Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: k/O4Vk3Y8sy/WM6Tnq7Vn++1Qk1Ge1q5XCvSHB3eZGo=
Subject key identifier: 6A:13:EB:53:B4:C0:88:19:CB:B4:8D:35:90:B9:D6:31:11:2D:DD:34
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 0198D4047184302EA5B11BD16171BE9E5CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 05EF
Signing time: Fri 22 Aug 2025 23:01:57 +0000
Manifest this update: Fri 22 Aug 2025 23:01:57 +0000
Manifest next update: Sat 23 Aug 2025 23:01:57 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: EJP+YjTuHG/bN/hkOxuBo/+6D3Oq3kwulyldIW2QjTo=)
2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:71:84:30:2e:a5:b1:1b:d1:61:71:be:9e:5c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Aug 22 23:01:57 2025 GMT
Not After : Aug 23 23:01:57 2025 GMT
Subject: CN=6a13eb53b4c08819cbb48d3590b9d631112ddd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:ed:59:bf:cb:97:d6:23:8b:1c:2f:90:4f:
dc:22:44:14:73:e8:01:ea:84:11:18:60:45:62:00:
a2:a8:b6:88:de:f4:13:01:4f:47:b5:a1:77:5e:8c:
91:13:a5:95:d9:1c:87:83:3f:f4:d2:74:52:b1:cd:
ff:22:11:7d:84:61:62:26:7d:d3:20:d6:71:d8:67:
2a:f9:25:f0:d9:8d:67:89:79:49:0e:5d:a4:dc:36:
91:8b:39:12:67:72:52:b7:9d:92:4b:e5:71:7b:3b:
08:55:0c:5a:38:d7:6c:7e:9f:a9:5b:cf:de:8a:2f:
67:52:e0:18:1d:ad:d8:0e:21:33:d0:82:26:90:17:
47:ce:65:cf:4d:61:ec:c2:bf:a2:d6:d6:e0:10:15:
b9:21:ac:24:9b:63:ba:c8:9f:65:a6:e4:2a:22:70:
01:c9:76:28:dd:18:04:16:7a:48:ee:62:fe:7e:4a:
3d:10:3a:f3:dc:3c:0b:bf:aa:9b:55:15:2b:7c:49:
5e:84:25:15:85:ff:e8:b8:f5:53:53:cd:23:73:cd:
2f:07:57:96:2b:0f:c9:0f:59:04:07:bd:9d:04:ac:
b6:60:e5:e9:17:13:cb:73:af:d6:59:db:da:5e:9f:
b0:3a:3a:bf:ff:ca:62:13:47:5c:b7:5b:62:6b:91:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:13:EB:53:B4:C0:88:19:CB:B4:8D:35:90:B9:D6:31:11:2D:DD:34
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:18:45:ac:81:c7:09:bb:41:6f:a2:fa:38:f4:05:5c:c3:62:
93:70:8c:72:60:5b:a0:77:8c:84:de:4b:eb:5a:21:00:a9:07:
9d:f2:53:32:72:d8:73:f0:3c:cc:b9:d6:d8:22:4b:8e:eb:66:
fd:58:22:2b:a3:b7:ff:d0:51:69:65:5d:1d:27:78:d6:65:39:
96:6c:fb:f2:e3:76:57:fc:f2:4d:42:cc:34:e8:e9:6f:ba:74:
5d:0b:8b:c5:89:71:f5:1e:e4:35:a6:06:63:ee:7f:4f:be:b8:
48:69:99:fc:43:ea:1d:8d:44:c5:09:3b:56:65:e3:38:61:d6:
1e:bf:fd:30:bc:dd:1f:1e:dd:59:08:c3:5c:33:92:1c:5f:c6:
a0:f1:ec:1f:b2:f7:e1:8e:cc:68:3a:eb:82:91:c0:a5:17:e7:
c6:05:56:36:c1:bb:32:f1:c1:50:6d:ba:9b:15:10:6e:aa:03:
dc:c4:7f:01:86:a2:09:63:ad:c3:eb:00:11:51:d8:ec:b0:36:
13:a8:38:6d:0a:a6:8b:e8:a6:d0:7a:0a:19:16:fb:d5:27:91:
7a:69:ee:de:b9:41:8f:9a:a2:ca:73:74:2f:df:4c:ff:1f:c3:
56:54:d0:7c:d3:36:dc:25:d1:07:43:5d:67:d4:35:39:f7:7b:
ee:1b:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:06 2025 by rpki-client