Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: opzOUzz4YSwlWG2MFQff1U28MV2s3JGMmFiHdBT1wTY=
Subject key identifier: 94:50:2A:F0:3F:62:AF:B2:F4:DC:91:36:C3:AB:AC:FE:98:DC:09:19
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 0198D8F2D0013422DAB119484E080E2EF9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 22:00:48 +0000
Manifest this update: Sat 23 Aug 2025 22:00:48 +0000
Manifest next update: Sun 24 Aug 2025 22:00:48 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: oJ086d0pqgkplFL0Qm6ymfjm5EeG4lMvzOEz2DUfVvU=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:d0:01:34:22:da:b1:19:48:4e:08:0e:2e:f9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Aug 23 22:00:48 2025 GMT
Not After : Aug 24 22:00:48 2025 GMT
Subject: CN=94502af03f62afb2f4dc9136c3abacfe98dc0919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:2c:81:22:9e:27:82:33:b9:b4:c6:a1:eb:
95:e4:1e:86:1c:81:27:bd:28:f4:52:0a:d6:56:6d:
72:e6:97:62:1d:46:bc:ba:67:b0:f5:bc:6c:b1:db:
87:e7:0d:8f:53:f8:ff:74:55:7c:8e:6a:67:41:37:
f0:2b:6e:58:55:25:3b:73:e9:29:2f:d9:dd:14:ee:
c6:64:23:d7:08:fa:33:cd:24:91:91:e9:25:d2:9f:
24:d5:ab:2a:88:13:3b:e6:a7:f1:e4:e8:db:0b:9b:
d7:c2:0c:f2:33:84:b8:6d:b5:72:8b:b0:92:73:d3:
0e:c2:24:07:e0:bc:b0:38:80:52:46:6a:75:f8:57:
82:a3:f3:85:53:d0:81:6e:38:3c:fc:1c:50:d9:87:
fa:14:e2:0a:f7:df:13:fd:71:18:d6:23:c1:74:ba:
05:60:19:d0:da:b2:df:0d:27:a8:63:8c:e5:f0:bc:
d1:f0:2f:36:21:cd:3d:74:68:6a:d2:b3:76:56:e5:
30:bb:f5:2e:a3:de:73:88:26:57:42:b6:a2:f6:9f:
94:b1:72:47:5c:02:58:ea:7a:8a:a4:64:0c:72:58:
e8:8c:d5:83:88:50:69:be:15:d0:4c:2b:34:1f:d7:
b2:a8:c4:ec:1f:2b:3c:7b:a2:ed:f1:be:79:d1:10:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:2A:F0:3F:62:AF:B2:F4:DC:91:36:C3:AB:AC:FE:98:DC:09:19
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:77:38:e3:70:23:78:37:42:ed:52:ab:c6:e5:dc:69:fd:8a:
c7:8c:c3:f0:e0:d8:82:fc:b4:69:03:2f:12:d7:de:68:f0:f5:
b7:5f:13:63:d6:2b:8d:1c:ce:7c:da:e1:d1:ff:1c:43:dc:2f:
f9:fd:57:77:2c:b9:4b:c4:ff:1a:9c:70:7f:67:71:2c:0e:35:
fa:db:02:e9:1f:cc:b8:26:bf:9a:ae:08:0c:01:e0:c3:83:80:
7e:f8:63:a1:d8:26:ab:d4:55:0d:a6:a4:3f:c5:67:d7:4f:bb:
a9:6a:8b:9d:11:d9:2e:af:10:0a:09:63:49:8d:43:2b:f5:b5:
f2:01:28:a9:b2:c2:00:bb:ce:a7:bb:bd:36:ee:bc:0a:a8:03:
37:82:92:e0:e5:1b:95:b9:ca:dd:2e:6c:a6:10:84:ee:08:7f:
da:69:b4:a9:a4:0d:1a:6f:e0:f1:81:81:95:1d:5d:9e:0e:72:
29:70:52:06:a8:91:6c:e9:ac:5b:4f:a5:26:be:97:23:56:03:
77:d3:a0:4b:a0:ed:26:44:50:4b:ae:db:da:16:35:b8:00:6d:
f9:b7:e1:81:7e:f1:8b:59:bd:1e:f8:c3:2f:25:09:fc:e3:41:
e9:92:01:01:08:ef:f0:80:9a:d5:aa:1b:59:9f:82:b6:b3:d5:
61:31:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:45:25 2025 by rpki-client