Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier: LbKY8U8tVu+lYKjih94CpoACT6PpWPb5mqWG7W7Pov4=
Subject key identifier: AB:47:07:B9:BA:ED:51:B1:0C:E5:77:F2:8C:D7:78:C4:3E:6C:8B:45
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 0199233133F42931A53200204EB61211AA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number: 1381
Signing time: Sun 07 Sep 2025 08:00:51 +0000
Manifest this update: Sun 07 Sep 2025 08:00:51 +0000
Manifest next update: Mon 08 Sep 2025 08:00:51 +0000
Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: kqOf30GkI2qtHlnrsOE7GnqLyxarsFew3tfbL1r/rQA=)
2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:33:f4:29:31:a5:32:00:20:4e:b6:12:11:aa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Sep 7 08:00:51 2025 GMT
Not After : Sep 8 08:00:51 2025 GMT
Subject: CN=ab4707b9baed51b10ce577f28cd778c43e6c8b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:b1:31:0d:35:05:00:2e:51:e3:d9:d7:66:
42:cf:b7:4a:84:a8:e9:44:cd:ab:1a:03:30:65:19:
96:3d:a1:d6:d1:74:b2:cf:b5:5d:05:75:d6:ca:da:
4d:d9:77:68:59:f3:bc:4e:57:df:15:37:c3:93:91:
02:c6:85:e5:cb:db:19:4b:cd:f5:20:2c:2b:f6:c1:
f9:f3:49:a6:8b:d8:0d:f2:d5:c6:28:7f:3c:bf:72:
10:f9:3e:25:a0:59:cf:f2:b7:b2:dd:1c:c5:bf:cf:
78:66:15:51:ff:49:ba:cb:38:90:5c:e6:e8:f5:59:
e3:f2:e2:d6:3e:4e:53:a9:c9:0f:8f:cf:95:b0:d5:
b8:a1:7b:62:16:58:80:d0:92:7b:6a:55:7e:be:16:
3a:50:b2:f3:4a:d3:1f:19:8c:83:86:1f:a2:74:2f:
33:08:4a:4f:8b:da:73:4d:e7:04:83:7c:18:87:75:
f9:0b:f7:bd:85:ea:09:68:7e:04:30:a8:06:80:a7:
92:3d:20:69:40:a2:2b:13:b0:0b:31:84:d2:0d:36:
7e:b6:30:44:49:62:6a:3d:1d:ce:5f:03:11:e7:69:
2a:a0:2f:3a:0b:1a:a5:31:38:e1:34:0e:af:6b:bb:
b9:df:0d:65:69:e5:65:96:0d:a8:4e:03:49:c0:ae:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:07:B9:BA:ED:51:B1:0C:E5:77:F2:8C:D7:78:C4:3E:6C:8B:45
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f2:45:41:19:75:b2:c0:cc:6b:27:00:38:26:7e:b6:83:9f:
9d:8c:14:ac:32:4d:4f:7b:03:27:e8:25:25:e2:89:8b:6a:79:
6a:9c:b2:1c:2a:53:77:06:94:a3:17:92:3d:d6:2f:6c:36:f5:
e5:66:34:53:1d:05:70:75:58:e3:4b:4a:ea:bf:16:1f:f1:9e:
ed:6e:f5:a3:d7:84:2e:23:12:f2:e3:bc:7a:ef:87:d3:26:05:
a6:e5:cb:26:6f:07:dc:63:75:b6:d6:4c:e6:80:61:c5:97:be:
e3:05:2b:ec:2e:33:dd:e1:2e:a1:4b:94:4a:6a:6d:4a:68:c4:
03:99:3b:1f:f2:f8:fd:fd:2a:cb:be:b6:0c:0e:d9:ee:01:86:
11:6a:81:11:f4:b3:53:59:09:a2:a9:de:a2:a7:96:de:c9:57:
72:3e:36:83:ce:56:64:fe:e9:47:f5:99:75:70:bd:df:1c:76:
f1:ea:d4:a8:70:03:e6:f6:40:6e:75:f8:f7:49:f4:58:f5:0c:
85:dd:21:d5:22:f1:8f:e9:12:55:a2:3d:b6:68:6b:cb:2c:5b:
f7:84:b4:ea:d9:7e:94:13:8c:64:38:7a:c2:b5:8d:49:93:1c:
4c:57:61:a4:da:b6:3b:69:9a:fe:16:dc:a1:a8:63:cc:c0:fd:
4d:81:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:50 2025 by rpki-client