Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: 3QAzrUBq3wObbFY3znhak9guxEojFTuOfzr7LSxIgfc=
Subject key identifier: F9:36:CC:31:9A:5B:29:7F:DA:E3:E2:F9:A7:38:12:D8:10:16:B9:40
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 0198D54E4C8DA807F31D46F9874ACA340414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 01A3
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: wg7rG6a2JYW8shN/geOrxB0VRdRaHFk/WLUKUbbrmIM=)
2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4c:8d:a8:07:f3:1d:46:f9:87:4a:ca:34:04:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=f936cc319a5b297fdae3e2f9a73812d81016b940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:f2:07:42:a3:b1:d1:3a:8b:6c:df:eb:ec:
2a:f9:df:03:39:ce:74:0e:91:86:74:aa:60:f1:2f:
ec:5a:f1:44:72:1a:85:b0:ae:2b:c5:cd:b9:d7:72:
2d:9c:77:7e:84:c3:d1:2a:b1:00:77:e3:7e:87:b5:
68:1e:86:e4:fd:b9:2d:b0:2c:c6:3b:6f:6a:f8:fb:
98:73:f8:4c:77:fc:c1:ef:fb:e4:99:f7:fb:5b:f6:
72:44:50:91:9f:5a:09:2f:30:91:b0:84:3d:af:0c:
a8:9b:43:52:c0:89:15:0e:d4:70:fe:03:91:a0:79:
81:34:75:ee:5e:10:cb:9b:86:0b:d3:43:4f:a5:e4:
6e:fd:f6:17:24:cb:a6:af:fe:f4:77:07:23:47:a0:
fb:8c:d7:6c:de:7b:a5:8c:fd:87:38:2d:1e:ab:39:
b5:5e:f2:62:00:bb:7a:2d:18:75:f0:48:3b:34:f5:
ee:d8:1f:01:60:61:2c:8b:72:d6:73:f3:3a:3e:e2:
4f:76:6c:df:ca:aa:50:e6:b3:5e:54:b2:45:b6:b5:
59:09:ae:e7:8e:98:29:06:6b:0a:77:c2:7f:d8:43:
d1:80:d6:3b:d7:a1:4b:0c:9d:a6:c0:0c:da:c3:02:
bd:e9:d0:64:a1:d6:69:fc:31:06:c2:9c:80:16:29:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:CC:31:9A:5B:29:7F:DA:E3:E2:F9:A7:38:12:D8:10:16:B9:40
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:ca:d1:f2:8b:73:6f:76:f8:ad:95:9a:a5:9d:7d:23:e1:
76:6f:72:22:0b:b7:66:0a:c4:f9:47:04:a4:e7:53:29:3b:d3:
fc:cf:2c:c8:21:00:a5:ac:9c:94:cb:8e:bc:ae:d2:81:75:a5:
e2:04:49:01:28:9c:8a:cc:86:86:ac:f5:86:c8:51:b0:22:51:
fd:71:1e:08:9e:6b:aa:5d:51:4a:05:6b:ab:69:da:4b:c6:11:
88:87:61:64:64:07:50:c3:d7:b4:47:cd:9e:9f:83:2c:64:d9:
64:f1:bc:e3:0b:ad:49:71:9e:da:71:44:5e:7e:69:77:26:62:
10:e1:78:1b:67:1e:19:75:30:d0:7d:f3:ad:46:2b:33:f6:20:
93:03:f0:f4:7c:dd:a2:83:a2:8f:7a:ed:e9:26:d4:03:67:f8:
f2:1d:3d:e4:2d:b2:27:7e:b3:65:2b:df:07:16:3a:77:a1:1c:
3d:f4:00:57:57:8e:e6:cf:45:eb:f2:1e:68:d0:21:6d:ee:3b:
f7:9d:ac:51:34:64:24:2a:1d:64:c1:d5:9c:de:f7:db:80:1b:
f2:30:fb:a9:c1:d2:ca:47:87:4d:cc:e0:1b:78:a7:71:9c:5c:
3f:fd:83:c9:11:21:e1:5f:fc:e6:8f:25:2e:6c:79:f2:72:91:
91:6d:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:16 2025 by rpki-client