Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
File: Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json)
Hash identifier: qPoUj2RXahJwD5QSsae4GdsVrGdanWOmMuBQ77Z1FXc=
Subject key identifier: 57:4A:0B:68:9C:D7:00:E2:DB:77:3C:25:FE:A2:D1:78:AE:C7:3D:C4
Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
Certificate issuer: /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Certificate serial: 01992255DDC21396C8377F3AB3ACF6A7CFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
Manifest number: 029B
Signing time: Sun 07 Sep 2025 04:01:16 +0000
Manifest this update: Sun 07 Sep 2025 04:01:16 +0000
Manifest next update: Mon 08 Sep 2025 04:01:16 +0000
Files and hashes: 1: JzGs8inn7txEGMEMBRCVzNZdRVg.roa (hash: gvrw7Emqkgw3IJnnGKeYcShf4Bw5yVCq/dWSjUTjfvI=)
2: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: XqKvB3CI9AiDeb9zASEPNGhZLimx1I1vzQbcyr+KGY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:dd:c2:13:96:c8:37:7f:3a:b3:ac:f6:a7:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Validity
Not Before: Sep 7 04:01:16 2025 GMT
Not After : Sep 8 04:01:16 2025 GMT
Subject: CN=574a0b689cd700e2db773c25fea2d178aec73dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:6c:42:19:71:2b:cc:8f:59:9d:8c:b9:d0:
08:7b:3b:c5:70:d0:86:15:9a:f2:f7:d1:dd:74:a2:
75:6d:62:07:3a:d7:7f:73:55:d7:08:a4:29:b1:cf:
a6:15:b7:13:8d:26:e8:53:0e:35:cd:d7:0e:9f:f8:
5e:67:6b:f3:a7:2f:00:de:71:26:1c:54:e1:81:16:
8d:9d:c4:ea:d1:c1:2c:d4:34:03:c1:42:e0:62:58:
35:c1:5a:72:c9:4b:db:a7:d7:e4:40:a8:d7:ed:55:
77:54:a3:65:f8:4b:79:28:39:95:0e:f9:c6:8c:97:
78:d0:22:e9:a7:ad:f0:31:a1:45:c6:f5:ff:a5:c8:
01:d2:9c:c8:c2:48:30:61:8a:bb:5b:9f:2f:a1:9c:
71:8d:60:89:67:37:20:1f:51:0f:84:57:98:05:ac:
11:93:ff:ab:b6:1b:7c:aa:1d:09:3a:a4:cd:4a:91:
13:9c:7c:9a:33:da:27:cd:c5:95:81:da:41:db:60:
ec:8e:bc:68:d1:27:7d:ab:86:6e:1a:c3:ee:1c:a4:
35:0f:9d:c6:7d:1a:71:44:fe:b4:2a:f7:e2:a3:35:
13:8b:3e:99:02:80:de:77:a0:09:fa:bb:38:fa:49:
d0:36:d4:17:71:49:0e:f1:4a:16:39:a8:77:e8:58:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:0B:68:9C:D7:00:E2:DB:77:3C:25:FE:A2:D1:78:AE:C7:3D:C4
X509v3 Authority Key Identifier:
keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f0:b6:8a:5f:36:02:fb:6b:7c:94:06:b6:da:1f:4e:64:ea:
2c:ce:05:4f:a6:9c:96:b5:46:1e:e1:79:9b:0c:d0:25:76:6e:
0c:d8:4b:a5:13:29:f7:ce:bb:c8:97:6d:64:e9:63:1d:b1:23:
0e:f1:a0:ba:8f:9b:89:c3:4b:4e:be:9e:58:9d:3e:0a:dc:7f:
9f:54:b9:d4:81:f5:73:b6:b7:50:56:7f:7c:45:65:ad:6d:07:
1e:7d:aa:c0:d1:96:32:2b:6e:45:7d:be:57:a9:9d:fd:c7:f5:
b1:f5:99:2b:e9:6e:48:14:46:6e:2f:72:b0:a0:74:33:fb:f1:
5e:3b:46:1c:a5:63:d0:e9:84:82:29:8d:ea:51:31:5e:99:2f:
4a:5e:07:d2:94:d2:a1:24:96:6b:14:96:37:af:82:85:07:31:
5d:54:fe:5d:fc:9d:5c:ff:b3:56:e3:f9:95:f0:c6:28:70:3d:
62:c3:0d:bf:a9:a3:97:51:7f:84:3a:6b:c9:a8:40:73:9c:c3:
74:5d:b8:b9:65:45:15:f0:87:25:47:a5:8e:ec:60:71:32:6c:
d5:8b:8f:e7:d7:5a:d9:74:61:8e:1b:19:95:fe:49:4f:b6:00:
15:4f:d3:57:f0:f7:2a:94:9c:ac:02:14:f6:95:b0:a7:f7:d5:
1b:33:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:24 2025 by rpki-client