Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: RGt59VFkYU3xbVRDUE5//0c40+x6X78JyxTj9zkhN1U=
Subject key identifier: 35:71:71:34:0C:EF:54:99:50:1C:EE:A3:AD:BD:CA:A9:79:32:2C:2C
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 01992331606C4D0EAC1E32F93DEAC3AA0D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 0618
Signing time: Sun 07 Sep 2025 08:01:02 +0000
Manifest this update: Sun 07 Sep 2025 08:01:02 +0000
Manifest next update: Mon 08 Sep 2025 08:01:02 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: +uv1Wp94QuRkPS1yhtclRiQ9qsvVQhiGV1jjaw2PwO4=)
2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:60:6c:4d:0e:ac:1e:32:f9:3d:ea:c3:aa:0d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Sep 7 08:01:02 2025 GMT
Not After : Sep 8 08:01:02 2025 GMT
Subject: CN=357171340cef5499501ceea3adbdcaa979322c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:ed:ef:54:10:33:71:38:09:b8:1e:ec:ff:
e3:7b:7f:f0:29:c2:b4:2e:f1:5f:3c:f6:b5:68:34:
39:fc:71:7d:ee:ad:bb:4a:94:be:f1:54:39:85:08:
b8:06:ab:32:22:20:d4:6e:b9:c0:ff:1e:3e:74:95:
7d:03:57:1e:a5:4b:91:33:86:a0:89:b7:18:57:86:
d7:ff:c2:eb:f7:6d:ec:8e:75:52:04:f7:db:b8:2d:
9e:ee:a0:d0:a8:f8:13:b2:ef:a1:90:d8:8d:57:29:
5f:50:dd:1e:95:ce:05:21:77:a0:32:3f:ac:39:0a:
c3:ca:7c:6b:f8:a4:f4:37:c7:5a:65:ce:c7:56:9c:
9c:43:95:c7:03:fa:28:8d:f2:ce:66:d0:17:1a:97:
2e:89:d6:22:3e:fe:86:ee:14:83:04:22:a3:e7:17:
ac:7f:46:cd:af:20:30:c3:9a:fb:db:0a:28:d6:88:
d9:de:e8:36:ac:97:95:a3:83:7a:29:6c:07:ec:f7:
d4:e8:03:6b:8a:73:97:37:93:ec:69:e3:74:23:08:
39:4d:ea:91:b2:93:e8:55:dc:48:a1:28:4e:af:ae:
b2:f5:b6:b9:39:6d:79:63:e7:b1:df:08:8f:21:b1:
89:10:ff:c2:23:fc:38:dc:3f:07:ce:28:8d:49:dd:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:71:71:34:0C:EF:54:99:50:1C:EE:A3:AD:BD:CA:A9:79:32:2C:2C
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c3:e7:5c:fb:8b:d4:a9:22:05:73:50:40:76:48:67:5d:7f:
e5:85:41:60:35:ca:80:af:73:ad:4d:99:7c:21:78:3b:b0:8b:
6a:2d:49:cc:74:d3:77:26:a9:87:99:72:7a:18:ef:5c:c5:88:
a8:bb:a6:8e:25:f7:96:2c:52:e1:2b:62:ed:47:41:71:b1:6c:
56:13:3f:b2:bd:7f:4e:42:97:c8:10:0b:cd:db:2a:86:d3:56:
53:7a:d6:72:c1:7b:da:23:7a:9d:f9:91:38:7a:37:0f:8f:e2:
42:83:01:16:c2:42:47:9f:ef:5a:91:2d:20:c9:46:e3:59:4d:
9c:3e:bb:6d:9e:8e:46:1c:4b:27:03:ee:f9:a4:e1:33:75:e4:
01:23:e4:04:e2:02:47:8c:75:cb:d4:e9:cc:8c:b6:7e:2c:4c:
e6:99:36:4b:47:85:c6:2b:0e:0e:b8:45:cd:11:44:3e:e8:6b:
50:a2:17:6c:32:d3:76:51:52:9d:f4:f3:61:d0:6e:cc:59:50:
c5:e5:ff:79:39:b9:19:d1:05:99:07:7b:77:e5:37:00:ad:8c:
14:79:04:71:e7:53:61:9c:4c:47:01:d6:76:e4:29:21:b0:91:
7e:80:1f:e0:c7:c5:79:c1:db:66:41:f6:07:1c:3b:55:04:eb:
92:ed:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:38 2025 by rpki-client