Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: OJciyLfhTm4DlTEXHQZhEj4IpSAz5NWY3QuEvX+MWf8=
Subject key identifier: DA:81:3F:67:B5:66:1F:C2:16:8A:13:A9:77:8E:40:E4:22:C6:A6:46
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 0199221E9C3590B70D97FC220A1A6E03FE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 03:00:55 +0000
Manifest this update: Sun 07 Sep 2025 03:00:55 +0000
Manifest next update: Mon 08 Sep 2025 03:00:55 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: fYCtFqXySMN9Put84MBFr9Di5XhrgjgJzNSqcOOyWqY=)
2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=)
3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=)
4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9c:35:90:b7:0d:97:fc:22:0a:1a:6e:03:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Sep 7 03:00:55 2025 GMT
Not After : Sep 8 03:00:55 2025 GMT
Subject: CN=da813f67b5661fc2168a13a9778e40e422c6a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:d9:cf:c9:be:7d:db:fa:5c:84:08:51:36:
2a:67:59:a0:8d:c0:f7:33:23:10:22:61:6d:6e:64:
d4:86:ae:97:bd:e7:f7:a9:1a:e2:00:d7:ab:f5:93:
ff:ae:c6:19:9a:e5:fb:ba:a4:c5:79:17:97:63:b7:
37:8f:21:5c:e7:30:71:16:ea:ea:76:48:53:0c:d6:
eb:cb:e5:ff:10:02:83:50:2f:19:98:18:e3:ac:70:
26:38:e9:2d:ef:76:5f:da:7c:14:7b:96:a9:24:25:
c4:cb:90:f3:53:23:2d:90:e1:f6:8b:f6:61:58:fc:
7b:f3:ee:2e:fc:a7:7b:31:13:92:64:0a:f1:57:af:
58:1c:7b:9a:5d:02:fb:19:86:e3:27:0a:c2:dd:9b:
34:95:83:66:69:b8:6d:f5:db:61:89:cd:24:f0:66:
05:96:b6:46:d9:23:9f:00:d1:4b:46:e8:9f:e1:90:
18:3a:5c:40:04:34:07:66:ea:63:fe:d9:a4:33:c2:
c8:ef:db:7c:49:d8:76:fc:06:75:1e:7e:a7:e5:4a:
10:7c:7f:b0:a0:47:50:d8:0c:09:32:28:e1:b8:65:
52:41:f4:1c:ae:76:7d:53:8e:57:af:92:80:3d:48:
81:45:8f:46:a1:20:43:8e:ca:84:6f:3f:f8:63:86:
dc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:81:3F:67:B5:66:1F:C2:16:8A:13:A9:77:8E:40:E4:22:C6:A6:46
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:81:b0:c3:f4:0e:97:04:36:db:11:22:ef:79:c1:99:9a:e3:
75:7a:98:a6:dd:d4:75:55:4c:0f:5a:0c:5a:27:b8:c3:40:31:
ff:d5:da:a5:72:1e:0d:14:20:84:d1:6b:43:bc:8b:2e:9f:77:
e8:83:87:b7:c4:27:f8:b0:a6:3d:57:bb:a0:77:fc:1f:a2:e5:
ea:d6:92:d5:9f:b9:bf:57:ce:c2:49:93:0d:b6:bf:41:3a:f7:
64:1a:47:ae:e8:5d:8f:67:9a:78:59:af:0f:61:92:74:92:44:
3f:43:7d:17:8f:fa:89:f8:33:93:d5:01:8c:46:d7:d3:a3:03:
9f:cd:af:0d:64:e9:42:26:d0:57:b8:fb:62:8d:36:db:87:0d:
06:d1:a5:6e:89:fa:85:82:50:5c:9b:c9:3e:3c:7d:05:e7:bc:
69:d2:ad:12:fe:8e:00:d2:29:fc:28:c3:8b:23:03:e8:ba:41:
6e:9c:d2:7c:4f:24:0a:c3:a9:95:10:ad:dc:9d:57:fa:0e:bd:
40:9b:e7:7c:87:f1:59:2d:2e:d6:2e:74:6f:1f:8e:b6:e9:80:
1e:3e:22:28:91:e6:dd:54:e4:8d:69:3a:d1:99:12:bc:55:e2:
01:6b:0c:ad:bf:8f:2a:57:87:f2:cf:b2:ea:6b:07:f1:e2:9b:
e8:9d:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:03:57 2025 by rpki-client