Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: uTLMpqUTP7rlmeUfcjJIlAoOQBozbY8NGCXPKxJDWlw=
Subject key identifier: 52:80:66:FB:60:20:ED:F0:84:B9:9D:DF:D7:02:E8:3E:3F:5E:03:3E
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 0198D4DFEC91117A032CC92901296F05D1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: SEq1lmqLQMSlT0mKmO+lA06HRdGD/Tyq2TqnixTI2Lk=)
2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=)
3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=)
4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=)
5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ec:91:11:7a:03:2c:c9:29:01:29:6f:05:d1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=528066fb6020edf084b99ddfd702e83e3f5e033e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:a4:f2:07:d4:b1:9c:0c:20:70:63:a6:83:
7d:0f:4f:bf:85:2d:82:cc:ac:16:94:3b:87:12:d5:
be:9d:a1:92:e4:cb:e9:c7:96:2e:ad:d8:bd:4b:9a:
3a:1b:c5:32:44:b5:c2:45:5b:48:88:60:f3:25:e7:
4f:70:fa:a3:ee:8c:27:75:47:1b:67:bd:7b:b1:2b:
c2:82:b9:bb:9f:58:99:29:c8:0c:25:0a:97:e9:47:
81:63:d8:c5:c8:6a:ca:f6:78:90:e9:9c:7f:db:00:
24:c4:6b:fb:2a:61:b0:59:b8:78:2b:7a:d4:77:c6:
5f:ea:0d:d7:c8:07:a1:9c:7c:8d:49:4e:d5:5f:ce:
24:e1:a4:fc:eb:49:f8:46:2c:fc:94:40:2c:26:16:
ab:53:74:16:8e:ec:e0:90:0a:3e:4b:4a:ef:69:50:
89:10:ba:b2:d1:7f:9d:7d:56:b8:6d:db:18:d1:9c:
ac:57:9b:00:8c:81:28:c5:85:a7:16:0c:8c:bb:2e:
ad:36:7d:67:bf:0e:cd:86:ab:72:98:f9:61:54:1d:
b7:fa:05:50:27:26:87:b7:1c:bc:1f:60:d3:b3:d0:
cc:97:4f:91:c5:26:00:55:90:9e:45:4f:e6:3a:e3:
6b:d1:6a:cb:2b:00:7a:09:2f:0a:5a:0e:01:5b:ba:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:80:66:FB:60:20:ED:F0:84:B9:9D:DF:D7:02:E8:3E:3F:5E:03:3E
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e4:f7:27:81:6e:f0:3f:a2:8f:b4:b8:bb:07:56:25:fc:1b:
9a:34:c6:78:a8:7e:2d:0c:1c:47:68:92:34:e6:1f:0d:50:35:
e9:77:93:87:a3:6a:08:96:58:e9:80:7f:39:12:35:3f:70:75:
d6:46:a2:db:70:f9:1f:ea:54:11:f2:37:75:f9:de:db:ae:9b:
b7:cf:90:44:d6:34:89:57:e7:54:32:f4:5e:da:3d:53:b8:77:
b6:23:d3:8f:56:34:c7:22:8f:4f:df:4b:c4:b6:22:49:ef:4a:
77:5d:6b:33:35:52:25:b1:f3:68:48:8a:f0:ae:1c:a9:ab:e2:
c8:2b:a5:ec:fe:ac:b2:8a:fc:50:9a:8e:39:cf:8d:f2:3e:e5:
a6:7a:f1:e1:0c:2d:17:3f:ac:8d:aa:7f:af:ad:b9:b8:d2:8c:
64:a7:dd:93:2d:b7:e1:2f:bd:64:d6:f8:62:da:77:3c:f6:5d:
92:c3:d3:52:ee:58:f4:d9:05:7d:0a:9b:8a:a4:7d:51:55:18:
c2:82:f6:43:46:90:8e:cd:0b:ba:9a:01:96:98:59:ca:68:59:
cb:ac:bd:06:9a:97:32:97:21:3c:3c:58:ad:69:2e:f1:21:0f:
81:3b:5f:15:83:f7:14:e4:29:f9:10:4e:64:fa:c6:25:e4:03:
cb:73:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:54 2025 by rpki-client