Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: JZfFujJdLwuCfaYOsfY0LGMJrJT3bSSYl2gXyGAqnak=
Subject key identifier: 53:1C:A9:79:47:9E:20:34:F3:0B:D5:07:DF:CA:0D:72:15:36:A0:A5
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 0198D4A83BB132EA9EFD377D605E7A0A6029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 0351
Signing time: Sat 23 Aug 2025 02:00:51 +0000
Manifest this update: Sat 23 Aug 2025 02:00:51 +0000
Manifest next update: Sun 24 Aug 2025 02:00:51 +0000
Files and hashes: 1: 82ddCXRGPTSNS9hTYan2VCDyLIk.roa (hash: FrQAL1Gbil8vPVyEFVSqvHLh6u6Vga4znBeYCvDapwQ=)
2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: YRLIQjkgQt0uHfkrlP5F6Uxa00YCF9WjT7hIfypHVw0=)
3: s8Pwr9XAZCwB5xpzVi5j8lHFjw0.roa (hash: vflnC46FDMdoiJ/G2QbgjVJQaaZ6Tzl2ag2D4Mr0VXQ=)
4: sDXiMMtB0SUjAEcuxyn_krSwmHE.roa (hash: anyUBM1hq5J/9Y3FZD4T/DzSpqZkNbhmkogY6Bv+tL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:3b:b1:32:ea:9e:fd:37:7d:60:5e:7a:0a:60:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Aug 23 02:00:51 2025 GMT
Not After : Aug 24 02:00:51 2025 GMT
Subject: CN=531ca979479e2034f30bd507dfca0d721536a0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:3c:e4:55:83:13:96:b0:56:66:b1:8b:15:
e0:60:ea:8d:6b:0f:c3:92:5f:c3:73:c7:47:7a:e4:
15:f3:47:38:f5:05:80:8e:a7:ec:a3:9f:f0:ad:63:
24:0c:ad:43:fa:fc:b8:c5:a2:3c:3f:a0:ec:2e:c4:
15:8b:17:0e:cd:c5:9a:80:5a:67:0f:e4:0e:91:25:
22:7f:f5:8d:8a:ca:60:c9:06:6b:5c:ad:cf:12:5a:
5b:05:00:67:13:4d:22:b6:38:16:2e:61:6d:24:0f:
ea:d9:6f:c8:80:d9:ff:cb:3c:c2:5e:56:03:2a:15:
67:4d:0a:72:d5:e0:88:4d:9a:49:f9:bc:aa:9a:c6:
d9:43:3c:73:4a:2e:13:ab:7b:74:b7:6a:44:14:df:
86:8e:ad:fc:21:b0:e3:e5:1d:87:1c:ca:f6:f6:7c:
a4:27:2f:8a:a8:6d:4a:a8:54:f2:d3:b7:a4:12:40:
04:8e:5d:27:e3:d1:bd:03:c1:b0:16:bc:d4:85:37:
54:42:93:fc:5b:f4:42:fa:ab:c1:83:9c:ee:78:3a:
a9:30:45:53:28:61:50:ed:dd:78:57:d3:58:26:3a:
c3:77:be:95:02:38:d0:a3:88:cf:e8:d9:a8:40:e3:
3b:3b:7b:09:6d:93:5f:e5:45:4e:9c:a4:08:c9:27:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1C:A9:79:47:9E:20:34:F3:0B:D5:07:DF:CA:0D:72:15:36:A0:A5
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:f0:61:2a:e9:85:45:72:f4:c0:b2:d3:bf:33:ad:7c:f1:
c6:51:18:dd:c1:97:fd:a8:0f:d6:38:e5:ac:fe:b9:84:95:b5:
00:50:71:07:0d:a0:05:a5:67:19:1d:1d:19:27:48:ee:55:4f:
89:c5:a1:1c:e0:c2:79:48:72:44:7a:7c:bc:e0:46:f8:e8:96:
94:c7:84:13:b8:f1:f8:09:cc:98:8c:ce:8c:9d:e9:6d:5e:31:
14:9f:86:ac:e4:6f:11:65:3d:cf:f4:7c:5e:04:a1:bd:a2:f8:
86:a1:96:97:ed:67:fc:35:4a:b6:18:4a:2a:6a:41:e0:e9:c9:
28:c3:c3:26:1d:55:36:b3:1b:62:43:b0:61:68:e8:c0:5c:2b:
56:f3:9f:c6:41:64:df:3d:9e:b8:28:8d:a4:8e:dd:e6:fb:79:
a7:31:84:7a:ff:f4:27:b9:25:87:30:85:5f:c9:17:82:d5:04:
23:8f:64:bc:03:b4:38:6a:16:f8:8e:19:99:8f:ef:d6:42:34:
49:54:77:03:a0:f9:a0:18:cf:09:5c:be:d7:5c:16:ea:d1:d2:
0b:84:32:93:d0:63:d7:04:5c:43:a0:e1:a5:36:8b:98:c9:0a:
09:ca:e1:85:12:6b:cc:d0:44:9a:6f:d1:44:a8:18:b9:e1:7f:
81:65:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:29 2025 by rpki-client