Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: Zz0qGrqpll76UJiAzLi6WxYcvK+7qUOVj+V4E9QrIjY=
Subject key identifier: BF:A9:14:61:D4:E6:54:B1:E6:A9:F3:EE:2B:1F:55:59:D2:CF:D9:6B
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 0198D84FC0BB23C19CE4018D7A924DA1B810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 05F5
Signing time: Sat 23 Aug 2025 19:02:41 +0000
Manifest this update: Sat 23 Aug 2025 19:02:41 +0000
Manifest next update: Sun 24 Aug 2025 19:02:41 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: wzeTN5p+K3tDnL4wo+wprSjkmtL6RGhkp/zjqgadam0=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:c0:bb:23:c1:9c:e4:01:8d:7a:92:4d:a1:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Aug 23 19:02:41 2025 GMT
Not After : Aug 24 19:02:41 2025 GMT
Subject: CN=bfa91461d4e654b1e6a9f3ee2b1f5559d2cfd96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:a5:ee:a1:d6:7e:cc:82:ef:59:5a:fd:5c:
01:d9:d5:62:e6:13:8c:e0:ed:f2:4e:ec:c3:50:2e:
9b:4c:75:39:56:68:b6:9e:dd:af:72:55:c9:0c:6a:
13:d4:d0:e8:2e:96:be:2e:03:b6:b8:e0:62:28:50:
52:88:ab:22:f7:fc:95:81:6d:16:0c:da:88:c7:27:
4c:32:a0:b8:a3:07:47:c3:fc:1f:30:0d:f2:10:e5:
6b:1d:d8:ec:42:38:92:01:66:f5:14:f3:74:96:a7:
03:56:8e:7f:72:72:ea:ee:3a:f3:cb:71:f0:ed:76:
fd:45:8d:29:6b:96:16:eb:69:a6:f5:8f:e3:34:fc:
59:e7:e1:06:79:7f:21:c0:ff:73:f3:9c:5f:55:24:
87:01:c1:ef:f5:54:96:d6:c1:cf:b6:e6:f5:2b:28:
f6:be:84:37:c4:8a:72:cb:f8:5f:ba:4b:50:ab:3e:
e6:49:0e:63:f9:37:5e:ee:69:78:af:64:cd:3c:ae:
4c:f9:7c:16:98:e6:d4:2d:6f:1e:28:ee:77:c2:69:
1d:3b:9f:38:5e:a2:9b:f5:d3:12:d7:9d:68:5c:60:
4b:da:87:a0:35:fa:a2:c2:44:72:af:42:1e:c2:0e:
b4:eb:ff:99:9c:52:8b:fc:95:1f:ba:9b:35:2a:19:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A9:14:61:D4:E6:54:B1:E6:A9:F3:EE:2B:1F:55:59:D2:CF:D9:6B
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:aa:59:01:22:5e:30:a8:2d:75:69:ab:c3:39:ab:85:1d:e0:
bd:b4:3d:16:29:2d:00:41:89:2e:4a:40:96:3a:db:ba:8e:4d:
fb:9b:07:3c:26:ee:24:9a:62:62:cc:41:9a:4d:df:91:de:9d:
d3:0d:82:ff:c8:25:4e:0e:04:84:91:80:c7:bc:65:41:d9:30:
9c:0b:43:85:ec:a4:a2:b6:50:ed:3d:c1:63:27:31:11:90:de:
d4:fe:52:ba:55:f3:5f:91:88:d1:e2:cd:88:32:60:d1:7e:8c:
cf:d6:19:5c:0e:90:9d:8a:76:1d:ec:bc:7e:c1:e1:64:f4:ce:
5b:2d:54:d4:31:de:92:74:b1:2b:76:12:96:71:03:f2:5d:ec:
79:82:38:c9:8d:1e:c9:a2:56:70:e0:c9:ab:c6:1a:a8:3e:f6:
64:1a:3d:86:88:09:05:e2:7d:53:db:93:75:dd:c9:c2:19:3e:
ba:58:70:f9:7e:43:2e:49:b5:31:eb:de:b4:be:f6:86:cc:70:
65:83:fd:89:4e:c7:6f:27:a4:95:02:7a:9b:dc:22:3d:3f:cf:
f9:01:22:53:f6:f2:49:77:9c:03:41:44:86:ef:c3:23:5f:80:
cf:3c:cb:a4:0c:7f:e9:88:c6:a3:54:21:df:df:f3:9e:1b:b7:
c5:ef:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:57 2025 by rpki-client