Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: PUTsx6V0g9+BV9c0hitKiy/DYIrX7NBIh7DjTzSN2EI=
Subject key identifier: 9A:53:A1:75:FB:BA:1A:8B:CB:3C:D2:D8:CA:E5:6D:5A:3F:E1:4E:8A
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 0198D4E0C3C343A3AB2E5841BDB9A5014EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: vUTBqBPbzfmLNt0BrIk0MRor7kNDm+efF+8EO+X9sUc=)
2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=)
3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=)
4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c3:c3:43:a3:ab:2e:58:41:bd:b9:a5:01:4e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=9a53a175fbba1a8bcb3cd2d8cae56d5a3fe14e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:32:0f:f1:63:a9:be:3a:96:c3:aa:04:9f:
f1:bb:9f:a2:73:2b:22:34:f5:61:84:1c:f4:ba:5d:
4d:35:1f:2d:74:bd:f2:33:58:2b:f5:28:e7:4c:28:
91:20:24:03:f8:2b:7d:a3:0b:6a:29:4f:f2:f5:09:
1d:39:9d:5a:de:65:b0:7e:48:ba:31:3a:d7:35:bf:
cb:42:17:bf:5f:81:f7:1a:23:1a:db:62:8e:78:aa:
99:23:9b:68:3d:a7:be:e1:06:8d:04:58:c7:0e:2c:
5f:25:e0:31:13:19:14:a6:30:d9:5d:a9:76:8e:68:
84:12:45:34:6b:42:cc:3b:f8:f0:de:01:18:99:6c:
eb:7e:7e:ce:c6:0e:d4:84:fe:6b:d1:94:35:5b:84:
bb:ba:a7:d2:c2:10:75:c1:6c:e2:46:40:bf:24:c6:
e0:3e:45:81:d0:ff:08:f0:de:47:f3:d2:45:55:87:
31:59:dc:fc:0e:92:9c:5b:3c:fc:6e:74:15:12:fc:
c5:f5:99:5d:26:b0:7f:55:7c:7a:86:64:21:be:c8:
f2:8f:ec:b8:87:a2:25:6d:39:0c:98:1a:66:89:40:
bb:19:86:f0:27:27:8f:1c:ac:dc:2f:c3:d1:22:7e:
f9:6a:f6:e8:07:17:02:70:7d:6e:7e:a8:59:5a:40:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:A1:75:FB:BA:1A:8B:CB:3C:D2:D8:CA:E5:6D:5A:3F:E1:4E:8A
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7b:49:2d:2c:e4:b1:8c:88:7c:a9:4a:be:d1:2b:9e:bb:a8:
73:b8:5e:46:03:07:19:f4:46:52:fa:91:17:af:56:43:f1:fc:
f0:d0:ff:62:45:25:bd:62:62:18:1c:01:b2:37:91:06:16:6c:
b3:f7:48:05:e9:17:b9:62:46:c0:e9:03:82:94:58:52:f2:59:
ef:74:36:78:09:ab:5a:a5:dd:0d:8b:a8:72:fa:21:99:f4:4e:
ee:63:e2:97:cc:6f:1d:b1:8d:1b:bc:06:5e:9a:2b:54:25:6a:
4a:6e:f5:9b:d2:ad:d9:72:97:93:bf:06:5e:c6:d7:ed:39:41:
e6:ab:6a:ec:3c:08:a4:9b:24:90:37:2f:12:12:fe:da:c1:c9:
14:fd:29:ce:b2:3e:2b:ed:10:3a:8e:54:10:0f:db:da:86:13:
a5:13:21:df:cf:0d:fb:b3:fb:21:cc:7d:2f:81:0e:97:71:fe:
31:32:0d:85:93:57:77:2a:bd:36:da:7d:a0:ee:d2:df:bd:5f:
86:65:9e:64:83:2d:96:ce:b6:4a:33:55:6f:04:86:4b:61:fd:
25:34:62:fc:c4:ed:a8:39:45:eb:db:09:13:52:b7:a3:a6:70:
ac:bc:82:29:4c:fd:a4:5e:4d:6c:94:d2:65:94:23:ba:af:d9:
c4:62:8e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:05 2025 by rpki-client