:86:8d:
77:2e:f0:fb:51:f5:cc:07:ec:c2:6f:25:17:23:51:5d:e7:88:
89:b9:c3:7e:26:f8:db:4d:50:4a:9d:83:f1:39:ca:36:27:fe:
bb:a5:0d:a7:89:2a:a2:3d:f2:55:65:b9:a0:09:da:b6:89:4c:
35:8f:9d:5e:19:6b:7a:d3:e2:28:16:92:82:f1:87:0c:70:79:
5b:79:bc:79:47:dc:e9:3e:66:9b:a3:a5:01:ae:ac:f4:fd:f7:
49:c0:32:1d:5c:72:f5:6e:bd:1c:63:3d:2d:a2:97:7a:62:94:
e5:18:12:a3:eb:ae:3c:20:2f:42:fc:f3:a9:95:f9:59:b8:4f:
71:dd:9f:9e:1b:12:c5:61:f7:fc:b7:df:d0:9f:d5:27:f2:33:
1e:19:53:74:03:a3:ab:54:00:ab:45:0c:4c:ca:90:65:ed:96:
40:f4:af:68:19:f9:24:0b:9b:99:7d:cc:35:f0:c1:30:a7:f9:
b0:a9:df:1f:cc:ba:2b:81:36:2b:48:68:b6:2b:99:d4:b6:a6:
c2:13:60:19:18:04:b3:51:ac:f0:f8:9e:45:e9:e5:a3:41:f2:
08:26:a0:ec:07:d7:81:86:01:cb:08:12:ff:d7:46:fc:81:58:
30:e0:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:24 2025 by rpki-client