Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: zcSLAA1WREeIzvBNTIdGS1qR3xnuabTVBz56cYrU1m0=
Subject key identifier: A6:19:B3:33:A5:D1:28:1D:C0:B1:AB:88:02:D9:05:11:C6:A2:2D:50
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 0198D4A7F4BAC4981972A6783622A25AF922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 0259
Signing time: Sat 23 Aug 2025 02:00:33 +0000
Manifest this update: Sat 23 Aug 2025 02:00:33 +0000
Manifest next update: Sun 24 Aug 2025 02:00:33 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: JRfHllaZfaV4JfwlgxC9hav5wWHQcYUPOQrjIbPh/9o=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f4:ba:c4:98:19:72:a6:78:36:22:a2:5a:f9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Aug 23 02:00:33 2025 GMT
Not After : Aug 24 02:00:33 2025 GMT
Subject: CN=a619b333a5d1281dc0b1ab8802d90511c6a22d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:48:5c:84:20:05:45:b9:c6:2d:63:10:bc:
01:93:c2:e8:ec:b0:19:0b:20:87:9e:69:c3:c5:63:
65:4c:90:02:c3:65:85:7e:a2:b8:d1:a9:1f:ec:1f:
e8:ee:35:e7:6c:70:8e:b2:82:d5:58:03:2b:04:ee:
83:bc:59:2d:b7:59:d0:4a:94:83:12:ba:d5:79:f0:
25:8b:12:c8:37:62:7c:77:4e:2b:f0:e6:81:0b:fa:
66:12:ff:bf:32:a1:40:ad:c3:92:3c:d0:aa:33:7f:
a9:3d:9e:33:6e:cb:7f:50:10:83:60:89:af:b2:7f:
de:94:88:91:eb:89:61:21:a4:01:e4:b3:ad:73:81:
50:cc:5a:8a:87:9a:af:a4:b5:1a:eb:1f:37:81:25:
4b:b5:6e:07:98:da:e2:95:fc:09:de:da:af:18:6d:
4c:8b:e3:e2:19:cc:ea:4f:be:68:6a:be:32:96:69:
10:a4:4a:58:b9:3c:a2:31:ea:0d:a5:d4:59:cd:4b:
e3:bd:0e:e4:ed:9b:d8:d4:71:90:c0:db:a6:87:fc:
ba:88:41:4a:e4:8f:8a:d2:68:a1:70:27:aa:d6:a2:
c9:bd:81:74:4c:2f:80:d5:2b:bb:85:c8:cc:b0:c2:
78:2f:3d:a3:4d:dc:db:83:67:9a:a8:f5:a4:73:f2:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:B3:33:A5:D1:28:1D:C0:B1:AB:88:02:D9:05:11:C6:A2:2D:50
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2a:ec:c2:c3:f5:7a:b5:9a:93:36:56:83:2d:c4:00:86:38:
74:54:08:72:2c:7a:00:51:77:a4:22:10:bc:70:c6:7a:b2:00:
0f:4a:30:06:ec:60:6d:89:7a:2a:b6:5b:5b:06:12:1c:6a:12:
19:7e:97:8b:b7:8b:83:96:8d:bc:f7:cb:b8:b4:81:fa:83:40:
a8:6d:a2:0d:7c:3b:87:c7:da:0f:84:af:7e:5c:9a:87:80:f4:
eb:49:68:c3:6d:ad:91:c1:1a:d8:d3:73:18:23:08:65:63:ac:
31:6f:12:16:6d:b0:35:df:c0:a8:58:c5:a2:ec:4b:98:51:cd:
8d:b9:8e:1c:36:26:89:73:46:00:26:38:10:cf:a2:e1:6f:9b:
41:af:33:dc:d7:ec:71:db:a5:83:6f:88:82:53:2c:24:c4:42:
07:2c:50:28:a0:f1:dc:f1:5e:91:12:20:2d:00:4f:e9:ca:45:
50:36:0f:1f:23:47:69:39:a3:74:f8:32:a2:f3:aa:d2:3b:5c:
2d:cd:83:ff:2b:b5:5d:5d:68:46:f2:5e:6c:c2:55:eb:16:8a:
83:76:4d:d4:98:47:ef:4a:66:8b:9f:85:b9:ad:89:5f:0f:b5:
5c:bb:a6:0a:fc:f1:78:97:35:f0:d3:b6:b8:82:d0:36:31:ec:
b4:e0:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:00 2025 by rpki-client