Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
File: Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json)
Hash identifier: zzQ+S0Oqu/SakWa2YWO/MafPZe08G1CRUbV/eVxlV2c=
Subject key identifier: 2B:02:6B:08:9A:22:14:14:B1:26:25:60:AA:21:B5:03:9B:00:C7:E1
Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
Certificate issuer: /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Certificate serial: 0198D515BE98F4835109538C5044B07081E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
Manifest number: 0273
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: JzGs8inn7txEGMEMBRCVzNZdRVg.roa (hash: gvrw7Emqkgw3IJnnGKeYcShf4Bw5yVCq/dWSjUTjfvI=)
2: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: UawEhHYFgwyITBu7FkVNC2d2jKowinreB7GdsiWqOdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:be:98:f4:83:51:09:53:8c:50:44:b0:70:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=2b026b089a221414b1262560aa21b5039b00c7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8a:0f:c2:0e:c9:03:ad:49:ec:da:dc:83:5d:
01:44:0c:b1:68:b6:13:83:94:53:6a:cf:89:9a:c1:
38:c4:4d:56:8a:64:49:be:a3:99:dc:90:d3:3e:da:
24:9f:f8:75:a6:d5:58:24:c2:b4:4a:25:99:69:63:
87:3f:28:aa:fe:e5:ea:5c:9e:56:4a:e5:cd:27:2b:
ec:d8:60:a8:6a:f0:da:22:29:8b:b5:51:6b:04:6b:
7e:5b:d8:78:3a:dd:26:cc:cd:a8:ca:aa:98:f8:9e:
0c:6f:1b:91:54:9a:22:2c:8a:2c:26:d6:5a:ff:83:
4e:28:4e:29:d4:5d:64:a5:bb:cd:c6:1b:98:da:b4:
87:5b:ad:3c:91:d2:fa:f5:53:9c:d9:c7:de:fe:de:
e9:7e:fc:e4:43:99:aa:96:1f:0a:16:c1:a7:04:8e:
1f:08:a8:ed:94:ea:f4:0e:ef:e3:4b:e6:32:b9:6e:
c7:46:2b:1d:0a:16:8f:5d:c8:31:31:a0:1f:98:60:
8b:52:c6:62:3c:1e:62:b3:75:c2:10:af:c2:f6:0c:
bf:2b:36:45:24:6b:b3:a6:aa:c4:e2:3d:ec:5d:45:
59:22:c5:58:aa:d0:d2:c7:45:bc:32:ca:05:86:bf:
99:ac:91:98:05:4d:c8:19:53:cb:a2:07:39:95:e0:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:02:6B:08:9A:22:14:14:B1:26:25:60:AA:21:B5:03:9B:00:C7:E1
X509v3 Authority Key Identifier:
keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fc:98:19:a5:30:8b:a2:1e:ca:75:03:94:96:1b:c7:78:29:
ed:66:da:d7:fd:ef:7d:a4:ed:e4:4d:d8:da:74:34:e2:07:2a:
44:ee:04:d0:22:c0:52:a1:29:01:f1:31:a5:f2:b2:0a:6a:8c:
af:ef:23:7d:a6:9d:bd:ac:f9:0e:f2:f4:b3:a5:81:04:e5:3e:
5b:8b:f7:ea:ed:d3:e0:9a:55:7d:c8:47:a8:b4:eb:f3:a2:5a:
96:ca:39:6a:d0:88:61:82:c4:b4:73:e8:b5:f0:17:6d:9a:34:
37:5f:97:1a:5f:e6:9d:c6:cf:3c:fd:58:d4:e5:6d:a6:77:4b:
5e:a1:64:7f:cd:e8:9c:e9:72:b9:3c:18:75:b5:73:50:3b:da:
18:59:ed:41:9e:6b:31:3f:12:c0:50:17:b7:e6:f5:bc:1f:62:
73:c9:14:9f:61:38:d2:46:57:b8:be:e7:b8:41:13:f9:26:76:
fb:51:fa:5b:7f:1c:57:1e:0e:39:af:a3:32:a0:1d:4a:87:58:
f7:2c:5c:80:ce:74:be:14:7c:fa:7d:d7:fd:ed:4f:5d:52:09:
85:36:c9:3b:6d:95:16:4c:13:3f:92:3b:51:79:8b:95:8c:c7:
91:8e:9d:e6:8f:8e:3d:0f:82:30:15:ba:71:fe:2a:bb:3b:2b:
3e:5b:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:01 2025 by rpki-client