Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: 3ijKJ51Hrr6qWNQ11EuVmY7R/djztD9x0t7juyX02og=
Subject key identifier: 1F:52:28:CB:2A:5C:EF:FD:B8:7B:2D:AF:9E:18:00:39:3A:BB:79:09
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 0198D54DD6959F49FA75EE244F987FB2F090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: 1nVpYP4Xyda2zRe/GXEg36OJ6SYg0Sk9gqNfiMBKJ40=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d6:95:9f:49:fa:75:ee:24:4f:98:7f:b2:f0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=1f5228cb2a5ceffdb87b2daf9e1800393abb7909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:50:da:97:73:cb:00:ef:58:1c:f2:5f:fd:34:
8e:c9:d8:25:c4:70:9d:65:aa:3b:25:30:06:f7:f9:
78:52:95:49:03:5a:9a:86:8d:aa:a9:a0:8d:ff:95:
11:0c:00:cf:dd:4b:75:13:f9:75:f2:fd:70:08:a1:
57:ec:75:b5:d0:7e:4c:b1:df:6e:47:c0:33:0f:7b:
cb:ae:4f:1a:7f:ae:28:24:75:59:17:f3:4c:c9:7c:
f6:c2:0a:75:3a:eb:73:e8:fc:d4:a3:be:c2:05:85:
f5:9d:1e:0c:da:5a:45:e8:04:0d:1f:be:8c:05:59:
1d:2d:f4:dd:36:58:1e:ac:3f:57:19:c9:ca:6f:0b:
77:f9:32:19:d7:b5:9a:de:1e:10:87:c4:23:b9:46:
5b:70:c6:df:88:e6:63:aa:bd:5a:c9:9c:a1:e5:e7:
69:46:76:5c:e5:02:86:2e:7f:3d:72:3a:5c:a8:ff:
c7:ce:56:ee:ad:6e:93:4b:84:3d:ba:89:0c:0b:a1:
b9:4b:75:1c:25:7f:7b:5a:df:a4:83:02:16:fd:97:
34:82:52:66:f3:11:b7:4e:f0:4f:f8:6a:68:ee:d0:
05:56:82:85:f8:86:a7:8a:15:77:fc:0a:4c:23:20:
20:c4:91:0b:73:bb:5c:95:5d:73:0b:45:5a:c5:79:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:52:28:CB:2A:5C:EF:FD:B8:7B:2D:AF:9E:18:00:39:3A:BB:79:09
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:61:b2:37:46:2e:1b:fd:9e:16:63:e3:0c:29:37:82:c9:20:
25:17:2e:5b:fb:e6:04:be:93:d0:e2:01:1e:f0:5b:53:1b:7f:
fc:4b:b5:07:91:c2:2d:24:ec:c5:51:b3:5d:2f:3f:16:55:82:
76:ac:11:e3:31:7b:ee:7d:77:04:df:a4:d4:aa:ec:af:c9:fc:
c6:fd:0b:3b:f3:5f:2b:db:dd:40:de:49:10:87:6c:49:8c:83:
11:eb:32:fd:14:10:19:af:dd:33:93:6c:21:8e:80:b5:f7:10:
cd:d1:3c:17:d9:de:23:0a:3a:3f:fc:42:de:6a:e1:e1:4e:a2:
2e:e5:a3:19:a0:89:4c:cc:c2:9c:44:b8:df:20:dd:9b:44:1d:
b1:ab:b1:7f:1d:4f:e5:4d:bd:8f:47:40:b4:4c:78:c5:4e:f9:
c3:7c:94:87:1f:be:87:bc:e0:13:49:99:33:9d:88:00:90:ea:
ab:fa:be:7a:67:80:49:43:90:88:2c:02:00:99:9c:ab:ff:d9:
3e:1f:b8:bb:35:62:ff:44:64:ad:7f:db:71:1a:d4:20:61:30:
61:fc:d4:e3:93:15:a9:df:5e:49:3c:21:12:50:b4:c2:22:9b:
76:cb:19:6e:3f:44:c1:45:da:88:be:c8:41:7a:1f:07:de:f1:
87:cf:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:40 2025 by rpki-client