Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File: NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier: 3Gf9f6NeFmSYBMcq7cahFgvs2K1EaTYntPLjmdzBWqw=
Subject key identifier: 24:DC:E5:E0:6A:70:D2:DA:0C:9C:A8:E8:42:EC:2D:D4:9E:F5:00:48
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial: 0198D4A7BF0C65B22A84E4C3CD402B922868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number: 1229
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: ZX/968TzXceHUF6GEP6VNp2Wx3zN6g4ylq+L2Gwc83A=)
2: aPFNqKZrV_epMPFvc-8vIsgJFgg.roa (hash: 83I0vKl1m5ZTxLcVY4fj2guNAuZT35HFxx/AGVAfz8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bf:0c:65:b2:2a:84:e4:c3:cd:40:2b:92:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=24dce5e06a70d2da0c9ca8e842ec2dd49ef50048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:85:40:56:77:df:e8:32:e3:50:aa:d0:09:
24:41:33:ee:ad:c9:c6:36:92:0a:4d:74:d0:bf:9f:
82:68:2f:f6:db:09:9c:5b:9e:70:c2:f9:58:24:bb:
36:d7:3a:fe:55:12:94:a0:09:ad:f8:fb:05:86:f7:
3d:c3:25:98:b2:72:ad:9f:16:50:b4:7e:13:50:3e:
48:a6:0a:5a:14:07:7e:cc:b2:a8:69:db:d3:1b:30:
3c:b1:e4:ad:28:5a:ad:82:71:b3:6c:8f:ec:60:ef:
b0:f5:e6:b2:28:46:8c:32:99:40:1b:d4:fa:cb:4a:
ca:43:8d:56:db:c0:29:70:12:76:29:cd:11:d3:ab:
ad:80:7d:aa:af:7c:49:6a:1e:31:22:d1:f5:60:ec:
de:a4:8f:0e:b9:b5:48:b0:ea:35:fc:a6:54:c4:1c:
3f:35:68:f1:e7:9e:be:2e:52:d9:aa:c0:94:f7:15:
ee:45:f9:a9:67:e3:be:8e:26:b0:cc:9e:ca:24:bb:
68:65:fd:ea:1a:3f:53:d5:dd:3c:bc:82:ea:22:c4:
85:99:46:e2:af:f7:83:27:1e:f1:6b:72:7c:07:2c:
85:a3:c0:da:c0:e4:05:30:9b:0c:92:58:9f:77:87:
15:3d:f6:96:2c:7e:0a:1b:5f:15:0c:9d:30:6c:66:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:E5:E0:6A:70:D2:DA:0C:9C:A8:E8:42:EC:2D:D4:9E:F5:00:48
X509v3 Authority Key Identifier:
keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0d:14:88:e0:bb:f7:62:13:12:6f:2c:28:78:56:24:73:69:
05:c9:3d:73:5a:91:ad:25:c1:37:d9:2e:f7:f6:eb:66:dc:e3:
1c:fd:24:57:fa:8f:54:1e:84:b6:8e:4f:96:c1:ab:2e:ff:ee:
4a:b1:70:10:6e:4b:b0:12:44:cb:e5:74:8f:cb:62:d7:c2:c3:
37:d9:41:a9:b0:04:5d:85:cc:b6:c1:5b:43:c9:cf:c2:66:39:
53:82:98:12:75:c6:dd:c7:b3:16:25:15:86:26:50:f8:17:a0:
21:89:fd:8b:00:ab:d6:c8:76:95:0f:f6:be:78:06:25:4a:84:
ef:74:ea:cf:fd:c5:ee:b2:3f:e3:9b:99:1e:f0:5d:c8:b9:3a:
fd:9f:35:38:40:2b:12:14:be:0e:9d:e8:2a:68:9f:16:b9:43:
eb:ae:bb:80:77:68:37:d9:49:83:03:90:5e:ac:73:aa:2d:cd:
0b:a7:d7:49:7b:00:17:51:b6:34:81:cd:c4:af:06:6f:c9:48:
4f:b0:b9:65:17:22:88:a5:2d:07:cb:3a:13:a1:14:e6:9e:44:
cf:cc:a5:13:5f:f1:53:1c:b3:4d:8c:0e:93:19:05:a3:b9:b0:
69:63:36:6d:d0:21:88:79:89:6b:bb:d6:f0:46:c3:79:2a:38:
c7:db:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:52 2025 by rpki-client