Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: CAZxDIhU0WHZalABc/U6e2GROpVdjVZPVKhuAk6Zla4=
Subject key identifier: 19:BE:50:87:39:03:18:EF:35:35:50:01:24:B7:5D:DC:03:5F:80:AF
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 0198D5F1BBB83B989BFE111DAD3E5EEDA5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 10AD
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: 57xvgs1C64qj87aIpNvXlZvGXRo.roa (hash: zjoFwMxs5GYLsG8xg0G8PjPosJWEnHUje1reYWnSt8s=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: wOChGlKvVpIOaeOYXS/ujP2r1BuXy+r7USIdY0LXRwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bb:b8:3b:98:9b:fe:11:1d:ad:3e:5e:ed:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=19be5087390318ef3535500124b75ddc035f80af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:ba:47:b4:48:ce:04:03:fe:9b:83:c4:68:
02:98:fb:9d:7e:75:1d:b2:ea:0c:fe:62:34:4a:c0:
68:1e:c5:c9:68:c7:44:8d:af:2f:25:f5:b3:d1:1f:
d9:8f:9c:52:1b:d5:5f:66:6a:51:1e:97:b8:9c:b2:
5e:fb:e8:24:8e:6b:4c:59:23:89:65:3b:7a:1e:b8:
d7:29:d1:41:fa:82:05:a7:7b:e2:b4:b2:d1:a8:7f:
39:cb:f9:a0:f7:a0:49:3b:20:49:a7:4d:93:ba:8d:
37:b1:6c:fb:ce:1a:2b:ec:b0:40:a2:2d:7f:9c:8a:
f1:43:1a:a4:d2:71:7a:a5:e4:da:71:0a:45:32:1a:
df:f5:a7:2b:5d:07:93:b7:9a:32:b5:57:a1:ef:16:
80:dc:92:ee:9c:65:e7:7a:f7:07:77:52:f7:a5:0d:
3e:fa:40:ee:de:31:ce:a3:1d:c3:45:92:d8:53:d8:
9d:91:8f:d1:b2:a4:82:32:87:a1:45:ef:62:fd:62:
ad:dc:1e:ff:73:64:b4:26:54:95:d0:4e:4d:bd:db:
c3:9a:70:72:c9:62:b5:fa:f4:13:d3:ef:f0:ea:ba:
8b:68:62:c6:6c:a4:b5:22:a7:1d:59:50:54:44:17:
d2:4d:45:4b:c8:fb:42:47:ad:f3:a8:55:69:02:36:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:50:87:39:03:18:EF:35:35:50:01:24:B7:5D:DC:03:5F:80:AF
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:48:f8:26:f7:a0:ef:02:49:5e:07:c9:ba:24:d6:03:3f:71:
0e:25:2d:8c:88:86:10:ac:3e:a1:d1:fa:10:22:f3:15:56:c6:
a4:62:f1:f1:aa:7f:82:ae:21:e0:59:12:6d:59:21:ba:93:5d:
cc:ca:b7:fc:68:92:40:42:0c:5a:50:2c:26:ab:17:9c:76:34:
cf:80:6a:08:22:f9:06:40:b3:29:f5:9b:0a:7b:56:ca:6d:aa:
f8:a2:3f:6a:c3:01:b0:e0:d9:c5:19:d2:37:21:13:69:c0:f7:
62:6a:43:eb:cf:e9:9a:c5:23:09:c6:1f:88:cf:3f:f0:f1:fc:
55:aa:f2:7d:5f:a6:28:f7:ec:fc:a5:d9:d8:ac:4d:e1:df:00:
26:a8:c9:8e:53:0a:d1:10:74:d9:3e:9e:98:23:fb:5f:d8:2c:
b3:b7:97:1d:b9:8e:52:15:e3:1f:19:cf:55:2c:f3:56:89:6d:
54:23:72:32:5e:9a:e7:1d:b2:35:a9:99:77:f1:86:6a:c6:f2:
dd:b2:1c:98:cf:4c:19:35:b3:db:19:41:34:b4:f0:d2:df:77:
3d:15:f3:3a:5d:5e:65:ac:e2:06:d8:15:a9:9a:02:5a:0c:75:
4e:c6:aa:f9:ed:5e:2e:54:46:40:40:a7:4f:96:8a:dc:08:34:
f9:ed:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:57:05 2025 by rpki-client