Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: 4gS13MLKgDbC8ulKmJcUzCa50zRsNw/WBdOpkWmB+ls=
Subject key identifier: 3D:4A:B6:59:B7:7C:93:77:5F:8B:A6:95:46:A2:2B:96:B3:86:98:95
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 0199228C2BB0DB1CB3E7ACA0E4E95C43DCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:00:35 +0000
Manifest this update: Sun 07 Sep 2025 05:00:35 +0000
Manifest next update: Mon 08 Sep 2025 05:00:35 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: IqOd4K9KE99yvd9pRso8Fty4ArGatPapb+ibmTb1lYc=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2b:b0:db:1c:b3:e7:ac:a0:e4:e9:5c:43:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Sep 7 05:00:35 2025 GMT
Not After : Sep 8 05:00:35 2025 GMT
Subject: CN=3d4ab659b77c93775f8ba69546a22b96b3869895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:e6:af:25:17:3d:af:a6:a0:8e:d2:07:56:
e1:cd:b3:26:39:79:28:19:ee:92:f0:7f:7e:3b:15:
45:72:37:85:55:50:74:4a:95:80:c8:aa:89:6e:07:
50:a3:b6:60:d3:3e:13:43:97:30:0c:21:f9:68:10:
a2:2d:2a:37:99:9b:a9:ee:2d:6a:cf:a3:94:ce:db:
45:4e:7e:8a:ee:30:48:6f:35:5e:41:75:14:f1:c1:
5e:b7:0b:24:e0:95:fa:99:1d:09:18:15:4c:c1:0e:
6c:f1:a1:14:ff:75:87:d4:c1:44:2f:4a:c8:98:dc:
b0:5e:03:1f:bc:98:78:d5:3a:86:f5:14:29:d8:33:
96:17:88:3e:a2:be:ea:6a:89:a0:68:90:dc:11:8d:
88:cc:a4:7f:24:cb:22:14:2a:65:ed:71:3c:f3:d8:
a6:31:7c:0c:34:f9:a5:62:e9:ea:f7:6c:8f:37:db:
02:3a:c2:c2:51:19:0c:ea:3a:53:f8:4a:6d:40:5b:
79:0b:67:02:fb:e4:51:fc:f9:8a:2b:5a:99:f5:5b:
22:53:d0:7c:ac:9c:5c:62:18:a8:d1:15:d7:c7:2a:
ed:83:20:44:a8:e1:45:bd:9a:8c:e8:40:92:e8:be:
18:88:fe:7a:ac:a2:10:f4:1e:fe:f9:04:a7:79:52:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:B6:59:B7:7C:93:77:5F:8B:A6:95:46:A2:2B:96:B3:86:98:95
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:18:d4:21:59:07:9d:1b:5f:08:b8:3e:d6:58:78:bc:23:75:
ea:60:57:7b:53:61:50:e1:bb:05:a3:8a:83:84:71:90:e4:99:
0b:06:5e:c8:32:7c:ee:af:fd:37:41:d0:25:97:12:d7:06:dd:
b4:aa:31:fe:16:10:34:26:ef:2e:77:3f:5f:cf:c6:91:5a:72:
d1:11:55:00:81:86:ef:ef:44:ca:c3:93:38:b8:1d:5a:7e:62:
79:08:9d:48:ea:00:56:26:62:98:65:2c:85:59:96:da:4b:21:
5d:54:40:dd:09:69:c1:7b:97:c1:24:f4:53:a1:6e:ac:d9:98:
55:b9:bd:9a:ab:3b:a7:a2:bf:69:66:4c:2b:fd:f1:18:52:a1:
ac:09:a6:4a:f4:ad:a2:42:ea:7f:0f:8c:97:d0:00:ef:ed:42:
a1:f5:c9:29:5e:bd:31:74:06:c3:91:fb:75:c5:52:97:0e:9a:
ac:ff:27:fc:0a:bc:15:d4:8f:42:ca:43:8f:d3:25:dd:a4:26:
69:75:40:91:3a:ab:bf:48:4c:cd:06:97:20:cc:29:34:de:ea:
bb:38:02:46:c5:45:a7:f5:2e:a2:78:dd:85:04:6c:74:df:5f:
1c:dd:a8:97:2f:fa:e7:79:ec:de:af:fa:f1:c3:b1:58:aa:2f:
b8:dd:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:44 2025 by rpki-client