
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier: bBQycjYLfc7gjAGJiSGKsMkNiaFbcLgb8mGmdRuUJTQ=
Subject key identifier: 08:82:44:CC:67:95:8C:7A:7F:E0:57:C4:39:10:98:A8:A9:38:5D:D8
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 0198D5F184D167F7A45D91B7E7982A7D7EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number: 1359
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: 3Tw8uXAvSl7LTpa3/IbHxKHpzOu2DFKhKZ030iGZf9c=)
2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:84:d1:67:f7:a4:5d:91:b7:e7:98:2a:7d:7e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=088244cc67958c7a7fe057c4391098a8a9385dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:20:79:cc:c4:b4:34:bb:36:a7:17:70:5e:
eb:4e:84:5f:03:5f:80:ea:c0:d1:c9:39:ba:f1:de:
08:ea:13:ca:7e:70:17:70:fb:fe:20:c2:5a:15:72:
44:f0:14:bd:d2:75:e3:9f:5f:02:a9:57:fb:43:64:
be:db:ab:0a:22:60:57:ef:34:e7:1a:06:8e:fa:40:
55:1f:b8:a8:72:14:d1:7a:05:1b:a0:8d:ca:37:6e:
b9:20:d5:f9:34:bd:3f:e4:c0:fe:f6:33:11:bc:f5:
13:01:ae:9d:f0:12:ee:16:36:e3:82:47:fc:82:3a:
63:ef:69:d9:f8:68:3a:50:0c:fd:90:30:ca:84:a3:
39:2c:7a:4b:03:20:ed:ba:3a:97:0a:d4:7c:f7:a0:
3f:bb:f4:90:c2:e7:a0:20:d8:d2:cf:f2:f2:28:8b:
60:89:7a:36:1a:d0:27:34:07:26:75:4e:5b:4e:d5:
c0:d6:91:21:12:b5:2f:e3:bd:c0:95:66:39:59:2b:
8f:1a:aa:74:2c:f2:d2:4c:3a:66:42:b3:e0:2e:06:
b7:7c:25:0e:0a:7b:94:ff:ff:6c:af:85:ed:76:44:
bc:7f:86:19:eb:e9:95:58:8d:d0:30:82:75:bf:8e:
38:d5:d0:53:cc:c2:ba:3e:10:b5:1b:00:7f:5f:7d:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:44:CC:67:95:8C:7A:7F:E0:57:C4:39:10:98:A8:A9:38:5D:D8
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4f:05:99:a1:bb:62:d2:0f:38:a0:c2:3c:f8:a3:5a:c9:60:
76:bb:78:aa:d7:c9:4c:0c:fa:d6:d9:67:47:2a:fc:55:95:2d:
41:03:1e:06:f7:85:13:ca:ef:66:e5:46:d9:f8:2d:1b:d3:b8:
c4:fe:08:a2:26:61:f6:8c:9b:51:e9:f2:42:f6:38:1b:b4:80:
51:d5:7d:cc:68:14:74:52:d8:12:35:f9:ae:64:a5:59:63:cc:
3f:72:16:09:e2:f5:2f:15:b2:f4:15:b8:c2:b3:1e:64:2c:d8:
86:36:52:2a:51:dc:93:28:ae:ea:90:b0:a1:5b:86:76:f9:03:
0a:1d:e0:33:6c:1f:6f:94:29:8b:65:d8:8d:60:39:5c:e8:8c:
76:53:11:42:10:f1:37:cf:84:ed:df:d7:26:d1:90:35:9b:b7:
5b:08:12:7e:63:b4:65:bc:25:47:74:0b:74:c7:59:ac:df:e1:
86:83:c3:27:46:44:ff:b8:4f:9a:99:e8:86:8e:73:32:7d:a3:
07:a6:0b:f7:01:a0:fd:22:59:21:57:05:b7:57:c1:68:51:3f:
12:4e:01:1b:8f:ea:bf:33:17:41:9c:a9:ec:fe:29:aa:df:30:
09:ad:6e:f9:c4:79:69:a2:83:c9:9c:3e:0e:fd:e1:8c:60:08:
f6:15:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:27 2025 by rpki-client