Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: QI9hA/Y63BqFj1Gz9s3f8DPLBJVBLGAgIoIMgp6Cpsc=
Subject key identifier: 02:18:57:5E:62:1F:E3:BA:84:F3:3E:C7:B9:DA:2E:E8:D5:9C:DA:6C
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 01991808AEAED05BC7181797F52A487F7283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 09B3
Signing time: Fri 05 Sep 2025 04:00:45 +0000
Manifest this update: Fri 05 Sep 2025 04:00:45 +0000
Manifest next update: Sat 06 Sep 2025 04:00:45 +0000
Files and hashes: 1: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=)
2: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: V4zuSQ8pLUhtptjggAcRkIfALZohteZwIZxatFnUVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:ae:ae:d0:5b:c7:18:17:97:f5:2a:48:7f:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Sep 5 04:00:45 2025 GMT
Not After : Sep 6 04:00:45 2025 GMT
Subject: CN=0218575e621fe3ba84f33ec7b9da2ee8d59cda6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:a5:0e:29:1c:9b:38:75:3e:0b:7e:dd:7c:
78:7d:05:32:d9:a8:73:52:2c:e8:f9:5d:16:db:7d:
b6:8a:76:1e:69:71:94:f0:89:c1:61:94:47:6e:b9:
be:b5:30:00:1c:68:a2:44:d4:10:02:f8:a3:47:e0:
d3:e8:e1:4d:6a:37:1f:16:76:02:eb:30:74:cb:4f:
76:bb:11:58:be:79:52:23:74:29:7a:05:21:80:8d:
e1:a1:fb:e8:17:5b:a2:47:f7:5b:96:52:84:ae:30:
48:db:fb:8e:eb:22:26:74:60:d4:bb:f2:b4:85:55:
e5:68:d6:8b:bb:ae:d0:85:b2:33:3c:03:bd:05:e5:
c8:32:62:d6:d9:8d:a9:3f:98:1e:24:60:cb:d5:cc:
67:c9:07:05:10:4a:bd:2c:11:f4:2f:51:d2:07:b2:
30:eb:09:7b:9f:d4:f1:c5:c4:ac:8c:a9:cf:e8:28:
56:ec:24:48:8a:10:9c:c2:08:63:64:a4:c2:e1:8b:
44:28:c0:00:f0:8f:c5:05:ea:fd:4c:4b:20:46:ff:
c3:d8:23:16:88:ac:7e:7f:93:76:45:c4:4c:3b:3b:
21:ab:3f:1c:ff:1f:d4:b1:ab:82:f1:3b:a1:b1:f6:
43:fa:26:fa:17:45:68:b2:7c:4e:17:76:b7:dd:9e:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:18:57:5E:62:1F:E3:BA:84:F3:3E:C7:B9:DA:2E:E8:D5:9C:DA:6C
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:71:9c:03:46:bd:62:45:11:fd:26:a0:89:29:9f:4b:46:0a:
f8:a4:e6:ae:06:a7:fb:65:4b:8d:fb:0b:d6:97:2f:3d:15:a3:
2c:14:ba:a1:6d:12:07:f1:9d:bb:f5:13:7e:0e:22:cd:b9:7f:
ef:7f:7a:01:1c:ef:52:0d:8b:89:94:f1:7a:5a:34:01:6a:52:
85:84:b1:91:e3:21:86:bc:14:29:9c:7e:a4:d4:83:6c:c1:cd:
2c:7a:dd:fa:b8:43:3f:0d:c5:3f:ae:a1:0c:3c:7b:d1:c9:b7:
40:13:21:cf:0b:43:69:f1:d3:c7:e4:b5:8d:cb:b2:27:e9:f8:
70:a9:00:b0:25:b6:4d:aa:0b:0a:d8:05:92:21:99:b1:c0:c7:
cf:cb:17:48:e1:a2:4e:49:8f:5c:bd:fb:8f:51:15:a2:76:9e:
55:68:52:eb:47:61:6a:fe:11:39:7a:28:c2:5f:58:7d:22:15:
93:76:c0:89:74:33:5b:45:9f:1c:41:7e:03:5a:91:85:88:98:
f2:a0:03:e5:6a:aa:33:fc:d8:4a:b6:7a:eb:14:f0:44:19:18:
9f:e4:23:32:56:f5:93:d8:61:73:d6:94:48:46:c5:af:f8:c2:
ab:83:96:64:06:de:ee:80:32:f6:01:d8:bc:5d:70:4d:0c:56:
18:96:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:08:59 2025 by rpki-client