Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
File: NYx3zUAYPEEVsr8NznFuC8XQv9U.mft (raw, json)
Hash identifier: O5Ms/2poVG+buq772ex0LKwSNvn+8UXRt6tgnUElDlU=
Subject key identifier: 7B:1A:C8:FC:A6:18:D5:B3:D5:1B:34:CF:57:4B:04:05:69:24:1B:BF
Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
Certificate issuer: /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Certificate serial: 0199172CECBBAC853331A6D154E621B99CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
Manifest number: 03D6
Signing time: Fri 05 Sep 2025 00:00:44 +0000
Manifest this update: Fri 05 Sep 2025 00:00:44 +0000
Manifest next update: Sat 06 Sep 2025 00:00:44 +0000
Files and hashes: 1: NYx3zUAYPEEVsr8NznFuC8XQv9U.crl (hash: 3JnpGwadkbtZiBIb5Ymr2zK2hejyM8aMeIt7GDF4THM=)
2: zdd_itkr61DwlSbiF7xORGma-Mg.roa (hash: s7+y8n33Kdf5OFXebrrUAhH6tASSitV8ofo7STn/T1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:ec:bb:ac:85:33:31:a6:d1:54:e6:21:b9:9c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Validity
Not Before: Sep 5 00:00:44 2025 GMT
Not After : Sep 6 00:00:44 2025 GMT
Subject: CN=7b1ac8fca618d5b3d51b34cf574b040569241bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:9b:9b:52:94:6a:cd:d5:eb:36:3a:e1:d2:
a6:9d:bf:f5:63:bb:3c:e8:cd:41:28:36:76:e6:2b:
27:1d:1a:ad:32:3f:fd:00:73:3e:9d:b2:e2:7b:0b:
99:b3:6c:b1:3c:a4:5a:cc:1f:4a:83:b8:ef:6f:31:
b8:40:90:62:c5:26:b2:6c:13:91:31:ec:87:be:ae:
c5:ba:25:ec:65:49:55:11:c4:b9:fa:27:5a:f1:dc:
8c:ed:8e:ae:b8:3c:bb:16:e5:27:fa:7b:94:81:02:
cf:09:68:76:77:96:ee:27:de:29:40:ae:11:49:47:
06:bc:8d:1b:a9:0e:d2:4b:b4:99:4a:a4:27:b6:89:
ae:95:63:97:7e:94:3f:f4:78:6c:af:f1:02:2e:3a:
1f:0e:7b:e5:92:b4:a8:9c:84:d4:17:eb:32:06:35:
7c:98:ad:5c:6d:75:dc:cc:b5:d5:dd:ec:f8:ce:dc:
8e:d5:cf:9d:0e:b9:44:e4:77:93:49:85:6d:47:52:
98:2b:35:08:60:92:89:a8:c5:4d:a2:b5:48:d2:06:
82:77:f2:7e:3f:97:eb:a2:2c:5d:b3:ce:7a:05:ab:
3b:07:2d:1c:10:bf:64:53:b6:75:a1:1d:02:77:40:
ef:2d:e2:12:0b:c7:dc:d5:03:b5:46:76:b0:bd:5a:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:C8:FC:A6:18:D5:B3:D5:1B:34:CF:57:4B:04:05:69:24:1B:BF
X509v3 Authority Key Identifier:
keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:11:47:e2:ee:76:08:ae:6c:28:6e:62:7c:df:28:33:64:fb:
36:03:7a:12:26:ad:f5:dd:d8:4d:15:b9:ec:81:6a:46:d5:e7:
f9:fd:ee:c1:ce:6c:56:14:02:ca:61:a0:f7:22:61:3a:f0:fe:
47:4e:d9:c3:e9:96:81:0f:5b:3e:47:6c:02:61:d7:4f:5b:78:
78:db:6b:66:7b:55:16:e4:fc:2b:1b:2e:91:cf:16:d8:ec:79:
b1:e3:87:8a:5d:8e:87:ba:7e:d2:89:fb:33:f7:12:c2:9f:d9:
df:27:6e:65:05:22:84:bf:7f:e9:e7:bb:32:01:55:ec:cb:79:
53:e6:4d:22:f3:81:05:d2:a1:fa:5b:dd:44:a7:0b:fc:ae:5d:
9d:a9:5a:5b:bf:66:4d:27:fa:a3:d5:7f:f1:c6:5d:d3:96:9e:
b0:4a:47:cf:58:1a:18:c1:ba:1e:0c:d4:bb:72:86:55:e7:a8:
90:b3:bf:4c:21:eb:91:8c:bf:c0:1d:cc:0a:e0:f5:6e:e3:24:
9a:02:ac:1c:cf:6a:e3:84:e7:33:30:24:b6:7e:bd:05:c7:b6:
df:ea:00:c3:b2:16:df:81:72:9e:b5:e4:69:3b:f8:a3:56:28:
39:1f:4f:4c:ec:3b:85:bb:72:7c:e1:90:ab:91:6d:20:08:b3:
5a:6b:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:23 2025 by rpki-client