Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: 52RKApb4Cs83arsxAVVgzNQPL9Fw89icO2cFaHgs32k=
Subject key identifier: 4D:2F:BA:93:33:26:E0:C5:2A:19:D6:AC:3B:80:60:B4:29:CE:9D:24
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 0198D5F1895519E0145E0A546CA61EE67314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 0363
Signing time: Sat 23 Aug 2025 08:00:33 +0000
Manifest this update: Sat 23 Aug 2025 08:00:33 +0000
Manifest next update: Sun 24 Aug 2025 08:00:33 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: KnHb4VvPFl2uMf0vbOQb4pPocAhpUwmV7TyBJohc4IU=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:89:55:19:e0:14:5e:0a:54:6c:a6:1e:e6:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Aug 23 08:00:33 2025 GMT
Not After : Aug 24 08:00:33 2025 GMT
Subject: CN=4d2fba933326e0c52a19d6ac3b8060b429ce9d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:4e:50:a2:54:2d:de:c0:7a:c8:80:ff:4c:
72:47:81:36:da:16:03:f7:1a:7c:64:12:88:b9:fb:
04:4c:bb:10:a1:67:e3:71:ad:d3:b2:dc:b1:df:56:
bf:a7:cd:eb:94:7e:51:5a:08:a3:1f:33:cc:23:80:
b8:39:b6:d2:fa:ae:27:da:89:69:c8:24:9c:f7:e6:
9e:0b:9d:f1:c9:19:52:46:f7:36:12:87:92:78:88:
4c:71:b4:c1:33:e4:60:e3:b0:28:e9:1c:da:5c:e5:
a9:26:0f:74:86:cd:df:13:91:c0:b7:cf:32:93:fc:
56:5f:65:e0:67:00:b5:0d:6d:27:5d:42:4f:de:7f:
91:58:ea:91:e6:34:b7:53:23:a9:ea:b8:b6:23:f7:
7b:0b:ab:eb:43:ce:97:bf:46:58:52:e7:3e:e9:76:
1b:58:44:59:dc:a4:d9:55:40:e4:b1:ea:d0:7f:6e:
63:11:bd:d3:9c:b0:3c:f9:a6:bd:7d:81:23:86:af:
07:26:b9:d1:7c:70:96:96:62:43:ef:a2:ae:2f:b4:
4e:0a:72:64:92:46:93:40:c9:02:0e:8f:c7:6c:eb:
3d:d9:d5:4e:35:e4:b5:45:c9:6a:d8:a4:11:0e:2b:
60:1d:7d:68:e4:53:2f:4f:7c:6c:7e:c7:c5:34:cb:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:BA:93:33:26:E0:C5:2A:19:D6:AC:3B:80:60:B4:29:CE:9D:24
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:11:f9:d8:81:3c:cb:61:c5:a9:36:78:cb:52:9c:ed:e7:52:
d4:a4:4d:bc:02:40:f6:f1:0b:fd:96:db:38:10:f6:1d:2f:01:
25:13:df:a4:b1:b9:5d:a4:59:f3:1b:4e:1d:4f:49:56:58:7d:
61:3a:df:5e:60:fc:61:3b:98:3f:bd:8b:58:ef:09:a7:28:e3:
4c:b1:99:c4:18:db:ab:89:c6:96:61:e5:70:c1:e4:f4:0e:2d:
25:66:c1:78:aa:ee:d4:24:e4:a4:d1:c0:fd:50:b1:67:b7:51:
a9:64:5c:63:63:a2:24:d4:29:51:a1:16:ec:ce:8a:ac:97:09:
d5:6c:cf:5f:32:c5:13:a8:2f:fa:39:02:f9:99:56:ab:18:84:
42:9e:e0:94:ef:78:19:39:2b:99:45:74:9a:cc:89:30:ae:9c:
2e:36:de:74:47:e0:f0:bc:e1:c0:f4:9c:86:53:dc:2d:7f:30:
4c:6f:b9:cc:f0:7a:b5:6d:49:ad:c3:4e:4e:c0:0e:ba:12:f5:
f0:31:58:72:07:12:f2:5e:01:3f:7f:63:4b:dc:44:61:fc:8c:
b9:08:d9:38:ef:1d:26:de:8d:6c:83:ae:01:e4:a7:bf:bf:a7:
b2:05:f5:97:ef:e8:ec:8c:ad:27:27:b0:27:09:38:83:77:76:
4f:a2:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:09 2025 by rpki-client