Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: chyMp8B2dn1QsVHcZohQD653dxGdQBjIjo7od45rJPc=
Subject key identifier: 82:87:69:D0:A5:7D:D0:21:FA:B1:40:84:F7:43:77:28:25:F7:9E:45
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 0198D5BC291233A9DE17EAB558DDAB6E2CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: VqSwGCRybrJQCO0fajAkw6PvtOLcM7ZF7NV/f/xAeQ0=)
2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:29:12:33:a9:de:17:ea:b5:58:dd:ab:6e:2c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=828769d0a57dd021fab14084f743772825f79e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:b8:04:29:fc:da:c7:45:61:c7:09:9d:90:
20:3d:16:75:c4:9c:c5:40:85:1d:5f:0a:71:4f:5b:
5b:5b:0f:84:bf:69:10:e9:0d:b0:36:47:41:cf:af:
6d:2b:29:29:6b:80:7e:dd:35:12:28:93:2b:6d:ef:
52:13:ea:e2:31:c1:2a:3d:d1:b2:24:1a:d4:b8:cf:
16:0f:40:66:3d:3f:f4:be:a0:ae:18:2d:b9:d7:64:
f8:69:f3:1c:23:31:0d:93:b4:6c:85:d6:02:0a:07:
6c:c0:51:a2:e2:99:17:5a:5a:3e:df:07:05:36:88:
9e:86:90:21:d8:85:92:21:5d:c7:03:02:b8:cf:57:
4f:9c:b9:25:7e:5a:95:43:84:75:f4:08:29:23:e8:
b2:a8:9b:2f:ec:65:66:31:7d:f0:49:eb:bd:34:3d:
aa:18:db:bb:82:2d:60:0a:15:36:17:f5:bf:f9:f6:
7a:2d:5a:90:71:8a:a9:90:16:3a:9d:2e:47:0a:56:
11:c5:16:29:bd:d8:43:fb:66:f4:99:2a:78:63:b3:
2e:d0:e8:e3:e9:3d:2f:2c:aa:4c:ff:22:72:97:76:
27:04:a9:a3:54:32:e7:51:53:bd:60:94:57:2e:21:
0f:4f:e3:b9:41:bc:91:7a:c1:47:3c:5d:91:71:e1:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:87:69:D0:A5:7D:D0:21:FA:B1:40:84:F7:43:77:28:25:F7:9E:45
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b3:c6:84:f3:a8:a6:56:1e:a3:e0:09:df:30:e8:3c:cc:d1:
39:c2:09:6f:d6:c4:f0:b7:08:00:57:60:42:1a:c3:d9:66:a4:
bf:87:64:63:0f:2c:ef:aa:d2:fd:15:5a:da:87:35:db:5c:3d:
63:ec:42:61:69:3e:e0:6e:b8:a9:47:cb:0e:d7:7f:91:0b:59:
4e:f4:a1:b9:90:bd:05:e2:bc:d5:2a:74:09:6d:da:4a:20:45:
13:cd:76:4c:0f:9c:b8:ed:0f:72:e6:78:89:f7:42:9b:ad:67:
d1:9c:62:75:85:38:ef:d5:c1:32:3e:03:15:1a:42:25:e7:d9:
e1:f9:32:35:a4:a5:0c:5c:82:90:89:17:98:57:3c:c3:ca:c4:
ce:4d:28:e2:ce:72:27:5d:97:f8:1c:00:3c:0a:3e:d9:87:74:
b5:ff:4e:63:05:5b:2c:7a:da:15:fa:98:72:b9:4b:bf:db:b6:
bb:63:fb:e8:18:d4:98:26:48:16:c4:79:29:99:fa:0e:30:d1:
31:88:dc:5c:d2:e9:11:91:f1:42:fd:52:94:96:b8:b5:ec:3b:
11:c3:d0:79:10:cc:62:c7:76:cd:68:30:83:84:e3:e5:81:7e:
1e:66:90:af:e8:73:b4:03:1a:58:ce:70:ed:39:e3:d4:e3:64:
55:a2:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:22 2025 by rpki-client