Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: nJ+ZM0boG57hNuabLk9nqtgz9usuTlhT0tYoslhsx4A=
Subject key identifier: BC:F0:9E:CF:AF:8C:A1:64:AA:AC:71:71:4A:6C:8C:41:1D:42:25:98
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 0198D65F75BEA648AA44951440CCB0E29FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0991
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=)
2: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: Ibx33g5kL0Se7TAEWAK5CtOl3HoZl5MhcXyGSiAnDYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:75:be:a6:48:aa:44:95:14:40:cc:b0:e2:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=bcf09ecfaf8ca164aaac71714a6c8c411d422598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:78:56:06:fb:b5:96:60:15:2c:bb:11:17:
b1:34:0c:56:77:bb:73:52:43:d7:69:d9:6d:d8:33:
fd:d0:f6:f5:3f:a5:04:3b:3e:f1:84:d0:e6:a7:1c:
e2:4d:3a:c3:50:54:0e:23:df:51:78:4b:7f:ad:6e:
aa:8c:57:c5:d6:66:1f:cb:f9:bd:91:2d:18:07:a9:
46:68:2f:eb:0e:c6:70:3d:93:ad:81:b8:2f:ab:19:
09:80:01:91:50:e9:6e:7f:5a:b9:19:7c:af:4a:02:
c8:9a:8a:04:8a:2a:62:8f:67:cc:cd:b1:0d:b1:92:
87:cb:4f:21:6c:2b:34:f4:1f:8a:47:fa:4e:b6:a9:
f0:1d:10:1d:e4:7d:cf:67:cc:25:2d:73:23:22:dd:
44:4f:f8:fd:61:dd:5f:76:46:2c:d1:a0:90:9b:b2:
21:0e:8c:7f:01:cb:11:08:d8:af:04:91:3e:2a:a2:
16:65:8b:ca:e1:76:cd:d1:7a:b4:54:90:1d:a7:92:
46:3c:bd:27:1b:d3:e3:c0:4d:de:0d:32:81:b9:ce:
66:9a:08:01:81:6e:d5:61:2c:a6:91:7c:cd:a5:fd:
41:bc:56:33:dd:f0:5d:ea:ba:5f:6c:5f:bd:49:fd:
84:c9:8d:6f:54:15:8a:1e:43:6b:01:df:8c:67:54:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F0:9E:CF:AF:8C:A1:64:AA:AC:71:71:4A:6C:8C:41:1D:42:25:98
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f0:55:a5:49:c2:21:06:f6:6a:06:e7:48:e3:88:8b:d5:4d:
14:93:85:20:19:bf:3b:af:c3:91:3b:ea:b7:18:54:e6:05:77:
d3:27:30:f0:c2:46:23:bf:24:4a:10:3d:70:7e:5a:76:2b:60:
4b:2d:93:af:eb:42:5c:91:3a:1d:ae:0c:93:05:1d:b0:a5:c8:
7b:6f:88:7c:fa:36:5d:11:19:d3:e2:3a:f9:09:30:e5:cd:3f:
17:25:d6:ae:4c:88:66:83:04:d3:fb:58:56:2e:89:dc:14:d9:
38:60:88:18:0e:36:14:0d:d3:63:ff:69:0a:81:e5:5c:96:36:
6a:20:a3:0f:10:67:c6:26:ef:06:2b:c1:23:58:f6:1f:f8:38:
f1:a4:4c:e3:94:23:15:d8:0f:62:a3:0d:1f:6c:bc:90:30:95:
99:0a:d3:f5:b7:33:3c:29:f6:97:69:7a:c8:0e:97:0b:19:3d:
26:53:f3:6a:96:b4:3f:95:54:15:86:e3:46:e4:97:94:df:e1:
62:e0:56:08:e4:99:dc:79:45:6f:9c:5f:a0:9b:d8:28:81:b0:
d2:f5:bd:d7:3a:6c:a9:b5:3c:d1:f1:07:60:d4:d5:76:e7:41:
b4:d6:76:1e:46:c1:59:a2:72:67:00:28:55:11:91:18:c4:68:
8c:69:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:00 2025 by rpki-client