Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: KsOpvIhKkOG/13ABC9vA2dq+FstGmdqvT1wnLZ0D5TA=
Subject key identifier: 57:49:9F:00:44:AB:34:ED:9A:F9:6E:8C:5E:C3:8C:D9:8A:AB:EE:EC
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 0199228CE0D581BCFFCB446079D753E51740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0F33
Signing time: Sun 07 Sep 2025 05:01:21 +0000
Manifest this update: Sun 07 Sep 2025 05:01:21 +0000
Manifest next update: Mon 08 Sep 2025 05:01:21 +0000
Files and hashes: 1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: wGz/kb3mYZ4HJVBDuaIKIlWJUvnKnKmbvIJTVmc/FWw=)
2: pD83cCgQmkTqmybL4Qe3QLOSsJI.roa (hash: Dc3wCA5yOgFeVk3/J+FU53rFpNzosD7EmU4+ejzw5Hc=)
3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e0:d5:81:bc:ff:cb:44:60:79:d7:53:e5:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Sep 7 05:01:21 2025 GMT
Not After : Sep 8 05:01:21 2025 GMT
Subject: CN=57499f0044ab34ed9af96e8c5ec38cd98aabeeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:1b:d8:b6:44:26:6f:31:44:69:a2:14:0e:
e0:fc:bf:6c:b4:13:72:49:88:d3:55:f4:b2:06:8f:
96:63:f9:62:52:88:71:1f:27:90:90:1a:a1:c7:3a:
40:95:22:29:7e:23:42:c3:d3:c9:b5:9a:9f:ef:04:
f8:23:7b:a7:1e:3e:10:a5:d0:da:74:3f:57:4b:34:
56:b9:55:eb:69:1a:30:24:34:44:ba:74:8e:e8:bc:
a2:de:dc:83:d5:53:1d:ae:f2:29:01:26:69:7c:e7:
43:cb:eb:30:97:6f:62:93:1f:02:b9:19:02:06:88:
01:e6:38:07:a7:9b:c2:70:22:e7:1a:aa:58:e5:ce:
22:2e:5b:20:83:4f:10:fd:c3:37:b0:5b:4e:d6:3c:
3e:85:07:f4:49:f3:c4:53:81:75:8b:63:99:b2:01:
23:85:aa:97:5d:a5:24:d7:a5:ec:ec:7e:ae:0a:6e:
07:83:64:e0:8b:4b:b5:8e:92:ca:df:67:00:fa:72:
75:a1:80:9e:81:18:1f:e9:fe:2e:b7:41:4a:24:7d:
76:19:25:22:bf:6c:50:c6:e8:8c:b3:89:73:df:af:
ee:e6:b3:b8:aa:dd:29:32:54:ff:a6:3d:fc:75:25:
0d:e4:56:d2:94:17:9b:47:48:8f:b2:06:6a:3f:c4:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:9F:00:44:AB:34:ED:9A:F9:6E:8C:5E:C3:8C:D9:8A:AB:EE:EC
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:71:90:57:10:71:57:22:e7:04:27:99:c9:93:77:67:c4:e6:
d4:d4:30:3a:af:68:e3:2e:c7:c0:6e:a6:b5:c0:ab:33:1c:01:
83:ca:ce:bb:f2:a5:26:b8:14:6a:19:8b:00:dc:ac:8a:c0:13:
23:df:8b:78:0e:20:92:24:ed:80:83:c9:3a:09:69:cf:16:19:
17:d0:4d:92:e0:c4:fb:a0:1c:6e:04:d9:60:eb:71:aa:46:5e:
45:f1:26:25:4b:0b:4c:e2:05:f3:e6:e8:6b:47:16:21:bf:97:
4a:9e:6e:54:60:04:ff:5b:f8:ba:67:7d:75:71:dd:f2:ff:6b:
2b:3b:bc:d5:73:cd:21:48:86:a9:47:96:e7:51:9e:aa:09:97:
96:b0:1c:78:ee:d7:61:31:9a:57:85:9b:72:b6:8a:ff:99:41:
90:3d:96:d7:ad:07:9f:da:cf:2f:0b:46:27:9e:b1:00:ef:4f:
7b:b8:58:f7:3c:0e:87:43:96:ed:3b:ea:f3:7e:38:6c:c0:e9:
d1:3f:f9:49:be:39:88:12:aa:29:f4:73:ef:39:e8:d3:ce:ae:
7c:a4:8b:84:f1:74:29:b4:b1:86:0d:db:74:71:f3:9b:26:5f:
aa:51:00:59:b1:03:be:10:c7:19:5f:d7:f8:23:94:fa:c7:a4:
4c:92:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:19 2025 by rpki-client