Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: oA8+1s8SSa+Gt/8fuvPWSEVlYR2toaJ4g0xzuXUwerU=
Subject key identifier: F1:D4:8D:3B:0F:66:6A:58:96:74:42:36:B4:37:CE:C9:3E:FC:A7:63
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019935006AE27F34DD6A05A1714D32C410D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 19:00:43 +0000
Manifest this update: Wed 10 Sep 2025 19:00:43 +0000
Manifest next update: Thu 11 Sep 2025 19:00:43 +0000
Files and hashes: 1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: F0ACreR7jZiByPtrqTRGAsQBEmIrYJvvX376PUyOMj8=)
4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:6a:e2:7f:34:dd:6a:05:a1:71:4d:32:c4:10:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Sep 10 19:00:43 2025 GMT
Not After : Sep 11 19:00:43 2025 GMT
Subject: CN=f1d48d3b0f666a5896744236b437cec93efca763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:ae:a6:dc:d8:9d:c4:8d:2b:67:bb:c7:40:
e3:88:2e:47:b0:8f:04:2f:74:7f:94:26:68:0c:29:
97:38:57:9c:81:0a:66:03:37:b8:1e:54:37:46:f8:
ab:27:ae:37:57:78:32:ad:fd:86:3b:18:d0:6c:aa:
4c:e3:15:2b:30:47:3f:38:94:fe:ac:56:16:53:8c:
67:e9:ed:ac:74:ba:65:fe:02:cd:9d:bb:05:0a:36:
70:4b:37:19:fc:e2:ef:23:e1:e1:2e:79:6e:75:90:
23:b1:70:e0:a7:d4:f0:e3:17:8e:9c:6d:cd:65:d3:
b5:15:82:ee:dd:2d:a4:77:dc:53:0d:f2:2e:b6:d9:
5a:5d:dc:64:fe:46:62:e0:1e:a1:a8:df:b0:a3:c2:
de:e0:7e:69:fc:6c:52:63:33:99:9f:3e:9f:87:9c:
28:0a:a9:ff:1a:d8:f1:a9:29:26:30:f4:c8:ec:0c:
5b:b9:18:a0:01:b9:c8:ab:da:51:a4:14:57:c2:79:
a0:e6:18:c7:71:fa:d5:c3:6e:c4:ba:c3:9e:d6:2d:
29:48:bd:12:40:f9:09:ff:fa:f4:b0:9b:8b:8b:ef:
50:35:dd:a3:e7:6c:33:71:f0:d7:46:c4:c1:9a:bf:
99:88:b7:a8:7c:b4:c6:f1:2a:ed:77:41:81:a9:8c:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:8D:3B:0F:66:6A:58:96:74:42:36:B4:37:CE:C9:3E:FC:A7:63
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:44:f6:d6:ed:02:f3:aa:84:2e:02:60:71:ba:40:73:db:0f:
d5:33:1a:91:eb:3c:c6:dc:76:69:37:9c:e8:1d:47:26:f5:d1:
5b:bd:7c:f3:77:dd:66:fc:26:38:89:f7:24:ae:cc:da:1d:93:
7f:e7:2c:f0:f4:6a:b6:8d:6e:fd:67:f9:0c:68:dd:d0:19:d7:
e7:3c:7c:a6:aa:8b:f9:72:f8:f2:22:39:10:73:5e:87:33:0c:
83:cb:02:b2:41:4e:7f:26:6c:ea:78:e9:79:6b:4c:7e:08:e3:
0c:43:97:64:37:ad:cb:ad:21:de:3d:39:41:ef:cb:66:74:e0:
72:f2:30:13:04:94:7d:7d:33:ce:e4:b3:61:70:a0:cf:bf:e8:
17:fc:e4:1f:b9:1c:fd:ec:11:0c:52:07:c6:12:8f:8e:de:b7:
0a:08:fa:3b:7c:f6:d2:c7:4c:d5:2a:35:c7:6b:f6:b6:dc:6c:
fd:d9:5a:a0:b5:36:24:ca:32:7e:9a:f8:65:60:5a:1a:a9:96:
31:00:6c:c7:e6:da:a0:ff:9e:13:b7:9b:fb:d2:4c:0c:1d:c4:
7f:1c:ae:65:b3:84:a1:2b:d3:0e:a2:03:d8:42:61:0a:02:12:
4f:ed:d2:8b:bd:7f:e2:e2:ed:e3:24:4e:b9:38:e6:42:dc:7c:
8c:94:06:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:58:26 2025 by rpki-client