Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: k8wkAu7/6PTvu7o+U7m2EvrjvtMoAnz3OKnpfMrdRBo=
Subject key identifier: 3D:FA:87:5B:01:31:9E:81:B8:8C:3B:A3:9F:8F:05:0B:3D:E3:F9:C7
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 0198D473E120F9A250027911518ABB1E3871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:40 +0000
Manifest this update: Sat 23 Aug 2025 01:03:40 +0000
Manifest next update: Sun 24 Aug 2025 01:03:40 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: JniI4NAHKLWVdnsu337D20kX+Rv1RdzS/2rANK5GZ0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e1:20:f9:a2:50:02:79:11:51:8a:bb:1e:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Aug 23 01:03:40 2025 GMT
Not After : Aug 24 01:03:40 2025 GMT
Subject: CN=3dfa875b01319e81b88c3ba39f8f050b3de3f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:d2:63:a0:79:78:68:9e:ae:41:36:ce:aa:
17:69:3e:11:76:91:d0:dc:2e:bb:a3:f7:67:0b:f9:
b6:6a:11:8a:b6:2f:42:25:15:3a:c0:35:27:7a:4c:
fe:e4:81:7a:3c:c9:e2:f0:ea:b8:54:6e:bd:49:e0:
04:31:b6:9b:93:60:b6:af:ea:8f:87:a4:11:e8:29:
4a:17:8a:1c:33:e6:16:85:c7:35:f9:55:e2:54:5b:
a0:a9:3e:d9:5a:7c:ec:ef:49:02:ff:73:d8:21:06:
2d:3c:e0:05:3e:24:49:9d:aa:30:57:6b:c1:46:1d:
1b:d9:f8:25:7f:58:54:30:fa:3f:bd:f5:ef:24:82:
2a:b9:0a:c7:3f:92:bc:f2:75:19:cb:bd:de:df:0c:
6b:c5:04:66:09:30:25:3f:14:31:a2:cc:6e:59:a3:
7e:13:47:4d:39:e1:83:5a:fd:4b:93:1e:b6:fe:46:
b9:00:69:74:b2:c4:b2:fd:fe:8e:82:57:a2:fe:90:
1e:da:f3:29:a5:a0:a8:37:f5:bb:c9:a6:73:db:93:
64:7c:b1:5d:f3:45:6f:4f:ba:d6:f9:53:e2:09:91:
50:a8:e8:4b:23:82:93:fa:0f:4a:dc:90:37:79:4c:
61:ce:7e:df:ac:8a:e4:7e:18:22:55:24:94:df:91:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:87:5B:01:31:9E:81:B8:8C:3B:A3:9F:8F:05:0B:3D:E3:F9:C7
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6c:15:d4:9e:ab:f2:7f:65:a8:50:e5:a3:25:c6:21:ba:c5:
a3:23:78:00:8e:85:2d:c6:91:a4:40:e4:f4:5d:09:9f:8b:aa:
03:76:11:c8:fd:75:bd:8a:b1:c4:0e:06:b9:7e:73:75:e9:fa:
89:2d:af:52:4e:69:0e:6f:fd:5b:7b:ee:d6:fc:71:79:08:de:
98:bb:2e:49:88:a4:8b:68:b8:50:55:42:8b:86:6e:2c:ac:e4:
a3:68:72:1b:c8:7f:58:28:85:84:68:d3:16:67:c1:93:68:99:
a0:c3:70:fb:d7:68:52:8b:76:1a:93:2d:43:1a:3a:9f:11:35:
46:d7:1e:e5:16:59:4b:db:62:7f:b2:34:71:03:1b:68:0f:2d:
7f:c3:a4:d9:ff:aa:af:e6:8d:cb:e4:b4:ba:c1:34:e4:6b:ed:
d2:ae:d0:bf:b6:fe:22:b3:50:a7:19:65:da:86:e6:9a:e3:17:
27:af:18:d5:9c:9d:85:4e:77:de:60:d5:a6:c3:2f:e8:d0:50:
78:cc:53:85:9b:49:f8:6b:4f:4c:4f:d8:f4:71:cd:29:4a:9e:
33:c1:55:85:3a:93:15:be:9c:91:ad:6b:2f:1c:f7:f8:b0:6c:
dd:16:df:56:ad:56:31:e0:20:7d:7e:82:a7:d5:bf:a1:83:a5:
d9:78:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:25 2025 by rpki-client