Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: NSWiOEHnHBk+p4mUuTmLEdA+bh13fcnNxysXVppmfps=
Subject key identifier: 65:36:53:04:99:C7:E2:DA:88:23:2B:FD:8D:AB:DF:A7:52:6E:5D:AD
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 01992331421E0125D3290342E7354A89D81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 038B
Signing time: Sun 07 Sep 2025 08:00:54 +0000
Manifest this update: Sun 07 Sep 2025 08:00:54 +0000
Manifest next update: Mon 08 Sep 2025 08:00:54 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: eTyw1gL0llq2Tnf+8afDUVr0CYg26oI3O9x8z9MQLv0=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:42:1e:01:25:d3:29:03:42:e7:35:4a:89:d8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Sep 7 08:00:54 2025 GMT
Not After : Sep 8 08:00:54 2025 GMT
Subject: CN=6536530499c7e2da88232bfd8dabdfa7526e5dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:c2:da:f3:71:31:5c:2d:86:d1:83:a3:5e:
6a:9f:82:a8:ad:c8:71:c3:c0:1c:9b:be:4a:2f:c9:
49:a1:2a:94:fd:6b:a3:85:f7:96:f4:2c:25:55:71:
28:6a:6b:5f:c2:af:a5:78:28:9b:08:21:50:f6:50:
6c:c4:ba:f9:8a:d2:f0:4c:2d:ee:7c:d6:3e:94:20:
43:97:5b:4d:3a:d8:b9:78:ff:92:a9:38:31:c3:bd:
e9:37:87:74:e3:3f:77:71:a5:fd:e7:00:cb:3c:32:
bf:94:f5:ab:15:3d:aa:0c:ad:d8:fc:8d:25:be:90:
be:06:17:36:91:04:04:73:9d:20:40:78:4a:48:ca:
61:2e:08:7b:3c:66:24:7f:87:c1:b5:31:16:69:70:
a8:d3:97:5d:ad:f3:da:69:95:a0:ad:2f:10:0a:f0:
05:a3:00:de:87:9e:76:ea:c1:a6:96:7b:33:e1:9e:
f2:51:32:1d:c5:df:89:c5:8e:e3:4e:03:44:1c:e5:
d0:80:cc:b9:3f:96:be:8f:fe:25:22:49:c4:7b:11:
d7:d7:5e:10:f4:1a:44:7e:a5:be:68:18:90:a3:1d:
af:65:ef:31:e1:a5:9b:bc:3e:69:fe:51:42:44:c9:
f5:b8:b5:a5:5c:05:f5:02:dc:e1:19:2e:fc:b1:0a:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:36:53:04:99:C7:E2:DA:88:23:2B:FD:8D:AB:DF:A7:52:6E:5D:AD
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0f:a4:20:ba:4d:71:93:98:33:60:69:78:31:c4:ca:57:e1:
65:ed:56:76:a2:b2:bb:5a:b2:4f:30:2f:d4:8d:63:e5:58:86:
c9:d3:bb:8e:70:b1:01:82:89:26:46:cf:c6:83:42:0b:62:b8:
6f:bf:9b:a9:90:9f:de:69:e4:91:b5:2d:a3:4d:de:69:5f:50:
7b:35:8d:0c:6c:7d:20:ed:f4:2f:3c:22:b0:b2:ef:9e:fe:cb:
bb:ac:48:7e:28:b2:be:d7:8b:21:e8:63:aa:a1:91:f9:31:f0:
91:dc:0a:bc:69:f0:55:76:66:6a:f0:86:cf:17:a5:4c:64:1f:
85:1d:66:20:6f:85:81:a9:17:8b:fd:e5:71:3a:4c:74:54:37:
7a:07:c9:30:6d:b8:5f:65:ff:7c:07:81:6e:08:23:ef:0f:5a:
07:65:a6:6d:65:b2:fc:71:03:f2:e6:ea:05:1d:2b:c9:cc:ca:
ac:13:4b:f0:5b:ae:7b:86:ba:bd:40:00:48:2e:1b:ab:f1:b9:
24:02:e1:09:7d:fc:00:2e:89:08:bf:b3:ef:0b:65:f1:99:aa:
e3:95:ed:9f:59:e9:c3:6a:27:c2:d5:47:df:fc:24:65:7b:0f:
3c:2e:b8:b6:ef:ba:78:e3:8d:0b:89:9d:7b:23:93:56:d0:13:
ed:c8:1b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:25 2025 by rpki-client