Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: llCRIiKffBnVjDzYuhrepXlgS0PMrBfLvwVrtT7HgbQ=
Subject key identifier: 39:F3:77:2D:1B:72:68:72:D8:42:00:0A:97:C2:53:9E:52:C5:B5:5D
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 0198D4E032D3BA316C32F2CFD258DE87B203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 0329
Signing time: Sat 23 Aug 2025 03:01:59 +0000
Manifest this update: Sat 23 Aug 2025 03:01:59 +0000
Manifest next update: Sun 24 Aug 2025 03:01:59 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: K+nI5T/+D0wIAp8AyuYLiBFiyGAo96GstBdLjz3p/Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:32:d3:ba:31:6c:32:f2:cf:d2:58:de:87:b2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Aug 23 03:01:59 2025 GMT
Not After : Aug 24 03:01:59 2025 GMT
Subject: CN=39f3772d1b726872d842000a97c2539e52c5b55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:9a:0c:09:d1:4d:1a:d1:1e:f3:f9:ed:c4:
03:56:e1:3f:80:fe:51:74:54:cd:5c:ff:e5:39:5a:
bc:a2:5d:62:d3:87:55:3c:91:ac:57:cf:02:a0:72:
5c:fc:43:c6:dc:f1:26:08:14:a6:24:93:39:55:66:
3b:10:f3:6c:05:06:af:14:4e:0a:6c:83:0b:fe:c9:
a7:57:e3:cf:f7:db:c2:8e:1d:f7:4a:eb:af:36:04:
d1:a0:49:37:a4:9a:a6:ac:94:7a:25:05:e8:91:09:
03:c2:ed:b8:54:3d:0a:3b:3e:e2:cd:37:1f:3e:bd:
14:a9:73:d9:e2:5f:8c:b9:d7:97:70:6e:b3:a2:61:
dd:b6:8c:6a:89:a9:71:76:fd:ad:c0:9d:37:e9:2c:
15:c4:69:89:81:6e:1b:be:df:54:36:3c:9f:a7:c1:
45:e2:03:d9:32:9b:da:5e:0d:97:1c:ad:2f:2a:a1:
54:7f:c4:de:ca:81:3a:b3:62:1b:8c:bf:09:7a:aa:
a7:4e:5a:b0:d5:18:75:2c:ca:4b:38:42:59:94:fc:
cf:69:c9:a7:1d:cb:e4:92:e8:af:44:ef:31:0a:62:
43:f8:07:49:7c:52:94:dd:77:23:fd:b5:92:1a:1c:
3f:6a:3e:df:27:b1:91:05:57:e8:e6:c8:cd:98:30:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F3:77:2D:1B:72:68:72:D8:42:00:0A:97:C2:53:9E:52:C5:B5:5D
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a7:b3:5a:63:9d:80:e0:3b:e4:cb:48:d0:87:39:df:b4:31:
e5:8c:99:b5:be:ce:8e:e4:6a:7f:dd:db:12:76:23:c7:70:4a:
ff:5a:99:12:74:ab:3f:cf:fe:b5:3a:91:14:f4:c2:2b:29:63:
66:11:ca:60:c6:06:ef:60:fa:ae:bc:6c:36:43:b9:ac:5f:6c:
af:d0:1d:81:11:6e:22:3f:36:4f:ef:ae:f2:9d:cd:84:de:82:
d4:89:dc:fe:ab:a9:0c:2d:61:a5:8f:04:78:ed:c9:04:c2:d1:
e0:60:59:f0:be:e4:e6:9e:49:e3:f6:b2:9e:43:85:58:ea:ae:
de:13:40:b3:01:e9:1c:7a:1b:78:e3:2f:80:6c:be:48:90:e9:
dc:c4:45:f2:3d:f7:35:ab:5f:4a:b9:7a:c5:3b:8b:b4:63:d9:
fb:26:6a:f7:3b:4a:9e:5c:ca:37:a0:74:f9:64:07:a7:53:a2:
44:d3:39:69:ae:23:ae:ff:c6:67:41:c1:1f:06:e1:90:59:20:
79:1c:33:70:be:79:63:33:06:4d:97:69:d2:18:65:f8:ac:38:
10:57:a5:39:56:9d:05:6b:c5:f6:bb:af:92:cf:d0:6d:54:62:
1f:fb:16:93:13:9a:68:c2:22:05:9e:d7:5e:82:0d:37:4d:44:
23:57:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:01:52 2025 by rpki-client