Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: Bv4EhJ6OZfTAJtqf/iih/dU/ydj4ohuVG7qvO1yr28M=
Subject key identifier: 3D:18:28:C6:5A:CD:97:EA:7A:F4:02:4E:4E:87:86:04:39:59:92:EB
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019847E4A8E0444B9F796A722C2512864359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 18:00:24 +0000
Manifest this update: Sat 26 Jul 2025 18:00:24 +0000
Manifest next update: Sun 27 Jul 2025 18:00:24 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: W0mdE73ZhPSNwQLXPUNhPtKskXHN8SkgAOlICdQLO7I=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:a8:e0:44:4b:9f:79:6a:72:2c:25:12:86:43:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jul 26 18:00:24 2025 GMT
Not After : Jul 27 18:00:24 2025 GMT
Subject: CN=3d1828c65acd97ea7af4024e4e878604395992eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:58:e0:56:3b:31:54:db:db:ca:38:5e:e6:
3e:5a:e8:7f:06:79:8a:c2:df:a0:7a:87:5b:d2:42:
b8:33:63:2a:44:b6:02:72:8f:06:79:5c:ea:2f:6c:
34:c2:40:aa:cd:48:ab:67:fc:c1:ef:eb:c4:2f:81:
d6:bb:0f:68:fd:86:c5:af:5a:64:27:5b:4c:6c:e7:
87:98:85:23:b5:31:50:80:07:73:74:21:b7:89:a0:
9e:1a:a2:04:c8:24:bb:6f:0f:23:af:77:28:67:c6:
29:9f:f5:09:e5:ef:1a:c2:1c:76:96:c2:3b:0c:5d:
1d:1c:d9:54:99:3f:1b:cb:94:94:96:24:f0:67:b7:
26:bf:dc:2d:a7:de:96:a5:72:3d:f7:78:ff:ca:1d:
b8:0f:4d:64:36:fe:49:5c:8f:8e:84:f5:6f:07:c8:
fa:a1:da:40:e6:81:69:3b:40:06:a7:1f:c2:e1:9a:
65:0f:72:a8:3d:b8:8c:72:82:f0:d1:7c:17:54:25:
4a:ea:30:14:9d:fe:49:b2:92:11:0e:48:ba:f9:06:
b4:59:65:a5:83:81:68:fb:3b:59:d2:28:b3:27:71:
38:27:c1:a8:0f:5f:79:d5:71:5e:23:53:b5:2e:48:
f7:d0:20:c4:47:fe:f0:6b:91:5e:4b:20:62:67:a3:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:28:C6:5A:CD:97:EA:7A:F4:02:4E:4E:87:86:04:39:59:92:EB
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a8:06:97:7c:3d:96:55:e1:99:ad:ae:09:c8:a1:44:b9:94:
75:9f:fe:45:27:a8:b3:92:af:2e:d5:1f:9f:d3:2e:35:84:37:
89:4e:27:67:90:e6:c5:da:52:af:e9:3a:03:52:94:15:c6:86:
d0:be:57:e8:f6:98:c1:21:45:a8:c4:87:e5:af:29:1f:3f:30:
c2:68:fd:e5:34:85:3d:78:1d:1f:53:cf:4c:03:7e:85:9c:2c:
75:6f:c2:eb:c6:23:d0:63:cf:91:34:96:57:54:21:9b:4e:cc:
a6:86:01:50:2a:b0:1b:da:ec:73:c8:2e:ff:1e:94:48:8d:7d:
23:a4:77:e7:44:a2:12:d3:3a:8a:65:82:e9:83:19:af:7a:9b:
98:e8:be:1f:dd:8a:73:6a:98:3c:f9:20:c7:45:40:32:df:4d:
96:0c:ce:89:7b:be:93:c5:fb:a5:9d:80:9a:a7:ec:4e:18:7d:
cb:60:2a:95:46:9c:a5:7b:29:f5:4e:70:4e:20:17:d4:b1:45:
ad:38:19:d0:87:33:a1:b0:4c:fc:a7:4a:42:58:7b:be:cd:43:
50:38:a1:34:12:9e:08:99:c7:a7:be:e7:a5:ac:18:8d:3b:45:
06:0a:d5:f9:76:35:b9:a0:a2:cc:4a:e6:00:e5:9c:de:e4:d2:
90:71:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:02:06 2025 by rpki-client