Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: Ts/e6j62wFr/B8xW/5LIBxSwJtWHAfgqwiMmVL46/hM=
Subject key identifier: 43:A4:1F:6B:6F:3F:E3:03:56:5B:E0:3F:B6:2D:5E:5C:87:AC:EB:E7
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 0199319152CEBBF7AA40661099D05E0789C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 03:00:31 +0000
Manifest this update: Wed 10 Sep 2025 03:00:31 +0000
Manifest next update: Thu 11 Sep 2025 03:00:31 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: 4tVUz+3y5msL7eguODKZppv3MacClwM7ZRfRXJaz0M0=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:52:ce:bb:f7:aa:40:66:10:99:d0:5e:07:89:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Sep 10 03:00:31 2025 GMT
Not After : Sep 11 03:00:31 2025 GMT
Subject: CN=43a41f6b6f3fe303565be03fb62d5e5c87acebe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:b8:ed:1a:fb:87:32:a6:ab:bd:37:f0:35:
59:35:2f:14:ad:25:fd:cd:15:24:57:eb:ba:fa:99:
99:5f:a7:5a:24:a5:db:2f:f4:2d:fb:ba:77:64:79:
02:af:b4:c8:ae:2d:c3:c7:a9:65:22:70:5e:3d:13:
53:da:c6:41:69:0d:87:20:8b:36:c0:1f:19:b8:12:
1e:3c:51:53:ed:c0:33:83:7f:7f:ee:eb:f5:30:46:
b1:f0:9c:70:4f:b1:1a:a5:24:da:ec:15:26:55:91:
4f:3e:52:79:67:47:7e:39:54:fd:d8:3e:71:61:e4:
49:65:00:b6:73:f8:2a:a9:45:5d:fc:6d:cf:aa:c6:
33:b9:2b:d7:46:12:8a:3a:c6:e0:0f:c5:dc:70:d0:
7a:9b:7d:d6:75:93:5d:41:1a:cd:9e:4f:d6:1d:13:
e6:fd:31:eb:78:8b:18:c5:cc:88:0e:4f:77:11:72:
1c:4c:bc:25:1e:40:6d:10:d0:cd:4b:3d:a5:06:7e:
5c:ee:e3:ce:62:36:7e:be:17:bc:4f:8f:33:3e:03:
57:9c:16:0b:59:ad:69:ec:f5:14:6d:ad:71:56:aa:
2f:f2:18:9d:98:0c:a1:27:2d:18:d0:36:cb:54:5d:
ec:f1:da:54:b4:df:70:f6:73:40:36:db:fa:36:b3:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:1F:6B:6F:3F:E3:03:56:5B:E0:3F:B6:2D:5E:5C:87:AC:EB:E7
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:7f:e8:47:eb:15:0f:fb:50:8d:02:2b:1e:eb:65:93:b8:
6c:96:4c:53:79:8f:2c:34:04:ef:68:f9:a5:27:98:1c:9d:d4:
1b:49:55:0c:5e:bc:3d:2f:70:14:d2:34:54:8d:a0:e6:f3:6e:
f1:7f:1d:87:ad:29:e5:f4:36:f1:3e:76:9c:5c:c6:6d:41:cc:
0b:f3:df:34:f5:64:ea:2f:bd:59:e7:d1:a4:2d:70:1b:27:43:
72:3a:64:94:d9:e5:1e:82:63:7a:d4:e9:dc:61:e5:49:eb:98:
bf:c0:32:db:80:45:dd:c0:9e:e3:bf:07:f8:c8:07:57:19:7a:
e1:1c:63:c4:25:86:0c:75:e8:16:a5:30:a5:e1:27:bb:14:6f:
bf:32:29:d3:61:ed:51:de:66:3f:df:d3:76:99:83:bc:98:13:
69:41:d6:8e:dc:3d:c2:5f:c3:c2:9c:c3:ba:12:2e:68:b3:55:
a7:b0:2d:e6:07:1b:73:41:16:98:59:f6:7c:68:76:20:d4:22:
5e:02:aa:4e:73:6d:91:08:92:51:b6:3b:fb:c7:ef:f7:45:ed:
8c:b6:d2:02:bb:40:c3:aa:34:2b:81:60:6f:9b:c5:5e:33:c1:
99:73:59:57:70:e6:15:c3:5c:8b:80:75:68:e7:69:51:c3:61:
77:06:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:05:56 2025 by rpki-client