Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: GD9/zC01zw1umeOC88ZlzD/6xJVrhi1JZMSBE287whU=
Subject key identifier: CB:1F:BB:11:24:93:39:BC:3B:4A:AF:A9:0E:9E:F6:56:CA:ED:47:00
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 019916516C4F7C9D3759D9B9D8B3A9940719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 027B
Signing time: Thu 04 Sep 2025 20:00:58 +0000
Manifest this update: Thu 04 Sep 2025 20:00:58 +0000
Manifest next update: Fri 05 Sep 2025 20:00:58 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: OWWEEXnizDAAx6IUYv0rxCyYn4OfTSz1e7i7mkuwvwk=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:51:6c:4f:7c:9d:37:59:d9:b9:d8:b3:a9:94:07:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Sep 4 20:00:58 2025 GMT
Not After : Sep 5 20:00:58 2025 GMT
Subject: CN=cb1fbb11249339bc3b4aafa90e9ef656caed4700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:77:2a:0f:e1:9d:ef:79:a2:60:c4:6e:0b:
1c:18:4b:17:e5:79:c1:08:08:e3:b2:8f:11:45:c3:
92:a3:57:02:fb:79:06:cd:62:34:ad:1f:aa:85:c1:
e4:dd:84:fd:1c:89:7e:3b:2c:fe:af:db:5b:0c:ef:
0d:f8:8c:5d:a1:6f:bf:2d:37:ec:89:73:1f:b9:19:
0c:4f:b0:a0:93:df:0e:06:20:f3:b9:53:46:c9:cd:
29:48:26:65:af:75:9b:37:07:40:1d:a8:ca:b2:27:
1d:db:b6:d6:ac:20:62:f8:9c:17:c0:de:0a:ef:59:
ef:13:a4:9e:6f:89:1b:73:fa:b8:ba:1c:75:17:2a:
5a:68:91:71:83:3a:b3:3d:aa:65:9f:54:dd:5d:6c:
e2:eb:44:1b:42:6c:d8:4d:7b:6f:88:43:06:64:14:
ef:9a:c3:ff:5d:f7:43:ad:4c:be:6e:1a:08:7d:c3:
6f:98:ce:ed:2b:c9:fd:f5:eb:96:d8:b0:b8:57:ab:
78:46:48:7f:bb:a0:d0:30:ac:6b:47:64:c7:0a:86:
c6:59:01:06:82:3c:6a:e9:c6:fb:4a:34:84:bc:00:
0a:9e:f3:17:4d:85:95:21:99:41:d2:36:80:e8:a4:
7d:71:b5:aa:c3:6f:59:51:d1:69:56:51:f4:74:56:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:BB:11:24:93:39:BC:3B:4A:AF:A9:0E:9E:F6:56:CA:ED:47:00
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:77:e9:88:1c:4c:0f:8a:54:1c:d0:33:87:c9:68:b3:f3:1c:
17:97:6c:3e:81:45:88:0a:01:f0:c5:f8:ea:bb:8e:ee:05:a0:
f5:84:60:11:cd:4e:4f:f7:3c:b8:7d:8c:22:83:74:d2:3c:aa:
3c:d0:04:76:82:6b:ed:2f:98:c9:6c:be:bc:1c:86:42:92:95:
bc:a5:8b:1e:11:76:b4:b1:f0:99:27:55:f0:d0:e3:76:bf:26:
91:cf:74:e5:17:76:80:9c:56:54:33:d0:62:bb:6a:dd:18:0b:
5e:96:9b:b0:ff:67:ec:6c:b9:5c:e3:73:f6:8d:87:24:8d:99:
78:e8:f7:ef:a8:52:ae:73:47:e6:2f:4d:a4:83:3a:40:b5:5a:
fa:36:c5:e2:ea:9a:d3:7c:26:dc:3e:a3:e4:2c:9d:bb:59:1f:
31:49:3a:0a:01:54:d1:9a:f6:4c:f0:11:1c:08:47:8c:82:16:
16:1e:4d:18:e4:20:c5:ac:1b:7b:a0:d3:8d:ce:fd:47:52:1a:
2a:e2:d8:7e:64:fc:9d:b4:d9:e6:71:94:83:68:b8:f4:59:07:
94:c9:40:b9:9f:9c:64:08:fd:6a:fb:e4:cc:ea:df:32:8b:0f:
78:a4:17:3a:18:5d:52:04:9e:fd:50:12:e6:36:e1:0a:bb:d8:
83:7f:76:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:12 2025 by rpki-client