Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: cB1iyRwNwP72MCgMIErTIljpqzDvn1/6jJV+G2WOOlE=
Subject key identifier: E6:0E:1D:C9:EE:0E:F2:99:B9:D8:3A:8E:D9:E4:88:1E:E8:4B:65:27
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 019922FAEA924D256239EBEB8291754E7D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:33 +0000
Manifest this update: Sun 07 Sep 2025 07:01:33 +0000
Manifest next update: Mon 08 Sep 2025 07:01:33 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: +RQIdnElxGaepoGMuIfB2Nsr1QjOq1fII3zuYaAs1j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ea:92:4d:25:62:39:eb:eb:82:91:75:4e:7d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Sep 7 07:01:33 2025 GMT
Not After : Sep 8 07:01:33 2025 GMT
Subject: CN=e60e1dc9ee0ef299b9d83a8ed9e4881ee84b6527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:ed:c2:e8:ad:98:67:e7:4a:09:e7:d9:04:
2f:ec:25:6d:90:20:53:0e:64:ea:40:a4:36:3b:82:
44:ea:3b:e5:2b:6f:26:60:7b:db:f1:3b:c4:37:27:
bb:eb:b3:79:79:7c:ec:5c:05:bf:f8:42:aa:46:27:
ba:e4:4f:6b:1f:45:af:d4:3c:24:52:57:80:a2:46:
3b:c3:cf:e8:13:c9:84:46:d0:a4:cf:24:91:e2:d0:
42:ef:cc:e7:12:b9:b2:65:09:a9:dd:e9:6b:92:87:
b0:5b:f1:18:7f:81:62:83:8e:b2:98:67:c7:0d:28:
1a:92:b0:91:6f:c0:e8:74:b1:61:d8:27:c9:b2:de:
9c:55:4a:9e:25:cf:b5:09:73:f2:0d:35:af:e3:df:
ae:e5:9a:f9:d8:8f:0d:1f:05:66:a3:cd:9c:4e:5f:
00:39:c1:2e:a2:27:8e:37:3b:0c:c9:df:3f:1a:0f:
40:6a:f9:72:8b:e6:1f:95:d9:91:a0:20:4b:26:dc:
79:9d:60:5f:91:5f:40:b5:5d:fe:73:98:65:b5:9f:
d3:00:f8:ae:c5:41:66:ff:02:c8:fb:b8:71:9f:96:
cd:2a:37:e9:91:26:70:33:28:23:0f:5b:95:2b:54:
7b:cf:c1:3d:90:cb:48:09:66:99:db:31:dd:41:e5:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:1D:C9:EE:0E:F2:99:B9:D8:3A:8E:D9:E4:88:1E:E8:4B:65:27
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c1:fd:3d:aa:3d:26:1f:0b:10:7d:f2:15:77:48:35:0b:59:
0b:d4:1c:06:6c:88:ea:10:21:e3:8c:a7:8a:05:60:a3:67:bf:
81:da:f3:f7:e5:8e:72:8c:46:a4:e4:72:12:1e:85:8b:de:8d:
05:83:35:f6:44:5c:06:cf:b3:c3:a8:bd:6a:09:31:27:87:1a:
a5:9b:a5:8a:7f:f7:be:13:ee:94:21:4d:f4:80:63:04:eb:f0:
56:59:3a:fe:73:83:5f:08:7a:03:85:6d:09:f0:01:43:ff:59:
b7:45:04:00:fa:50:ce:37:84:7d:3c:77:f5:26:50:a7:f4:3d:
54:b0:e8:0f:cf:92:b3:e7:84:4c:ef:9f:13:02:0b:7f:2b:66:
6b:c2:8b:75:f1:5e:2f:68:48:70:7f:94:60:02:6f:2a:63:5a:
31:b0:e1:45:eb:5e:27:59:b2:be:68:67:a4:6f:2e:d3:c9:ab:
ac:06:38:f1:75:62:2c:ac:b8:d2:e6:91:e0:2c:4f:f6:21:13:
26:39:01:ef:ee:68:a6:69:81:ca:e4:ec:ae:a2:09:63:8b:b7:
8a:fe:b1:f1:63:e2:69:08:dd:ce:75:eb:4c:3b:98:ae:8b:20:
6c:21:e5:81:90:8c:e0:ea:3b:4c:9a:ee:be:dd:09:47:63:fe:
7a:6a:d4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:28 2025 by rpki-client