Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
File: NmTkRiopAqUvgm2uOFZXMe_FvdM.mft (raw, json)
Hash identifier: XtceJ8m6gEQZ41hhGGUNzzidkvbv5d7S8IYOXc/dya8=
Subject key identifier: E1:B8:97:A4:6C:C5:0D:4B:4F:DB:8C:2C:8B:73:20:88:C2:56:77:71
Authority key identifier: 36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
Certificate issuer: /CN=3664e4462a2902a52f826dae38565731efc5bdd3
Certificate serial: 0199228CCD3DCF050FBBAAB871B3977A34E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
Manifest number: 15C1
Signing time: Sun 07 Sep 2025 05:01:16 +0000
Manifest this update: Sun 07 Sep 2025 05:01:16 +0000
Manifest next update: Mon 08 Sep 2025 05:01:16 +0000
Files and hashes: 1: NmTkRiopAqUvgm2uOFZXMe_FvdM.crl (hash: 2kLIgMaoxTHYDJFiR4JNCrj4eyBpV/OjQKZFtdVmVHs=)
2: bRSiH3Ltu0n345442eKdUINyK3s.roa (hash: WObRy2TpZce8N0K21ZTeL8NwUXrbmFADn/Y+S73z7rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:cd:3d:cf:05:0f:bb:aa:b8:71:b3:97:7a:34:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3664e4462a2902a52f826dae38565731efc5bdd3
Validity
Not Before: Sep 7 05:01:16 2025 GMT
Not After : Sep 8 05:01:16 2025 GMT
Subject: CN=e1b897a46cc50d4b4fdb8c2c8b732088c2567771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:14:8a:7d:41:7b:3e:1c:ef:76:e2:b8:6d:
a7:6d:b4:7c:92:04:bf:3d:67:3f:96:5c:7e:d1:f0:
94:7b:f6:a8:7a:0a:b5:e2:20:d1:8d:05:a8:4a:a6:
e8:00:14:6a:d9:0a:bb:70:c6:b6:9f:75:9d:bf:58:
eb:e3:75:89:df:ea:7b:6e:d5:85:2b:e1:a2:0d:4a:
ec:d2:c8:5c:d9:aa:1f:25:27:08:10:32:6d:eb:df:
c8:8b:c3:b9:f8:c3:4a:3a:3a:7b:12:33:2d:04:6b:
13:08:e8:d7:51:c8:60:76:98:20:cc:b7:ed:58:29:
83:5c:54:8c:a6:30:d7:f5:f7:5e:c1:c8:37:2e:59:
8d:03:1b:5d:60:6a:08:70:f5:3c:e1:c4:4c:47:93:
bb:a9:f7:0e:da:e6:0b:4a:ba:c2:c0:36:37:7c:6e:
6e:90:81:9c:65:20:d5:9b:1b:a9:7a:68:26:69:58:
e8:98:96:5e:76:41:55:d9:f1:a9:1e:6c:02:35:e5:
e5:78:8b:92:4f:00:5e:91:dc:ca:48:be:a8:59:a4:
ac:e7:e5:6d:c5:ca:81:41:40:b6:c0:80:93:af:b4:
13:bf:ca:c0:ae:57:04:9a:e1:53:36:f5:02:7e:d6:
c5:15:5d:cd:2d:9b:1c:a3:00:aa:c7:a9:fa:96:63:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:97:A4:6C:C5:0D:4B:4F:DB:8C:2C:8B:73:20:88:C2:56:77:71
X509v3 Authority Key Identifier:
keyid:36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f0:28:f6:f1:44:d8:19:34:46:bd:ce:df:51:fe:99:47:50:
fb:7e:2d:3f:53:1c:ed:1a:fb:bf:2e:78:f3:2b:79:77:f6:81:
7f:b7:16:fe:9a:3d:4d:25:ba:b9:19:29:d2:89:bc:37:51:e2:
c4:5a:87:6c:cc:4a:ea:33:bc:a1:47:ff:a2:55:7b:fa:cc:70:
88:3c:92:33:ba:d2:e9:a1:26:85:5c:f3:63:8b:e9:71:c6:7e:
18:18:1d:a3:b5:3f:83:f2:7c:7b:59:8a:3b:91:90:6d:a6:01:
a9:6b:ee:ec:89:a2:65:43:3c:f2:10:27:7e:7a:8c:dd:4a:46:
32:12:c1:8c:e3:de:51:70:9c:9b:37:d2:37:80:7b:ec:d8:7d:
b6:12:9c:fa:8b:0f:52:99:b7:b3:1b:73:91:09:26:81:b7:b4:
1a:29:34:47:f1:37:a2:ef:b3:d0:04:43:ef:b7:d8:03:dd:06:
93:aa:b1:67:0d:d4:f2:5b:bd:9a:1d:8a:d8:f4:d1:82:d6:d9:
4e:f5:9a:f1:be:ab:5d:94:69:df:03:fe:c2:3b:44:dd:01:7a:
9a:5b:8e:62:3a:4a:cc:3c:2d:75:f4:f2:8a:5e:74:9f:67:b4:
e4:41:e7:85:df:f4:e7:22:d3:8e:c4:25:14:82:65:19:d8:f9:
82:25:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:55 2025 by rpki-client