Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: 4Hhy5pIE3mXGbnJXZ8tYbVgyd/19g6C5i/Ezhd3lrJU=
Subject key identifier: 0E:C8:F2:AC:C2:19:88:AA:07:FD:6C:DF:F1:37:81:15:AF:19:88:81
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 0198D65FB764846A414289A6882384CF121E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 08F8
Signing time: Sat 23 Aug 2025 10:00:53 +0000
Manifest this update: Sat 23 Aug 2025 10:00:53 +0000
Manifest next update: Sun 24 Aug 2025 10:00:53 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: pPJnswzKZiRRHzkVTYYv6tgZvrHMm5Bk/4y2jqiVYXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b7:64:84:6a:41:42:89:a6:88:23:84:cf:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: Aug 23 10:00:53 2025 GMT
Not After : Aug 24 10:00:53 2025 GMT
Subject: CN=0ec8f2acc21988aa07fd6cdff1378115af198881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:56:07:41:64:a1:91:d2:e3:26:d3:b5:5a:10:
8c:ff:0f:8e:2b:f6:6e:55:30:c9:f9:ec:e7:37:ec:
db:2e:d3:0f:39:ce:86:ae:73:9c:38:a4:39:88:bc:
cb:2c:f1:70:bb:57:e7:75:1b:71:ac:9c:79:08:c3:
00:c1:85:59:05:31:11:7c:45:1b:45:70:4d:53:a0:
31:ad:cc:08:da:04:f9:23:d1:2f:79:08:8a:18:7d:
42:df:5b:4f:75:91:48:6e:0f:fc:7a:d5:55:f3:cd:
69:09:4a:99:38:76:d3:c7:7a:d9:f4:2c:5e:d4:7c:
73:2a:96:ac:47:89:bc:02:8c:9b:e4:9a:70:2c:e4:
3d:a2:91:c2:53:a2:56:c1:dd:3c:9c:fa:0b:91:a5:
a9:fc:f1:c5:8d:63:cb:6c:9b:a0:c8:0d:fd:28:00:
c9:6b:f0:a7:79:50:0d:c2:af:72:e3:af:2a:2a:90:
78:3a:af:a0:51:27:c6:45:8f:d9:14:fd:56:ef:62:
55:30:87:eb:d7:48:fd:c5:78:2b:80:d6:11:f4:8d:
a1:3c:90:8f:f1:c6:79:c2:6f:0f:ce:ee:79:46:fc:
75:da:32:3e:df:d1:79:01:a6:1c:f7:d5:46:86:0c:
7a:01:a2:92:a8:b7:f9:5a:6e:1d:58:ea:83:4e:cd:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:F2:AC:C2:19:88:AA:07:FD:6C:DF:F1:37:81:15:AF:19:88:81
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:aa:3c:ec:7e:11:5a:4c:82:3b:92:c2:83:30:26:00:15:4f:
d2:f7:99:76:34:4e:4b:a9:e6:c2:ca:f1:97:b9:9d:9e:43:82:
5a:1c:c0:5c:66:62:e8:6e:2f:db:87:02:cb:5a:14:ae:dd:12:
6a:ec:a7:24:7c:63:4e:e5:ef:97:08:9e:13:0c:e9:4c:6b:a1:
e1:07:a8:17:93:06:2e:14:8e:da:c5:c7:73:a8:85:b1:a6:18:
ea:9e:20:c6:96:d2:80:c2:c9:d1:ed:39:f5:b4:08:f6:21:8d:
34:3d:af:7f:46:8d:3f:38:ac:9f:07:b4:f0:4a:60:a4:e9:50:
b1:4f:f1:72:96:65:67:1b:3d:ff:21:07:bd:08:61:c2:55:7a:
4d:dc:45:fa:bc:b5:42:bf:fd:fc:8c:9d:5e:b4:77:43:cf:ab:
fd:ad:c4:4a:ce:ad:78:76:ab:c6:84:5a:c9:8f:d4:84:c2:d5:
c6:da:e9:bf:64:aa:09:9a:a7:78:99:42:8f:9e:76:99:ea:a1:
21:ba:91:61:88:86:ca:4a:89:1f:06:68:4c:76:7a:fe:2f:83:
f6:47:21:a4:bb:95:80:4f:b3:36:df:65:15:d8:f5:e7:68:34:
7a:be:6c:1e:41:b9:4c:5a:a8:10:33:5c:d0:52:77:0b:b0:29:
70:84:e7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:12 2025 by rpki-client