Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: jsF2DuIBboZf5dvHxYjHKZ4tyyzZTVyT/dLOEm3Kox4=
Subject key identifier: 53:4E:F6:9F:68:34:29:90:2C:56:34:D1:BF:23:89:49:95:83:D2:D0
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 0197B77CB6C45B378C02C6431BD4DEECF0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: fgcDYLX0i3Q2keTHfZol/cdCOlIL+llS1dgzOUFkLmA=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b6:c4:5b:37:8c:02:c6:43:1b:d4:de:ec:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=534ef69f683429902c5634d1bf2389499583d2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:14:89:38:34:34:6b:ce:9b:f7:0f:92:3f:
02:69:5c:2f:c9:73:cf:92:44:51:aa:99:4f:aa:db:
44:ee:30:c7:d5:82:3f:15:8f:64:e1:3e:29:fe:e7:
f5:9b:2b:a0:e3:15:23:0f:66:b5:d7:ea:af:87:5f:
08:9a:83:fe:88:a0:ee:df:ab:07:55:9a:4d:0b:bf:
bd:a2:26:b1:00:e4:23:b0:0f:36:01:eb:73:4a:da:
0c:0e:ae:b7:b2:25:c7:22:64:54:a8:92:3b:6c:fc:
24:fa:44:12:95:df:44:fa:4b:22:b9:5e:80:f1:56:
70:40:56:ca:e1:4f:46:cc:60:0f:18:7b:a9:46:28:
17:2c:b2:01:23:03:2d:d2:bc:a3:5c:24:dc:0f:09:
eb:85:fa:6e:01:26:e4:53:74:50:6c:93:b2:84:dc:
2f:d4:7b:ca:8f:71:64:96:e0:6a:39:c2:cf:05:ec:
a2:5d:c2:83:b8:4a:85:eb:1e:27:ed:fd:aa:9f:7a:
6c:b4:59:f5:2c:38:65:41:28:72:69:96:27:b0:b1:
47:b0:fc:e9:7d:b0:3f:e1:7c:21:b8:51:c7:be:e7:
7c:29:8f:7d:2f:52:53:c3:0f:a1:e0:55:d7:d6:0c:
10:f9:fc:bc:ab:2d:81:c7:58:d7:c5:6f:fc:05:11:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4E:F6:9F:68:34:29:90:2C:56:34:D1:BF:23:89:49:95:83:D2:D0
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:fc:80:79:10:61:83:69:55:e5:59:93:f0:57:98:60:36:
36:d1:fc:82:c0:5d:30:b7:09:8f:a4:1a:b1:1f:b8:9e:53:d9:
db:f9:de:98:e2:17:60:5e:c5:75:0b:df:f9:53:d8:df:29:2c:
6d:86:cf:73:e3:02:bd:51:90:24:eb:a6:36:58:1c:d7:95:bc:
71:de:31:63:ef:08:b7:0a:33:af:4c:9b:4c:ac:34:7f:49:f3:
e4:b8:08:c6:11:a8:ca:43:6c:bf:28:9c:88:7a:ce:be:7c:e6:
6d:74:67:f1:b7:37:66:63:67:41:45:e3:9f:9a:44:6d:c7:fa:
a0:6f:7c:ba:59:b5:11:71:21:12:20:bb:37:c3:ee:a4:df:f7:
bb:9e:1f:45:e9:6d:2f:12:2f:11:a5:90:fe:59:cc:05:42:de:
4f:ec:73:d3:15:5c:ac:cb:90:ea:fc:52:4f:ab:66:0e:e8:b8:
18:6d:86:9a:12:36:8f:0f:8d:0e:36:b1:be:c4:e1:a0:1d:a7:
73:8d:32:7a:4a:57:b9:ab:b2:84:de:1a:28:31:5a:5e:29:c3:
ae:9d:85:db:81:99:92:74:81:b0:b2:e0:b1:b6:a7:43:cc:4f:
0b:d9:d2:6e:3a:bd:d5:7a:64:d8:9f:fa:aa:e2:85:7b:88:61:
5b:1e:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:36 2025 by rpki-client