Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: nT8M5nHhu/BAXrPZLnpnpKkfnYCrIPlpNPo99qhl0lk=
Subject key identifier: 1B:DC:88:80:F1:A4:AF:D8:F9:0F:AD:2F:7B:0F:A3:DB:DF:87:63:B1
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 0198D96026E06033DEF55533624B144A2862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 1458
Signing time: Sun 24 Aug 2025 00:00:13 +0000
Manifest this update: Sun 24 Aug 2025 00:00:13 +0000
Manifest next update: Mon 25 Aug 2025 00:00:13 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: XOaKZPRWoCeewkVM28hKkT+44/x6ZGxT2zPpxNgeN+A=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:26:e0:60:33:de:f5:55:33:62:4b:14:4a:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Aug 24 00:00:13 2025 GMT
Not After : Aug 25 00:00:13 2025 GMT
Subject: CN=1bdc8880f1a4afd8f90fad2f7b0fa3dbdf8763b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:4f:24:f1:44:78:df:85:81:63:eb:4d:f2:
2e:d3:7a:82:5b:cd:88:52:f5:eb:b8:ef:96:ba:93:
41:5f:74:57:fc:ec:29:0f:77:ce:76:5f:35:64:44:
1d:9e:86:cc:5d:0d:4f:7c:08:a7:69:b4:cb:1e:60:
78:ef:ac:1d:16:35:6c:24:9b:10:a6:86:21:58:c0:
2a:47:3f:40:f5:3e:ec:32:d4:1c:9c:be:7b:72:60:
ed:42:b4:e8:68:6c:43:b2:ef:02:46:66:07:0e:dd:
ea:70:ea:05:20:24:4a:a3:67:cf:db:ec:19:80:0f:
86:39:70:03:00:d8:5a:be:22:0e:37:7c:50:b9:5b:
28:f3:c0:34:9b:30:af:32:d2:1a:98:a4:f2:55:61:
d4:aa:30:a4:ea:12:cc:f3:21:5c:07:d9:51:aa:2d:
26:4a:0e:c7:f5:35:77:5c:77:7f:46:91:d3:b1:bc:
28:d9:92:d6:0d:69:5e:94:49:ff:02:de:96:55:1b:
c6:19:00:dc:6f:fa:9a:39:6b:ed:e4:f6:7d:60:26:
bc:a3:2c:39:71:f6:5a:0f:2a:c8:b9:13:bb:78:60:
c0:79:d4:1e:4e:fd:2b:3f:23:93:81:d4:35:98:9f:
7d:00:04:c7:4e:b8:e1:25:2f:bf:c1:6f:71:1b:2b:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DC:88:80:F1:A4:AF:D8:F9:0F:AD:2F:7B:0F:A3:DB:DF:87:63:B1
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cb:38:2d:be:8d:b7:36:bf:d8:5d:c5:1f:fe:47:2e:66:ea:
3f:b1:8a:8b:c2:79:c5:89:7c:c9:c5:81:e7:3c:04:cb:8f:5c:
3c:c2:60:54:fd:3a:94:ec:a0:8d:0f:0e:bd:a2:29:a3:9e:2a:
f9:cd:d8:a4:ce:6a:c7:a2:5e:19:cf:d5:7d:8d:55:47:2d:a6:
6d:28:79:8d:2c:aa:56:57:31:0c:b6:b0:f6:cc:f1:3c:9f:e2:
90:9c:58:ed:cd:d2:01:4c:23:15:26:69:16:62:ba:a2:bb:1e:
38:5b:39:0b:d3:88:b9:3c:7d:8f:d7:3b:c4:d4:e9:9e:f1:07:
e7:54:77:18:3e:4d:93:d9:7e:c7:01:00:dd:14:4e:34:1c:8f:
32:0a:9b:a1:6c:37:2d:e5:29:95:c0:ba:08:b2:e6:fb:ee:77:
1b:d6:59:fe:c9:74:10:2d:1d:fd:e4:84:ee:6d:3c:1c:03:e1:
ea:52:3c:5e:23:f5:ff:e3:12:fd:c1:ff:c7:c4:c9:bd:c9:41:
87:bd:8b:f8:51:6a:d3:dd:99:ea:f4:3a:5e:b1:29:97:fe:e3:
93:e1:a9:f4:a5:ab:53:e9:9a:64:cf:34:ad:6e:ac:22:77:92:
05:c2:21:25:78:a4:22:12:04:af:12:8f:bf:3c:74:0a:75:57:
f4:46:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:06:58 2025 by rpki-client