Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: PnXkcxKn4dhmRbgu+d02o1j76/JH5aZhtxpcyCzGXfU=
Subject key identifier: 3D:3B:A6:A9:24:39:F0:C0:70:B6:20:00:51:49:92:3C:86:A1:B7:82
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 0198D65F9E24A5B3ADDA9DA3F3EFBF62EA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: i9lu8ZqEpWzL0bEtW79iX5m8pZakgBIAJdM+PMNk5zc=)
3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9e:24:a5:b3:ad:da:9d:a3:f3:ef:bf:62:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=3d3ba6a92439f0c070b620005149923c86a1b782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:9c:83:0f:e5:fe:cc:8b:28:af:9f:7b:f7:
02:48:fd:75:bd:28:6b:d7:bd:75:05:d4:a7:d4:65:
af:81:18:83:bc:c6:62:60:a5:85:54:f0:8f:da:91:
4b:b9:8c:cf:e8:93:ca:3e:c3:f0:f5:5f:9d:42:60:
05:07:d9:4a:7b:b8:8c:4f:1f:65:03:73:e6:05:d7:
3a:f8:59:41:2b:6b:29:35:e1:c4:91:94:91:73:6d:
e6:5b:c5:73:e4:e4:86:6b:d7:95:e5:61:1e:2a:2a:
8a:6f:09:73:f1:59:2a:4b:97:7d:ca:df:33:94:a9:
fc:03:92:65:f0:43:cf:12:eb:8f:50:6b:73:a5:e1:
72:1e:25:d3:64:93:91:18:84:90:28:ac:53:e7:32:
68:77:a5:84:2e:24:91:7c:cf:93:f7:da:43:a4:06:
f4:87:e0:8f:98:3e:38:15:66:27:a4:ac:95:c2:25:
11:38:8b:32:0f:00:65:5a:15:ec:b0:de:9d:f1:7b:
0f:db:0f:bb:d8:f1:23:2c:49:a4:1d:4e:a1:74:e9:
42:3d:cf:b5:4b:1b:a3:05:c9:a9:cf:29:c2:b7:43:
35:53:c2:b6:43:53:93:8b:e5:e3:a9:43:71:1d:e0:
67:2c:86:fd:a9:b1:d2:e5:1a:e7:95:5d:95:6f:1b:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3B:A6:A9:24:39:F0:C0:70:B6:20:00:51:49:92:3C:86:A1:B7:82
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:62:f7:c6:67:6e:5a:0b:ea:7d:62:1a:c0:2e:0d:e8:20:56:
37:8f:31:e8:00:6f:8b:d6:50:2b:51:98:a9:b2:17:1f:1b:4e:
8c:87:a9:09:6e:c7:ab:d7:a9:76:a6:06:bd:22:a4:4f:fc:48:
49:39:d8:b2:b4:e9:20:74:2d:71:cb:91:4a:96:3f:8d:18:b7:
c0:c6:7b:7e:33:c8:43:43:a3:8b:a3:b4:60:7c:a2:68:4b:88:
2a:f9:dd:df:b0:84:73:ff:aa:d3:00:b5:50:46:26:55:52:1c:
09:90:b0:85:ee:de:0f:11:73:92:25:26:93:f4:a9:b1:78:82:
bb:77:be:70:11:dc:bd:c6:cf:1d:cf:1c:e4:02:d9:29:7f:06:
33:52:97:1e:d3:98:a4:6a:8b:6b:89:fe:98:7d:4a:d0:0c:43:
93:ff:1b:dd:ff:4f:cb:2d:e7:91:95:67:70:c4:a7:d4:4d:f1:
b6:e9:6d:af:af:01:d7:ce:da:2b:d1:aa:ff:ff:f3:80:7d:1d:
25:4b:78:ec:04:55:f7:11:5a:ca:a6:06:7a:96:e4:d7:4a:af:
36:c0:73:ce:96:d3:28:22:1e:29:c6:3e:18:0f:73:db:16:c8:
65:46:14:42:69:9b:b2:e1:a3:7a:0d:8e:70:c2:42:3f:40:a4:
47:ca:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:20 2025 by rpki-client