Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: UcRQ4H8qwU1t3ptJAYZ+75/pRogQBRKYfoQTqURtYy4=
Subject key identifier: 20:55:4C:EC:FE:96:1F:2A:47:24:97:A9:BD:1D:2A:B4:81:B3:7F:98
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 0198D4E07775627D2564271AEB3FE8F0F2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 1226
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=)
2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=)
3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: dmgBE+jepz3+P2Z6Q9xkRKGPKVSNb5Iw2/T6HhCLEk8=)
4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:77:75:62:7d:25:64:27:1a:eb:3f:e8:f0:f2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=20554cecfe961f2a472497a9bd1d2ab481b37f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:57:74:f0:1b:df:fd:7c:54:10:af:d1:09:
f6:98:b1:28:8c:51:63:d3:74:cc:72:b4:28:b1:a3:
3d:f8:3f:03:d3:c0:af:57:9b:6d:1d:bb:8c:2f:04:
5a:a9:92:0d:06:f0:f7:dc:59:f8:ca:c8:a9:63:48:
c2:33:2a:a1:c0:24:ee:bf:0a:43:91:d1:83:8d:76:
1c:9c:79:36:74:64:d3:c4:07:be:e4:d8:d5:c0:46:
c1:76:21:35:f2:cd:66:e4:0e:7a:6c:cc:0e:99:c7:
d9:2a:c2:fd:7e:0c:47:77:43:53:05:75:7e:dd:c0:
7c:38:8a:fc:d2:5d:04:fc:7e:09:dd:45:ad:e3:90:
18:79:65:64:01:fc:7e:9b:b0:3e:e6:20:2e:2d:96:
ea:b7:7e:3b:2f:b4:18:30:22:c8:7c:80:37:96:5f:
d9:64:bd:8f:4e:6e:b6:21:74:1c:19:d4:2b:05:c1:
97:c6:f1:98:c8:8e:aa:2e:1b:ab:d0:f4:ad:43:7e:
5f:c2:bd:ff:eb:8f:4f:27:1f:2b:b2:18:11:b9:4d:
e5:71:da:7c:ee:ab:c2:6b:6b:3c:7f:5a:57:e6:2a:
9c:f1:97:2c:aa:b8:57:1d:55:c8:c6:88:29:f2:e4:
e3:ce:90:2f:f9:4e:58:44:e0:34:16:67:38:0c:80:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:55:4C:EC:FE:96:1F:2A:47:24:97:A9:BD:1D:2A:B4:81:B3:7F:98
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:43:f8:88:66:c5:f4:35:b4:69:a7:51:95:c9:5c:04:3d:8d:
3a:04:80:2e:38:c9:55:a3:3f:b7:6b:8d:76:e4:c2:27:c8:a1:
e8:09:8c:07:3f:44:c0:04:7a:8b:92:b4:90:94:a8:6d:8f:c6:
a9:82:0c:47:bb:d5:05:22:d1:5e:13:b4:e3:b8:aa:d9:21:bd:
98:a1:5e:fb:d1:d6:66:01:68:28:4d:89:2a:60:4e:d9:6b:02:
d9:be:6a:49:ae:fd:f3:18:01:11:e9:33:e8:86:f1:9c:12:60:
74:cb:f0:58:a7:45:0e:0b:ba:22:39:ff:2b:4b:8c:05:e6:66:
05:a9:e2:ea:b2:c6:a9:03:34:c8:9c:97:61:02:c5:2c:68:b1:
a1:d0:a1:63:7d:41:3b:3e:76:43:51:ce:a0:c2:2f:a5:7b:46:
5a:17:79:a7:25:42:e2:13:02:5c:b5:40:e4:fc:21:78:1c:a1:
8b:c1:2b:de:fa:40:c1:94:0f:d3:fc:2a:1c:a1:a6:26:b2:25:
bb:84:a5:a9:d4:33:87:a4:23:6c:41:e6:b5:72:a9:70:df:8d:
53:68:49:9d:d0:6d:8a:28:f8:56:20:19:57:9b:e2:26:f6:15:
70:63:63:3a:88:e2:8b:6c:43:52:67:2f:33:9f:62:7d:7f:d0:
e6:5d:55:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:50 2025 by rpki-client