Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft (raw, json)
Hash identifier: 89a6wQLsUqPCRwobpUmpN+Ng1ri2B6nwSdF6vz/ZT4Q=
Subject key identifier: 50:B0:8C:26:9B:F8:76:23:92:54:13:4E:BE:B2:8C:44:8B:68:A2:8C
Authority key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Certificate issuer: /CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Certificate serial: 0198D4733B6F2E7C1A287BB8058201834CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
Manifest number: 1324
Signing time: Sat 23 Aug 2025 01:02:58 +0000
Manifest this update: Sat 23 Aug 2025 01:02:58 +0000
Manifest next update: Sun 24 Aug 2025 01:02:58 +0000
Files and hashes: 1: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl (hash: gfwufH6iLl2M4J24r3uuCDQKaZ/oYHZWPskr8zSufbs=)
2: pJ8B6gtnj6CL56vYC6LrCO5oBmo.roa (hash: F88j9ZRyVWoqzEm3QsXJ4KW1kEET+j/VAKZytfrtK/M=)
3: zsR2hosRcU8M1KGjXd1_k-ktlfc.roa (hash: rTq5tN+JofEk5Za1xiOrbVhdFMOSTGjrPTYOHgXaK+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3b:6f:2e:7c:1a:28:7b:b8:05:82:01:83:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Validity
Not Before: Aug 23 01:02:58 2025 GMT
Not After : Aug 24 01:02:58 2025 GMT
Subject: CN=50b08c269bf876239254134ebeb28c448b68a28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:ca:f2:fd:66:56:3c:e3:4d:05:48:30:00:
03:08:dc:c7:c6:cb:14:cd:7e:d9:34:77:0b:fa:9d:
fe:d7:28:fd:da:bf:c3:2c:6b:6c:47:59:a4:70:0d:
aa:fc:9b:49:dd:18:dd:86:09:9e:f8:d2:7b:79:ec:
7d:a3:94:f2:74:98:f0:c8:6e:45:4a:31:c1:6d:dc:
c5:4a:69:fa:41:60:9e:f6:4a:b6:03:e8:25:7e:dd:
15:a9:68:ad:b5:9c:d5:fe:d4:e3:f0:31:1a:aa:83:
8e:4a:15:64:dd:6c:66:28:06:2f:2d:74:82:e1:ef:
a7:ae:7c:99:a8:33:66:7a:82:2d:ab:3a:46:9d:8b:
97:2a:be:2f:ed:17:98:ee:7a:bc:30:fd:0f:76:98:
d9:2d:c9:df:b4:74:28:7f:ea:5c:75:27:16:77:a9:
a8:f0:d2:f9:25:a3:23:76:d4:65:99:92:82:ae:24:
2a:74:9d:46:af:81:a7:f9:ae:09:6a:ed:fc:6f:31:
b1:0f:a9:c6:a0:61:92:25:6a:e0:69:a9:b0:f1:aa:
bf:75:5b:2b:a7:f6:72:65:66:c5:11:be:fb:82:f9:
82:5f:af:f9:71:8d:a1:1a:28:3a:f2:9f:15:8a:df:
d9:99:ab:ac:3e:db:cf:36:b3:08:b4:97:7c:ba:06:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B0:8C:26:9B:F8:76:23:92:54:13:4E:BE:B2:8C:44:8B:68:A2:8C
X509v3 Authority Key Identifier:
keyid:34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:5e:1c:23:58:c2:58:7d:74:dd:58:09:27:73:3c:fb:7c:
8a:b2:10:15:52:34:35:ca:97:6d:47:a1:b3:42:67:7e:28:00:
ce:85:c5:42:05:96:7b:cf:63:39:18:2c:b3:47:b9:ec:05:55:
dc:86:69:e3:0e:a2:b3:1f:1c:b8:b9:3a:0d:72:6d:fd:43:db:
34:88:cc:0c:70:be:67:33:a0:24:d3:04:ce:e8:ab:84:ef:b2:
47:97:68:4a:ec:4a:7f:df:a9:30:a5:01:20:b2:49:30:63:fb:
a6:6e:20:69:fb:2d:b0:d3:46:cb:71:db:55:d1:6d:0c:aa:ae:
b2:6f:ba:08:8e:3f:d7:77:7e:cb:2a:5b:b4:cf:da:b4:62:1f:
9a:a9:6b:9b:2d:5f:8b:e5:f0:71:5c:d6:b4:11:4f:ba:07:3f:
a4:5f:09:44:25:82:d8:cf:f9:f8:34:3d:7b:0c:e6:ac:4c:3a:
8e:b9:a9:ed:11:9a:c1:fc:58:1d:fb:d5:88:d6:5d:ea:48:c5:
b6:ee:a5:c4:bf:dc:87:cc:5c:ae:6d:69:cd:cc:98:52:0d:4d:
fe:2f:92:d6:09:13:e5:e2:c3:8f:35:2c:88:55:bd:3a:0e:59:
42:5f:7a:c2:8c:20:ac:92:77:64:de:5c:dd:6e:c7:76:ba:1b:
81:c4:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:27 2025 by rpki-client