Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: MDFMLFqqLstG/CRcx+yCsTM2NairmLQ9NyAkAxxsQkM=
Subject key identifier: C3:92:68:71:1C:CC:BE:5E:95:EB:42:88:BE:38:38:17:79:22:40:C4
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 0198D8512AFA89CFB740E9942439C4057BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 19:04:14 +0000
Manifest this update: Sat 23 Aug 2025 19:04:14 +0000
Manifest next update: Sun 24 Aug 2025 19:04:14 +0000
Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: guSnbQNoK0LXfe2zDviyovDmRBGyfSV88xZcWiX+Roc=)
3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:2a:fa:89:cf:b7:40:e9:94:24:39:c4:05:7b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Aug 23 19:04:14 2025 GMT
Not After : Aug 24 19:04:14 2025 GMT
Subject: CN=c39268711cccbe5e95eb4288be383817792240c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:75:c9:17:f0:58:02:08:bc:52:3f:30:e2:
c5:fa:d7:fc:7e:d5:aa:c6:d7:36:45:1a:3c:33:30:
66:ca:25:79:a0:a7:4e:56:56:49:9f:09:fd:02:2d:
48:a9:83:b8:f6:26:37:92:16:cb:b3:ae:0f:fc:15:
71:39:85:9b:92:9c:d1:2d:cb:04:91:0b:f2:33:50:
71:4c:fe:1b:6a:3d:69:b4:19:1a:4e:81:18:04:4c:
9b:c9:fd:47:48:e8:1f:e5:e4:52:ef:96:f8:0d:69:
5e:19:16:f9:5c:2e:81:ee:b3:b4:4c:97:09:6f:62:
00:10:b0:c3:78:ce:7d:bb:0d:16:0a:95:d6:c3:78:
db:37:8a:9e:53:ef:98:a7:28:1e:17:63:fb:f0:5b:
79:5e:b3:93:7e:7e:c1:5c:c5:ff:f1:b3:1e:84:cb:
36:34:dd:13:c1:59:8c:8a:32:57:84:ee:9f:70:7f:
1c:64:da:d5:cf:2e:47:47:87:5a:57:49:ff:39:a5:
4e:c1:f1:67:06:e1:39:30:3b:8c:21:57:e5:0f:59:
46:1f:4e:b1:87:e4:db:65:0c:bb:4f:98:7d:76:02:
e7:7c:29:be:42:94:c8:74:5e:10:6f:e3:3f:53:24:
c5:ad:52:34:0e:cc:c9:a4:c0:91:2c:6c:68:bc:61:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:68:71:1C:CC:BE:5E:95:EB:42:88:BE:38:38:17:79:22:40:C4
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e0:d9:c3:15:2f:8a:10:75:c9:9c:77:88:fa:2d:45:99:5a:
ca:d4:40:0d:7d:64:5e:38:67:5e:e4:5b:4c:af:e5:8c:e8:b2:
95:4d:01:07:48:3f:03:4c:90:62:6a:da:cf:2c:91:aa:2d:c1:
0b:a4:b1:57:29:7b:72:3f:a1:ab:6f:7e:dc:16:cd:3f:90:c2:
b9:a0:9c:83:d7:16:b3:70:cc:55:24:1b:15:c6:e4:9b:ae:8c:
16:26:29:6a:00:64:79:65:65:88:8c:b1:f9:ee:31:00:23:90:
d2:ff:55:17:9c:76:bd:52:96:4a:d4:b6:42:5b:00:56:92:39:
05:23:09:74:6e:a1:ca:3f:fb:b2:fd:e7:f8:37:82:64:cd:5b:
f2:33:4e:8b:ab:8a:9b:ee:da:df:2f:ad:0a:6d:f6:52:76:6b:
4d:5f:d0:a8:e4:ce:41:ff:ac:9e:0b:23:79:a6:37:b4:9a:40:
55:bc:60:cb:d8:a3:a2:59:d7:ab:5a:8e:06:47:47:42:88:5f:
3d:16:bb:38:ff:b9:3b:87:00:c7:0d:5a:54:44:a1:6f:af:e1:
77:83:71:ab:ce:8c:eb:bf:a7:9d:70:cb:8e:66:63:d5:86:60:
b9:15:8b:dc:09:d7:8a:df:e2:5b:db:76:a7:5e:61:9c:37:37:
d3:1b:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:48 2025 by rpki-client