Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: Jo/01iB6i345sWDRm+Hp4kiXmGJB1eJ+QXV7EbJpHpE=
Subject key identifier: 98:E2:EA:5B:F4:AA:21:5F:B8:3A:97:EA:99:0B:91:55:7A:68:C6:D5
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 0198D73B0B3FBD44CA69AD1D20D9BBEB650A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 01A5
Signing time: Sat 23 Aug 2025 14:00:27 +0000
Manifest this update: Sat 23 Aug 2025 14:00:27 +0000
Manifest next update: Sun 24 Aug 2025 14:00:27 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: B988XC7Tch3gaL+OQ3olCxKgS9o67M52OHLu7cDkd4A=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:0b:3f:bd:44:ca:69:ad:1d:20:d9:bb:eb:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Aug 23 14:00:27 2025 GMT
Not After : Aug 24 14:00:27 2025 GMT
Subject: CN=98e2ea5bf4aa215fb83a97ea990b91557a68c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:99:06:97:c7:10:c0:34:d4:57:fa:82:ef:
62:ab:8a:52:59:6b:c1:7e:6f:bd:37:0a:f1:ba:57:
22:14:1f:ca:96:53:1b:f3:c5:85:72:6e:6e:fb:af:
6e:4d:19:7a:8d:5e:d8:8e:23:dc:18:27:9c:57:38:
3a:85:06:59:21:60:81:0a:5e:8b:fc:0a:ab:7e:aa:
98:89:29:eb:ca:d6:81:5e:39:37:c0:73:39:15:3d:
9e:d2:1e:7c:52:71:90:a6:60:05:62:66:e7:3d:03:
95:bd:60:e5:b1:45:67:6f:2f:62:a7:20:e8:6c:65:
33:5d:8e:bd:d8:78:5f:9b:da:3c:aa:0b:13:da:22:
e0:a7:4b:23:fc:89:8e:62:a8:1b:b5:28:79:ea:b4:
a5:77:f2:45:af:ce:4f:73:1b:c2:f9:df:f4:c1:a0:
d5:97:f7:25:b2:40:e0:29:6a:93:d0:88:40:0a:cd:
5d:ae:e6:1e:e0:91:6a:09:3d:02:b1:e0:3d:66:e5:
80:c5:06:8f:e6:8f:62:c5:65:13:42:b7:84:d5:2a:
65:b9:38:7f:8a:bf:de:da:2d:21:f7:c4:eb:51:b0:
59:3f:94:59:98:78:c6:11:fc:a8:2c:df:5b:79:71:
9a:bd:7b:28:cb:c6:5e:9e:44:a7:a2:5f:49:e9:6e:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E2:EA:5B:F4:AA:21:5F:B8:3A:97:EA:99:0B:91:55:7A:68:C6:D5
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:33:a4:cb:8d:73:3a:4d:13:60:67:45:79:cf:b1:5d:98:ee:
fe:07:be:ea:d3:98:b3:65:cb:d2:b9:e9:53:c2:de:8d:dc:4d:
81:11:23:93:e0:1e:e0:53:1e:d9:fc:17:e0:aa:a1:35:cd:3e:
1d:78:c8:b7:8e:b8:02:f0:78:b2:81:3c:f5:9f:67:4a:6f:c0:
8a:e8:b2:e0:05:6d:2e:9b:65:ac:47:9a:3c:32:82:d6:b3:26:
3d:dc:33:e9:4c:14:f2:20:3c:aa:5f:39:f3:d5:4d:ec:46:8e:
7a:64:7f:f0:df:4f:73:be:8a:3c:96:dc:ed:32:2a:a4:b4:3c:
b8:3b:35:ad:55:c4:ee:66:be:c1:67:8b:c1:70:3a:0e:f6:1a:
05:01:08:5f:2b:12:39:3c:7d:91:f0:e3:9c:2f:56:75:3c:8d:
9a:3d:e9:4e:5e:59:e7:19:fd:c9:68:46:8f:4f:69:c7:2e:56:
be:8d:23:2d:f4:7f:1f:b6:ff:f2:37:d5:58:c1:9d:f5:02:c6:
82:32:5c:bd:a1:7b:b8:be:6a:6c:c1:37:fc:6a:b6:07:b8:72:
a4:f4:6e:99:7a:f7:e8:0b:4e:95:f3:ba:04:47:cf:5a:41:ad:
26:8d:3c:cb:41:87:d3:ba:80:c3:d9:af:81:ac:c2:ac:96:ef:
be:35:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:24 2025 by rpki-client