Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: NQIPO9tVlOwt4nH7U+pRFnstN9QeFPYGCYMIfBalvQw=
Subject key identifier: AA:34:BD:D4:47:F0:D8:6C:1F:EA:ED:31:98:15:2D:27:E6:15:35:E2
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 0198D5BC5D959AFC3285A0F133E6523E8BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:28 +0000
Manifest this update: Sat 23 Aug 2025 07:02:28 +0000
Manifest next update: Sun 24 Aug 2025 07:02:28 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: esDTLPQ+Ds/8New8dWmmsyH6779RAtENTJavcAzVpd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:5d:95:9a:fc:32:85:a0:f1:33:e6:52:3e:8b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Aug 23 07:02:28 2025 GMT
Not After : Aug 24 07:02:28 2025 GMT
Subject: CN=aa34bdd447f0d86c1feaed3198152d27e61535e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:f1:9b:31:51:8d:f0:ad:ff:ff:42:26:22:
0c:66:10:f0:90:47:59:09:09:fa:4a:58:f7:e8:d9:
a4:cb:1c:6d:be:85:c7:33:e4:b6:81:74:29:3b:8d:
a2:22:88:07:47:85:a5:7f:53:71:61:82:a5:20:a1:
d1:d0:d9:aa:43:4d:53:46:84:d9:a4:54:fc:2e:5f:
40:ec:7e:28:96:34:68:f5:df:8f:21:00:ec:0e:0b:
ea:58:75:73:e0:5d:53:e7:9b:19:7d:82:19:38:98:
bb:e0:9d:c5:28:36:4c:f4:c6:a4:2f:78:0e:fa:92:
98:b2:12:db:76:fd:88:dc:36:96:7f:e9:db:c3:58:
3d:ff:09:1e:2f:fc:28:b5:00:f6:52:07:bf:ba:33:
0f:12:f9:2e:5d:0e:57:d2:3c:f3:c3:2e:15:00:75:
f8:bc:e6:71:ef:d5:2a:81:ac:2a:90:9d:06:f2:09:
99:4a:b0:a3:05:21:7d:5b:fa:aa:28:3f:1b:8d:5d:
bc:33:54:09:ab:b3:d2:9a:58:2e:94:89:20:c7:d1:
43:7a:56:38:1e:8c:6a:e9:21:da:fe:20:12:44:87:
47:4f:fb:95:e1:05:22:ff:8c:c6:0d:8f:b7:a5:85:
f7:cf:24:37:75:bd:60:f0:10:c3:aa:fd:01:38:d2:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:BD:D4:47:F0:D8:6C:1F:EA:ED:31:98:15:2D:27:E6:15:35:E2
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:9a:7c:31:61:1b:7a:63:65:c8:d8:60:99:83:f9:7b:d4:
56:e5:3c:85:7b:85:17:0b:fd:bc:2f:79:8e:ee:2f:c9:4a:d7:
03:a3:70:b5:70:dc:7f:95:40:06:67:af:a8:a2:df:0a:13:cc:
5e:48:c4:94:ba:ea:28:a4:32:23:9a:cc:1b:b6:ea:da:93:46:
0e:8b:41:2a:62:2a:ae:0c:41:58:58:3c:94:8d:8b:9a:4a:c1:
b1:9a:d0:8c:be:d2:bf:f5:a9:b5:11:3c:0d:8c:b2:5c:67:15:
78:52:73:b1:45:1a:c6:de:56:a2:40:07:a2:a0:94:47:a9:79:
3d:a2:5b:73:af:8d:90:51:30:9e:c9:a3:33:0d:da:b8:e8:12:
77:97:0e:13:1a:a3:91:21:f3:de:e4:4a:7c:f3:c3:d0:a7:b9:
9a:47:14:8c:58:99:bb:69:a1:79:c1:46:98:88:00:74:a1:84:
7b:3d:71:9f:0f:88:d2:cd:27:62:5b:bc:fe:f8:25:87:b8:68:
ff:4d:bb:64:ba:70:2a:98:bd:29:ab:be:60:5e:a2:1b:70:f9:
b9:ba:31:64:fa:e4:68:cb:a6:9f:bc:f6:cf:51:19:72:23:49:
bd:61:42:a4:72:1c:72:79:cc:73:1d:34:f6:2f:09:ff:f2:f8:
f8:3a:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:38 2025 by rpki-client