Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: R0AYTkXhYdWopvWcmuzsdeS49fO9xIXnMUqpIxlQHwo=
Subject key identifier: A3:0E:8F:07:6C:AB:E3:00:FD:A7:20:9F:89:97:24:EC:E4:06:8A:D1
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 0198D8516E20E3B3E97B645950F3AB94C37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 1372
Signing time: Sat 23 Aug 2025 19:04:31 +0000
Manifest this update: Sat 23 Aug 2025 19:04:31 +0000
Manifest next update: Sun 24 Aug 2025 19:04:31 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: lTjoew1Q9EryoiZ9Yn6r/dQgRbAmRE9slcvY7XsZyQs=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:6e:20:e3:b3:e9:7b:64:59:50:f3:ab:94:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Aug 23 19:04:31 2025 GMT
Not After : Aug 24 19:04:31 2025 GMT
Subject: CN=a30e8f076cabe300fda7209f899724ece4068ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:93:d2:b0:b0:d6:8a:81:fe:c6:53:6b:ef:
ee:d4:54:d8:a2:bf:7f:d2:89:fd:a3:c1:0d:37:f0:
11:0d:c4:15:ac:23:54:ce:f5:1e:d8:f0:8d:ec:c5:
6c:78:a0:09:1c:d1:43:13:73:e1:e0:4a:7b:7d:10:
f4:24:80:01:6a:8d:3e:16:55:aa:73:40:21:7c:ae:
91:73:43:3c:53:62:ef:d0:b6:86:2b:d5:b4:1a:0a:
bd:5a:47:bf:d4:4b:39:37:89:4d:e0:f7:ce:ba:4d:
fd:49:a7:cb:64:4c:0b:50:47:e5:f1:e6:d4:18:1c:
b0:04:9e:b9:8b:aa:2a:14:37:4f:a7:88:49:f7:f2:
54:5a:78:86:94:28:d7:e7:77:96:04:ca:f0:a7:a8:
d4:ff:73:18:1d:23:bc:f4:74:7f:49:03:18:ff:0c:
e7:f7:1d:c8:55:25:fa:74:cb:fd:fb:44:87:50:85:
d9:4d:4b:2b:b9:88:ea:a4:20:51:93:66:89:4a:a8:
e1:e8:94:3d:98:85:14:cd:33:8e:38:03:a1:62:74:
90:12:c4:b0:af:98:e5:25:7c:d6:f6:4d:c4:3c:c1:
b0:d0:ff:35:23:17:20:88:6a:8f:1c:60:a1:1c:2d:
08:92:16:79:74:5b:49:ee:82:cb:84:9d:90:52:d2:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:8F:07:6C:AB:E3:00:FD:A7:20:9F:89:97:24:EC:E4:06:8A:D1
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8b:85:6d:55:98:46:9e:8d:4e:e9:96:c9:77:90:7f:9e:f1:
3b:59:00:28:ea:1b:1a:04:54:a0:4a:e9:79:08:5e:a4:dd:e0:
9a:42:2a:46:88:05:11:8d:a5:68:eb:a6:46:a8:df:11:91:dc:
f5:50:13:e5:4a:30:be:32:cb:64:f8:bf:0b:60:95:65:0d:86:
6b:3c:d9:a8:03:ca:a7:82:8e:6c:c1:0a:fa:e1:99:b5:da:35:
df:0e:34:43:b0:7d:34:ca:39:44:cb:c7:5a:9d:ee:b3:1f:7e:
4e:22:4c:89:6e:5d:e6:75:1f:a4:c3:aa:89:b0:94:89:72:2d:
00:43:e8:66:21:a4:a5:cd:53:bc:d0:92:73:db:8d:f6:2a:86:
34:7b:be:78:ab:4c:4a:be:37:fb:a3:6b:1f:9c:07:53:65:fb:
b8:7b:8a:88:91:3d:89:01:4f:c9:bd:3f:e0:c4:ee:fd:95:8c:
6a:36:79:ef:99:5c:fa:ed:04:b7:be:28:d8:0e:6a:33:1f:e5:
42:29:9e:fe:1f:e8:13:c4:e4:61:39:20:fb:10:92:74:28:48:
d9:e5:e4:1c:95:06:f3:99:8c:c5:5d:eb:1f:96:e3:30:f7:c0:
b5:39:52:f0:3d:fc:dc:1b:7f:13:38:66:97:9c:a8:54:83:53:
d0:4e:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:14:34 2025 by rpki-client