Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: 9yDijjruorkE/biLlzbhahAGHQ+YrS0Ap+s8kMTQ0IE=
Subject key identifier: D4:9A:0E:BC:05:04:24:80:42:58:3A:5C:85:1C:83:CA:07:54:43:74
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 0199228C6225FAE11495CAD85807E08029C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 01CC
Signing time: Sun 07 Sep 2025 05:00:49 +0000
Manifest this update: Sun 07 Sep 2025 05:00:49 +0000
Manifest next update: Mon 08 Sep 2025 05:00:49 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: EtAg/9jPD7MiN/jPvz8lYNVdyaA2f0DYMYDRFTA+GTo=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:62:25:fa:e1:14:95:ca:d8:58:07:e0:80:29:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Sep 7 05:00:49 2025 GMT
Not After : Sep 8 05:00:49 2025 GMT
Subject: CN=d49a0ebc0504248042583a5c851c83ca07544374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:a3:04:be:30:c9:d8:91:6a:ed:e9:04:3e:
ce:e5:09:48:eb:2c:11:2e:33:54:6e:be:5c:e9:17:
6a:f2:b3:b6:af:ae:3f:ea:e3:58:4d:53:2f:9e:69:
c6:ab:68:39:31:8c:0b:4f:68:03:17:99:98:86:83:
40:fd:ae:15:7e:b5:42:b2:4a:35:c5:20:72:5f:b4:
d0:71:7c:19:22:c1:be:a4:72:c1:5c:23:0a:5b:db:
64:19:1b:80:28:de:0f:7e:b0:1d:1b:c9:9b:31:9a:
b8:1c:68:27:d4:f2:70:0a:b1:1b:28:90:5a:42:12:
1e:2b:93:18:76:ed:5f:f9:da:3e:a8:41:3e:45:93:
67:df:79:47:b4:7d:e2:95:81:2f:24:99:04:8d:a0:
5b:c6:93:de:cf:07:10:4b:6b:7d:70:5b:1b:1a:9b:
42:01:bb:c2:2b:9a:fa:6f:da:07:43:0b:e5:30:ca:
57:37:b4:2b:02:7c:41:af:4d:38:96:54:7c:6d:e3:
84:1a:7a:fa:9d:f4:70:a8:1c:0c:4c:9a:d5:02:03:
f9:75:3f:97:a9:67:87:ae:9f:9d:2c:24:a7:0e:d9:
51:b1:d4:ee:97:55:24:d2:45:b0:ad:1b:b4:c9:cf:
6d:ab:68:65:21:12:6a:ef:2f:b7:3c:2f:2d:85:30:
7c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9A:0E:BC:05:04:24:80:42:58:3A:5C:85:1C:83:CA:07:54:43:74
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bd:a6:8a:35:50:f2:f9:e4:92:6c:18:63:55:06:f4:c1:8c:
c6:71:85:07:d2:4a:49:e5:dd:9b:c8:f6:1a:b1:55:eb:cb:32:
aa:13:df:dd:4e:58:99:95:65:c5:4e:f3:15:94:02:ed:23:7e:
91:af:a8:26:50:94:a5:7a:45:f0:b6:fe:55:78:c2:9c:3d:3e:
d4:cd:f7:70:21:21:fa:c3:40:3d:25:ba:f9:f7:79:fe:c8:9c:
1d:43:1b:6a:dc:6c:35:05:56:56:e7:37:df:66:00:c9:24:18:
bf:7c:3f:a6:54:0c:1f:91:7e:69:30:72:59:60:ee:41:d1:65:
90:56:ac:83:84:b1:84:40:79:c8:fe:b8:15:f1:1a:df:3f:26:
ea:9a:09:57:87:84:8d:95:d8:ca:6b:f7:f4:fb:6d:21:3a:86:
5d:2c:3f:ab:a6:a6:4b:91:13:d2:30:85:cb:0e:6b:42:b4:41:
ba:f7:0f:17:d3:03:e9:f8:86:f0:8e:82:44:da:b7:f4:5b:39:
53:83:ff:8a:32:02:49:d2:22:6c:aa:3f:d8:09:34:07:7b:66:
11:e6:59:ae:2b:64:f8:c4:57:24:2b:b9:c1:ed:50:20:9b:c8:
b6:85:ce:98:91:83:b3:e3:e6:e8:45:0a:eb:2e:3d:24:04:3a:
9d:1e:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:44 2025 by rpki-client