Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: 9MgwtF+u5yYYxK/AOnBgG44H02Cmp+b8F+iPF8Mi/E4=
Subject key identifier: 7D:32:25:CC:23:D3:FC:41:D8:E1:06:D9:4A:55:63:A3:BC:4B:27:86
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 0198534430F9D2930B82ADE4E2A11F868A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 09E3
Signing time: Mon 28 Jul 2025 23:00:34 +0000
Manifest this update: Mon 28 Jul 2025 23:00:34 +0000
Manifest next update: Tue 29 Jul 2025 23:00:34 +0000
Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: GAGJ6avY+sCtnW8B9ELeZ+deEc8lpRCjUvyIMU+68YE=)
2: T5kWJ0zgWJZajIuh22W4Yozr5Js.roa (hash: nOTln1QfZH/4DaY3ZoWPaEWuEELecZ3pWov8YJOX40U=)
3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:30:f9:d2:93:0b:82:ad:e4:e2:a1:1f:86:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Jul 28 23:00:34 2025 GMT
Not After : Jul 29 23:00:34 2025 GMT
Subject: CN=7d3225cc23d3fc41d8e106d94a5563a3bc4b2786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:2b:5c:51:22:8b:21:f4:d6:c5:76:46:ea:
a4:93:17:81:a0:43:f9:df:56:44:3a:6c:a5:6d:4e:
96:d1:d1:94:ee:60:88:e0:3e:34:68:7c:74:bf:60:
1f:8b:c6:61:c6:41:27:8d:27:d2:e8:a3:bf:85:ba:
2c:f6:fb:9a:64:94:cd:8e:96:0d:6d:76:65:a7:e6:
c0:36:9f:d9:2c:57:dc:4d:36:b2:5c:54:9d:16:57:
56:5a:c0:79:c1:a4:ba:4b:37:79:78:84:06:cc:f5:
7e:10:e2:e5:92:b4:dd:5d:3c:ff:88:cb:97:74:d9:
5f:75:0a:70:da:23:7b:21:39:4f:24:28:e1:8c:aa:
fc:27:d4:49:2a:e7:f6:3a:5f:2b:1e:e4:4a:84:1a:
bb:d5:60:4e:38:ac:1f:18:29:10:a2:01:4f:a9:0c:
19:5f:4d:ad:0c:4b:c2:f6:59:c5:3d:a0:7a:2a:82:
97:1b:26:2b:40:b4:34:de:ba:3a:60:df:b8:f9:95:
03:25:d0:57:b6:e4:c6:06:55:9b:6b:8e:f0:12:3b:
20:a6:78:86:a4:c6:de:e5:6a:27:ca:d6:f8:2e:0b:
bd:ec:fa:ae:fe:83:6d:a1:0e:d6:d2:95:5c:a6:bd:
41:fd:b3:7b:6b:93:f2:7d:67:f2:8d:7b:9f:69:b9:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:25:CC:23:D3:FC:41:D8:E1:06:D9:4A:55:63:A3:BC:4B:27:86
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:5f:88:df:ff:db:9b:bd:04:89:55:d1:6a:b1:f7:3c:cb:
e8:ec:82:2f:cd:80:be:d9:0b:bc:06:02:90:8e:8e:93:c2:bf:
e7:14:b6:35:5e:c0:54:3e:4f:33:46:a4:46:64:3d:23:46:ae:
db:8e:de:05:c4:65:fb:f5:e8:45:5b:40:d4:fb:1f:ec:46:b4:
a6:91:59:b5:bb:7e:92:1a:60:77:44:23:8f:ee:b6:40:c8:c1:
ff:2b:da:8e:6b:6c:62:32:16:e8:b0:65:c6:f7:dc:f0:20:21:
4d:89:15:cf:a2:7b:40:f3:b2:7d:26:e8:d7:e1:1a:3a:26:b8:
71:0b:c6:00:92:8a:98:a0:42:4c:42:69:a7:f0:8d:fe:9f:c5:
88:88:8c:3e:04:a5:17:32:89:22:37:4d:24:ab:fc:61:35:2e:
f9:01:af:82:81:45:e3:65:73:6c:73:18:d1:39:72:1d:08:dc:
69:5f:21:48:ed:39:3b:b2:f6:f7:bf:ce:d9:77:16:af:aa:17:
45:68:44:92:93:db:41:10:3b:d0:39:d3:43:82:43:8b:d7:40:
f6:c0:0b:a4:c2:90:eb:60:52:13:31:8d:bf:4a:34:bd:3c:e7:
37:b7:97:20:db:51:6b:c6:45:9b:ac:3d:d2:7e:fd:2a:14:23:
dd:d5:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:20:02 2025 by rpki-client