Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: 3Df6AIp5BoZKGUo6EnxH/LjvxN5skgEEbKyqbzqKz88=
Subject key identifier: D8:63:1B:1D:8A:78:C8:ED:5A:1F:59:D9:03:F7:D1:B8:A3:32:45:6C
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 0198D54E32F4030A79A194C448AE6AD21222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 01B4
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: UteKz7r0I9XRPqRAw8jnDpAbC9ywIz4q6KmCQAP5CpA=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:32:f4:03:0a:79:a1:94:c4:48:ae:6a:d2:12:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=d8631b1d8a78c8ed5a1f59d903f7d1b8a332456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:93:4e:e5:14:7a:16:33:b0:e6:41:a1:da:
d5:37:16:5e:b8:6e:a1:91:2d:35:21:a0:54:54:bd:
b9:f5:81:bb:f4:13:c3:19:61:01:1b:a2:a8:b9:42:
02:03:5d:42:a1:e1:8b:de:45:33:2c:e3:d1:a1:7a:
a4:49:11:74:cb:b8:13:1e:08:af:f9:b2:e4:a6:8b:
f7:fd:fd:14:fc:0a:e5:26:ec:76:70:7a:ba:0d:6f:
03:c5:22:59:75:f3:76:7d:67:a6:e0:96:ac:37:0d:
54:08:bb:38:1e:02:78:cd:6d:84:ea:39:e5:b6:3b:
fd:3a:86:41:76:59:7b:a8:ac:7d:d6:41:24:60:e6:
a1:64:7b:93:77:61:e3:81:44:36:dc:0a:b9:b4:05:
80:4c:1f:57:74:4d:45:24:07:3c:b0:16:36:93:36:
15:33:fd:4a:c2:a1:19:46:aa:e4:68:fc:6d:ed:32:
5d:be:fe:76:fe:ad:e6:14:07:23:0b:0b:19:36:c0:
e3:47:4c:44:15:50:83:ea:bd:85:4b:7d:be:15:f7:
28:80:f8:a4:f3:17:ab:07:96:c0:a8:19:67:16:f7:
b8:65:05:41:28:e3:73:4a:b1:9e:a2:7d:77:5b:e4:
d4:eb:be:9b:dc:8b:0f:55:b8:dd:80:0b:cc:64:7b:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:63:1B:1D:8A:78:C8:ED:5A:1F:59:D9:03:F7:D1:B8:A3:32:45:6C
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:88:c8:b5:04:4f:4a:de:c2:92:bd:0e:96:b2:03:0d:94:60:
27:14:f1:d2:59:ca:af:02:50:f4:97:c0:69:97:4e:b5:5b:5a:
1d:6d:41:f1:84:bd:ce:04:f4:35:7d:2b:2d:03:1d:1a:5f:95:
c3:b7:03:97:ca:88:60:41:98:f2:89:c6:06:53:1c:b0:f7:04:
c8:56:d4:2e:4f:d5:5c:cd:82:8f:6e:55:13:92:80:45:67:d7:
7a:06:bf:fe:95:cb:4c:a9:79:0d:93:cd:f8:27:17:9a:18:09:
ce:23:9d:28:db:58:3a:4f:14:34:8a:a1:8e:79:0e:9a:13:86:
f0:d8:f9:6b:c5:b9:6b:79:f0:c1:6e:b0:6c:89:b6:04:ec:bf:
7d:b9:37:83:22:f6:5b:83:44:00:d8:df:47:80:5d:51:37:7a:
0b:bc:d6:39:d8:44:11:87:c9:1d:f1:64:3d:0a:78:01:6d:60:
df:76:36:4d:df:ac:40:6d:ab:a2:35:7b:b3:2d:23:9a:a9:16:
b2:3e:91:b0:f0:26:75:33:11:3b:9b:93:20:07:7f:41:8d:57:
d5:4a:78:1b:3f:49:c8:c9:b4:5f:70:df:e9:42:9a:08:94:ad:
1a:b9:2f:fd:c9:bf:25:05:42:62:b5:79:7e:0f:ff:a8:6a:8f:
85:b3:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:30 2025 by rpki-client