Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File: NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier: NjSrJ56wO3Q8WM7EF3Y3mrMPQnONFDXPzCrsoGjaSsc=
Subject key identifier: EC:B9:FD:69:55:B2:1B:A8:BD:31:41:30:AA:7B:54:9B:BF:AF:C2:07
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 0198D58357D899A78AF7CDF7C5D3D1A9CEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number: 0683
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: hpgeyZ4ViE8lTUJX75HxXHMtoA5bUYHk/3lS/8gScNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:57:d8:99:a7:8a:f7:cd:f7:c5:d3:d1:a9:ce:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=ecb9fd6955b21ba8bd314130aa7b549bbfafc207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:86:08:90:e6:a1:3c:25:60:87:70:4e:d7:
b3:bc:11:6c:2b:df:b1:6d:d2:56:83:cd:01:b5:d2:
b3:76:48:e3:00:f6:67:c6:44:f2:df:8d:af:90:c5:
08:1c:7a:67:46:2e:ba:94:bf:54:25:48:38:8f:bc:
76:ec:01:64:62:a4:b6:29:f7:22:82:11:88:80:a9:
5a:b3:90:c5:a7:c2:7c:3c:db:58:d8:e9:44:94:d1:
77:44:26:4b:7c:2d:6f:bb:70:68:34:d0:00:cf:30:
c5:c1:00:02:d1:a6:72:79:ab:cd:29:16:54:de:a5:
b3:f2:1f:72:60:a2:5c:45:94:d5:c8:42:e7:b9:c2:
87:17:f9:7e:69:97:f5:43:6f:eb:1a:f3:fd:71:6e:
0e:3a:81:9d:63:a4:17:1d:f4:8b:a8:7e:0d:3a:1c:
e8:46:54:66:ef:03:3b:77:36:ad:1c:85:07:b8:70:
37:58:41:2b:e1:58:93:ed:40:2d:07:ae:4d:78:5e:
1b:cf:c3:2c:5d:1f:cc:b5:92:1b:7b:66:92:93:c2:
49:95:d4:46:c5:b0:db:9b:66:3b:9a:01:60:10:f3:
b4:29:16:24:c3:1e:29:5b:0f:e1:c7:da:e7:20:06:
a6:3c:a6:18:9c:a6:3e:11:29:dc:82:81:0c:6a:46:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B9:FD:69:55:B2:1B:A8:BD:31:41:30:AA:7B:54:9B:BF:AF:C2:07
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f2:f3:5a:70:01:e0:13:e9:e3:e0:3b:9d:b9:dd:40:33:8f:
89:85:6c:cc:17:7e:c3:69:39:47:8b:df:5a:32:d5:54:8e:e6:
35:2a:a3:f6:a8:57:42:46:35:29:0e:37:a4:0b:68:1c:71:5b:
7d:dc:fd:53:d0:3a:78:df:07:14:ac:10:df:e3:c3:de:d7:a1:
89:8f:e2:b7:d7:9d:27:af:40:4a:31:55:5d:7d:48:45:df:9f:
93:e8:b3:32:a0:7f:42:0a:82:16:40:59:a3:42:b3:77:0a:b7:
94:e6:fb:5c:e0:9c:ba:17:c8:98:a2:59:69:6c:6e:c4:10:9d:
c5:0e:11:b9:81:de:78:ff:a9:1e:70:62:44:ab:ec:76:05:90:
13:f1:30:4e:68:5c:30:d1:82:23:a4:36:42:45:bb:ea:fb:e6:
a7:0f:f8:9f:53:e9:89:a3:be:59:23:66:8d:c1:9e:2e:b1:c3:
bd:5d:9d:52:4c:1c:73:51:ad:c5:7a:7a:86:35:98:57:50:d7:
33:f0:d1:3c:5d:a9:e4:36:c6:d2:a3:da:b0:ef:f4:e4:5d:84:
a5:43:7e:b8:71:2d:3b:49:07:a4:65:cb:3a:c4:8a:74:fd:95:
0c:4c:42:b1:39:f7:6d:1c:6f:1f:86:f5:3c:48:2f:20:6d:af:
94:fa:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:02 2025 by rpki-client