Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: /mL46RuTgyPVofltt3yn//PdSzKsA/7BZiBMVin3y+M=
Subject key identifier: 99:8E:4F:62:C4:38:A1:4A:43:92:11:AE:1D:52:16:8B:02:5C:EE:2B
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0198D51618E5F8A68A2E066A61627E10BEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0F98
Signing time: Sat 23 Aug 2025 04:00:51 +0000
Manifest this update: Sat 23 Aug 2025 04:00:51 +0000
Manifest next update: Sun 24 Aug 2025 04:00:51 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: xLy3htLS+pPngj2wqC65WTczQEPa5GO7CLUwwwqsuWQ=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:18:e5:f8:a6:8a:2e:06:6a:61:62:7e:10:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Aug 23 04:00:51 2025 GMT
Not After : Aug 24 04:00:51 2025 GMT
Subject: CN=998e4f62c438a14a439211ae1d52168b025cee2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:65:3a:03:f5:b6:1a:49:2f:be:5b:a3:ad:
6e:4d:de:88:77:54:9b:18:e9:41:a7:db:00:fd:a8:
89:a4:64:af:96:7f:31:6b:6c:3d:a5:de:01:88:f8:
3b:ab:4f:1e:b0:14:ec:dc:9e:4a:67:33:28:ce:1f:
f9:71:6e:5d:b9:d8:13:c2:f5:52:43:57:90:bd:9a:
db:94:d3:b6:93:12:fb:ed:49:60:25:29:e3:12:2b:
73:fd:a6:6a:91:b3:e7:2b:0b:be:b7:71:96:ba:9b:
46:6f:2d:1b:ac:50:c4:67:d9:df:06:13:b0:1c:77:
0b:2e:8f:56:f9:f7:74:29:e8:b5:f7:d7:35:d4:cb:
d5:b9:02:6a:ac:7c:ef:52:a0:21:a2:79:64:1f:d9:
23:aa:2a:80:e7:5e:fa:ad:61:d2:ae:40:6b:4a:91:
5b:74:49:f0:05:89:b3:ba:09:7c:76:12:14:25:07:
cb:a9:43:08:02:cd:35:9c:e6:c5:a7:9f:ba:a3:60:
ba:59:8c:ee:cd:7b:e8:84:2b:bc:81:57:81:fd:f7:
7c:e5:2e:68:5e:fc:e8:24:e5:cf:b5:37:e5:cd:0a:
ce:37:61:4b:d6:13:93:3f:e4:05:d1:6f:32:32:d9:
bd:52:62:5f:35:46:91:e1:c1:5f:54:06:ef:9c:88:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8E:4F:62:C4:38:A1:4A:43:92:11:AE:1D:52:16:8B:02:5C:EE:2B
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:96:5e:e7:02:4b:52:5b:09:4b:64:26:cb:8e:35:09:e7:f1:
bc:d6:d4:3a:af:a7:c8:ee:26:fc:ee:2a:07:2f:46:b5:00:ee:
0d:91:dd:2c:82:e0:1f:bd:30:66:b1:e1:03:e8:28:29:5b:2a:
8b:38:82:d4:7e:1a:0b:d7:42:4e:9d:5c:e4:d9:0b:2f:c3:3d:
c0:38:a8:75:e0:ac:17:35:a2:ad:ac:7b:77:85:32:a7:85:5d:
96:65:95:75:96:53:4d:13:79:ac:cd:32:ea:20:9a:ea:ef:a0:
54:f5:1d:43:eb:b6:40:1b:14:ba:92:ea:4f:76:d9:05:c8:d2:
83:e8:77:cc:01:1f:a6:77:1e:70:67:fc:12:65:4f:1e:95:65:
bf:c8:ae:33:33:f5:86:55:dc:1f:c6:21:72:d3:b9:20:6b:86:
20:47:6f:01:d8:d9:ab:a9:c8:48:65:7c:6b:b3:e3:ce:87:10:
20:c0:72:a6:43:b3:d1:07:03:8e:51:7c:ec:1a:de:f8:f7:8f:
77:81:f6:43:63:7a:14:0c:e5:97:24:95:fb:2f:dc:4f:b9:3e:
3f:9d:c8:91:1e:42:51:b3:7e:7a:be:6a:55:03:08:97:1c:fc:
0a:e9:21:17:ec:61:a7:80:bc:79:16:0b:e4:29:76:e7:84:d0:
68:fd:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:36 2025 by rpki-client