Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: 3KJXCKVD1Wvxybqor4BfwtqQ4De8cuMw0MEOHWpG5XA=
Subject key identifier: 25:C1:D3:22:54:4A:3E:84:2E:0D:51:9A:F1:A8:55:8F:53:AD:C8:28
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 0198D5BBFA322B0529904C58B9C0A5164A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0AD8
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: ZlglvHLO+La8FoZJafLS2CXq6Sw03hIEUZG5na4QXRE=)
2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fa:32:2b:05:29:90:4c:58:b9:c0:a5:16:4a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=25c1d322544a3e842e0d519af1a8558f53adc828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:08:ca:d6:8f:b9:49:83:94:4c:50:7f:c4:7d:
23:1f:90:47:4d:d9:92:80:8f:45:0d:13:4b:93:a7:
b7:e4:57:11:72:d0:4b:b1:8b:a0:b1:23:88:e3:e0:
55:a2:cb:15:f7:5f:b8:05:17:57:fa:fa:c1:a1:d1:
c5:eb:4c:15:c1:85:e0:3b:99:a3:64:16:9b:20:36:
3f:7b:41:e8:63:b4:a0:2c:cc:31:27:37:a6:ac:77:
cc:a4:c7:ab:4c:07:57:b4:8b:5a:e7:f6:5c:12:3e:
ed:a5:23:9f:75:a8:4c:d3:5d:ce:3a:c8:b9:ac:0c:
ae:17:22:98:ef:88:bb:ff:5b:8c:99:10:ed:94:87:
be:bb:26:16:0d:36:ad:6a:29:31:5c:26:c5:df:dd:
46:95:d3:69:f1:a5:40:a6:51:a7:9e:9e:e6:07:e0:
cc:b4:3a:5b:66:ae:19:b3:b7:bd:4c:3f:b1:70:0a:
35:53:c4:04:34:2d:72:94:87:27:9e:d7:31:f4:01:
f8:df:34:cd:37:cc:c4:c3:60:e6:02:49:c5:3d:79:
63:11:9f:e8:4d:82:47:1b:56:c6:a9:93:63:e0:45:
93:00:ee:d6:68:ae:9c:01:f6:79:fc:32:78:9a:21:
de:e6:27:6d:b2:11:ef:e7:51:1a:d8:39:02:ad:d7:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:D3:22:54:4A:3E:84:2E:0D:51:9A:F1:A8:55:8F:53:AD:C8:28
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ba:19:53:6b:05:fe:38:8f:9e:20:b8:d6:59:04:9c:c0:bc:
8a:33:32:4e:b9:33:50:4e:ce:67:f7:75:99:f5:c9:f0:03:5e:
ab:62:d6:3d:50:49:2b:91:ac:f7:de:50:6a:f5:13:0a:64:d0:
75:a8:40:4f:65:a3:43:63:2b:11:4a:39:a9:ea:35:f3:4e:49:
b2:3b:bb:50:a3:f5:d9:3a:09:d9:e1:da:3e:a2:de:e1:d2:21:
49:86:e7:a7:8f:f3:1a:d3:3d:06:8e:12:b9:79:28:82:cd:a5:
05:d6:4c:aa:c2:1e:7d:2b:8b:df:b3:10:ca:b8:49:4c:7a:ec:
eb:fd:9e:ae:8e:2d:43:87:4f:93:80:86:80:bd:fa:8d:5e:c9:
8f:49:6a:0d:3b:f5:9d:b4:d1:bd:97:b7:a0:6c:9a:39:73:a6:
4c:4a:0f:c8:cc:a5:44:4a:6f:83:1b:67:83:4c:f8:22:3b:41:
75:d7:0c:51:a6:95:9e:02:b1:b8:db:0b:52:87:f3:06:ac:d1:
31:64:c6:12:66:ff:c3:f0:ba:c5:c6:f5:c9:3a:6c:3d:ea:d4:
f0:7a:67:33:cb:a7:e5:63:0c:cc:e6:be:a2:66:9a:69:ac:fb:
6e:ca:12:4e:15:11:a2:75:31:26:ac:18:16:b4:53:6a:30:4f:
a8:59:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:23 2025 by rpki-client