Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: fxp+ORMhRcTsZ+1NjFcfO++M5srtNifPZdtWKUxuTmI=
Subject key identifier: AA:55:95:75:27:B8:E6:8D:B8:22:C8:BE:AA:C6:FA:52:11:AC:A1:D9
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 019922FA441C88EC5DEDAB2057E14A3F2FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:00:50 +0000
Manifest this update: Sun 07 Sep 2025 07:00:50 +0000
Manifest next update: Mon 08 Sep 2025 07:00:50 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: TpyeN/qp+CIqLk2Rvz3H7o6Q7V9joK1YJtQABk9XIx8=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:44:1c:88:ec:5d:ed:ab:20:57:e1:4a:3f:2f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Sep 7 07:00:50 2025 GMT
Not After : Sep 8 07:00:50 2025 GMT
Subject: CN=aa55957527b8e68db822c8beaac6fa5211aca1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:5c:a5:fe:b5:3a:5c:80:c2:d1:cf:69:e8:
09:e0:e9:32:8f:ae:a8:85:d5:d8:ed:e5:9f:e2:45:
2f:8e:1c:24:a1:6a:22:40:65:b5:f6:ee:0e:c8:9e:
d1:92:37:e5:72:0d:55:d3:ea:06:14:a1:c2:9e:3b:
52:22:2a:73:2e:82:7c:71:db:bf:8f:78:af:9c:9d:
11:6a:10:fa:76:cd:42:5a:d3:cb:2f:af:d0:29:e0:
58:98:dd:2b:17:44:8b:fc:de:d7:b9:92:32:11:c2:
ff:fc:19:fa:bb:23:44:a0:39:26:90:dc:3f:2b:73:
f7:6a:56:34:ba:32:c7:ff:9c:07:76:54:49:a8:c1:
44:98:63:49:28:bc:0b:a4:40:22:b9:e9:2a:09:57:
88:c7:4d:0e:76:88:69:db:a2:01:86:d0:1f:b5:94:
8a:7b:9b:02:01:45:f2:6e:97:ed:d7:c7:ca:19:18:
7c:11:88:1d:b7:55:76:79:e9:6a:fd:e7:b4:55:68:
7d:68:05:e8:6e:15:94:ee:1e:12:af:b8:91:86:e7:
b0:e7:54:d6:c1:8d:a5:65:3e:b8:fa:5d:fd:3e:93:
05:e4:82:c4:6d:43:62:79:cb:00:79:79:2c:0f:ba:
dd:cd:f2:14:c9:d6:8a:07:d9:54:a0:3b:55:43:ab:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:55:95:75:27:B8:E6:8D:B8:22:C8:BE:AA:C6:FA:52:11:AC:A1:D9
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3c:3b:3a:f9:e5:63:f7:2f:4c:fe:7e:9f:a4:8f:cb:ba:2b:
7b:87:16:56:70:17:0d:a5:0d:5e:79:c2:b3:ff:ba:1c:06:1a:
96:d8:4f:95:18:1f:28:dc:d7:71:a6:43:2d:ba:0f:f3:e3:6f:
54:36:c4:2a:fe:27:92:3f:10:f9:be:d3:c1:50:f8:fc:61:0b:
22:a9:df:fa:84:eb:44:9d:23:a7:29:28:32:5b:4d:8e:f1:ae:
cd:27:59:03:d5:7d:89:d3:1c:a7:98:35:c2:73:97:57:dc:e9:
80:a7:0a:d2:4b:f2:a4:fc:5f:04:ec:6b:6c:55:d5:66:6f:cf:
a8:fe:27:92:31:f0:6f:23:a5:ee:6c:6b:c6:4a:b0:cf:60:2c:
cd:db:c7:26:78:5d:d7:45:35:d7:60:51:c2:db:92:25:37:ca:
70:98:fa:d4:78:03:46:86:d0:80:d0:3b:88:a5:44:1b:d1:83:
67:34:41:1a:c8:c9:df:74:ae:a5:4a:e3:a1:eb:eb:8c:61:d4:
cf:fd:39:0e:0f:f2:a9:63:0a:61:7e:c2:ea:b9:7b:9d:a4:f0:
97:49:c1:c2:21:15:48:a3:54:92:42:7b:f5:b7:b6:4f:a5:f4:
0e:8c:a7:05:e3:63:17:b3:d5:e9:90:d0:74:37:5e:99:95:36:
7f:7f:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:50 2025 by rpki-client