Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: NxVYmn/fcXzow5iBxt71Uk5LSij6TzihMeToe2NnXIg=
Subject key identifier: 9D:D4:DB:A7:A6:15:AB:EA:67:58:90:DE:54:08:11:17:8A:F5:8B:81
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 0198D54E5D9A66393C3CDFAE8479E7E926BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0F0B
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: 03BizM9sYdFjGbZMcL5GsGuX7dLq7U6duYjOtzeQhIw=)
2: pD83cCgQmkTqmybL4Qe3QLOSsJI.roa (hash: Dc3wCA5yOgFeVk3/J+FU53rFpNzosD7EmU4+ejzw5Hc=)
3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5d:9a:66:39:3c:3c:df:ae:84:79:e7:e9:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=9dd4dba7a615abea675890de540811178af58b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:90:ac:dd:54:ec:cf:98:b2:c5:88:70:92:
a6:8c:d3:02:d3:54:7a:e2:7b:ab:68:37:2b:29:df:
d2:61:8a:e8:f6:ef:de:b3:03:8a:00:df:94:56:15:
7d:9e:81:56:22:13:91:a3:21:b6:dd:49:bc:11:a2:
3b:2f:da:a9:57:f7:31:32:4d:7b:44:a9:0d:04:d9:
64:f3:dd:ef:c7:f9:31:d0:31:ec:39:ce:da:f1:b6:
60:73:cd:45:ed:5b:e5:5c:7f:99:6c:83:0f:5e:61:
0f:fb:e1:08:f7:ea:2b:a6:02:b7:ca:0b:68:7a:a0:
8f:d6:a8:e8:e1:3b:21:36:e6:d4:a5:c6:1a:80:f9:
7e:69:4c:36:e9:37:42:91:ed:5b:cb:2a:70:45:6a:
dd:cc:0b:14:01:5c:16:21:08:cc:c1:82:fd:cb:db:
38:f1:92:02:4b:bb:3a:88:2e:54:26:68:c0:80:5d:
26:73:b6:ce:ba:55:5e:6b:91:c8:5c:64:3c:c3:0b:
34:11:1d:97:a4:e9:79:a5:c8:08:1e:55:ec:26:45:
09:4e:f5:95:97:13:6a:6f:33:e8:f8:d0:65:6e:e0:
14:96:1e:e4:96:c5:4c:91:b1:af:15:37:2f:c9:b2:
94:9b:70:03:4f:4e:f0:14:27:63:22:b8:9e:b0:0c:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:DB:A7:A6:15:AB:EA:67:58:90:DE:54:08:11:17:8A:F5:8B:81
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:85:26:4c:4c:c4:77:dd:a3:8c:8f:76:1e:75:0d:58:a4:73:
56:b0:b2:b0:07:61:06:e0:1b:dc:e2:3b:f6:68:5e:81:58:a8:
aa:31:75:0a:e0:13:c3:85:9f:91:d5:a5:b5:2b:f0:bf:c2:3f:
37:de:a4:72:b5:54:67:8a:9f:4b:e0:60:60:31:e1:e7:76:30:
1c:9e:d7:d5:27:3b:e5:a6:ee:7c:84:6a:05:09:9e:75:4f:ac:
26:27:ef:15:80:35:50:45:80:67:36:3b:49:12:eb:5d:8a:a7:
ca:db:1c:fa:0d:c3:37:b5:ff:f2:7c:ca:85:a2:dc:2b:e4:2d:
4f:02:b4:c9:bf:f6:b3:c0:5d:d4:3e:47:21:ef:3e:01:61:2f:
83:8c:43:58:3d:27:b5:c2:0c:1f:bc:de:95:6f:cb:a1:66:f7:
78:6f:e1:9d:88:56:e6:69:92:7c:99:08:50:a6:9d:9a:43:c5:
a2:25:8c:64:d4:de:2a:32:30:c6:21:24:ea:7e:6a:ac:78:34:
d2:1a:04:78:7c:70:fc:41:6d:cd:ea:55:da:19:51:24:b5:99:
e4:ab:1c:d7:ee:48:43:be:13:33:7f:98:e3:55:e5:f7:29:34:
d9:d4:aa:41:f3:36:b6:03:74:a8:b9:d5:df:e4:d3:dc:05:de:
68:2e:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:48 2025 by rpki-client