Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: tkC1s87hdDf0CWWvVRtHID97/WfMn7Bvav37VgEEbtE=
Subject key identifier: F3:B1:64:84:F8:2E:F8:22:4B:74:60:50:1E:9F:72:47:84:C5:37:10
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 0198D4E058FDA1809721B334FEB92653EE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: AYAArUKbQHDjWUlSVkaaQMziaNHrDz1pZaL30ycjpJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:58:fd:a1:80:97:21:b3:34:fe:b9:26:53:ee:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=f3b16484f82ef8224b7460501e9f724784c53710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:d4:19:36:99:f6:f8:fe:40:b8:27:c5:a2:
1f:9d:66:54:a6:3e:8e:3a:82:4c:ae:fb:07:4c:80:
3c:3f:2f:15:aa:a1:21:ab:f1:6a:c4:57:05:aa:a6:
69:4e:59:5a:7d:f1:f3:df:6e:1d:9e:cf:ab:eb:f3:
22:a2:a5:ca:cd:7b:b0:b8:e2:e0:77:41:25:41:f6:
8d:3e:29:28:ed:f2:fe:a7:1a:07:ee:da:da:ce:f7:
57:9e:42:e4:60:c7:38:25:d0:a9:16:13:dd:1e:b9:
b8:12:30:b1:09:a9:8c:8c:57:e8:d2:8d:9d:b4:91:
bb:d9:a7:25:3d:48:d4:96:16:88:cd:e3:47:b7:26:
57:b1:c2:2f:d1:8c:91:4f:7f:9c:b7:3f:ce:ff:1f:
d4:ce:dd:60:92:2d:4e:20:71:ab:e8:ab:0d:3d:37:
f2:23:f8:08:f1:cc:76:39:91:f4:e4:9b:da:63:eb:
f5:62:18:9e:9d:f1:19:bf:2b:fa:f6:de:d9:ca:c7:
b9:71:32:41:a0:2c:3e:b5:7f:6f:49:31:67:86:5b:
e4:b4:6b:f5:61:9e:86:89:d7:54:26:bb:9f:e5:4f:
a3:c7:f0:31:d2:6a:10:8a:15:58:83:bc:77:91:ee:
ae:20:c3:c6:aa:be:b3:b7:68:9a:6d:58:f8:62:57:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:64:84:F8:2E:F8:22:4B:74:60:50:1E:9F:72:47:84:C5:37:10
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:92:56:7f:46:43:16:b2:b8:6f:f3:ec:e8:f1:48:ff:3e:44:
af:62:c6:eb:66:9a:e1:23:64:85:fe:e7:99:f4:f9:6b:9d:a2:
a4:0d:99:6b:38:56:e3:45:ff:b6:97:d8:7f:23:d5:a0:b7:52:
f4:7d:de:72:fc:6c:85:af:f4:1f:4f:13:be:b8:ed:bd:73:f7:
6d:6a:d3:11:6e:a6:f3:a7:40:03:d8:d0:ea:2c:05:19:52:58:
5d:b1:fa:7e:dd:96:8a:ba:ab:18:88:bb:16:78:d1:8d:e9:fd:
d0:97:fd:b6:fa:55:da:7d:22:f8:78:61:e0:cb:b0:89:1a:81:
a9:56:7e:42:00:aa:96:1c:11:79:77:5d:65:22:69:dd:34:60:
15:cd:cb:f9:b2:0d:aa:ed:a4:5d:cb:0e:33:27:1f:5b:8e:4f:
e5:fb:89:76:41:d4:9e:fb:45:ab:a2:8c:38:e0:f4:44:ae:ae:
d1:4a:f3:a0:a9:b6:fd:83:11:0e:98:00:9b:59:d4:ac:d9:9c:
5c:7b:84:c9:65:5c:a8:1a:6f:d5:39:2f:38:03:2e:82:a7:3c:
79:5d:3a:77:5e:6f:05:bb:c5:01:ac:1d:bd:3e:39:ce:2f:8d:
c8:25:f2:d1:26:e7:74:7b:a9:99:8d:43:64:f9:3e:ac:b9:1a:
c8:71:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:04 2025 by rpki-client