Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: PY3sYjC8VNgsViCnw5ZRknFJPtbwdG//2xwPDzHqHQc=
Subject key identifier: 45:0A:1B:40:E8:6C:06:B5:57:7D:FD:E4:F7:5F:F4:2F:7D:9B:BD:A7
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 0198D6CDD6FC42DF1921AC250820CE645934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 15CE
Signing time: Sat 23 Aug 2025 12:01:10 +0000
Manifest this update: Sat 23 Aug 2025 12:01:10 +0000
Manifest next update: Sun 24 Aug 2025 12:01:10 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: YLZg9n7maisqb79eNEe2oOPAWs445mWZjQbdeu5yxJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:d6:fc:42:df:19:21:ac:25:08:20:ce:64:59:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Aug 23 12:01:10 2025 GMT
Not After : Aug 24 12:01:10 2025 GMT
Subject: CN=450a1b40e86c06b5577dfde4f75ff42f7d9bbda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:2c:03:55:ca:4e:68:fe:ae:6c:6e:31:a0:
68:87:09:ea:ea:79:20:ac:3f:78:1f:5f:64:b0:ba:
04:65:bb:d5:c7:73:22:2d:9f:ee:69:8b:14:24:3e:
36:18:55:df:6c:48:0a:85:52:3b:a8:9b:ce:01:a7:
4a:ec:66:df:52:6e:b8:ec:7e:6a:62:24:7c:17:f0:
6d:19:eb:d9:f5:98:2f:ae:fa:a7:2b:11:c9:58:e4:
f2:72:af:93:82:2f:30:40:ee:71:9d:2f:72:8f:95:
6a:b6:cd:0d:a8:5d:13:7a:04:43:52:dc:88:2d:a5:
5f:13:32:de:33:74:2b:58:fc:f3:a4:85:0d:24:42:
cf:ea:fd:d6:f6:d7:c8:c1:5b:e5:49:17:c4:ca:55:
f8:96:a6:64:b8:29:7a:cc:47:6f:d0:58:37:db:a3:
66:24:fc:98:25:00:01:75:21:79:23:30:dd:b3:7d:
e7:76:79:dc:30:3f:66:33:30:68:51:b5:9c:4c:0b:
c4:b8:54:48:b1:7c:ea:63:a1:e7:a1:78:f3:ed:df:
a6:03:03:37:c7:e5:af:a6:7d:09:c6:2e:60:18:42:
c4:dd:4b:b1:ef:e5:90:3b:a8:2a:ba:91:1b:b9:a0:
49:40:d9:10:ce:4a:81:cf:36:ba:61:c8:28:86:28:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:1B:40:E8:6C:06:B5:57:7D:FD:E4:F7:5F:F4:2F:7D:9B:BD:A7
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2d:bc:ac:d7:7a:c7:09:5c:c4:99:f4:51:b5:9c:2d:8f:e6:
a0:c8:28:92:5e:25:2f:60:72:b7:6b:e5:02:81:d7:c2:44:92:
d8:fb:2b:66:a0:37:cc:73:ea:50:f5:e1:60:1c:a8:03:c9:c9:
5c:29:2f:58:b2:c0:89:53:1c:1c:ee:49:a1:5a:a5:de:1e:4d:
10:d3:09:62:e3:6b:93:0f:63:cd:5c:5e:1f:a4:dc:64:35:73:
77:d9:79:a5:bb:e2:f2:92:f8:d2:a4:6c:20:21:2a:66:e4:d3:
b7:5e:51:de:bb:68:f7:cd:79:e5:4a:49:a5:0e:fc:f5:f2:d3:
d0:bd:b0:30:45:ca:26:da:4a:e1:fc:d2:91:34:11:e4:08:0f:
1d:62:0c:f5:13:05:e5:49:26:b5:da:8d:52:35:5a:41:3c:7d:
db:aa:fe:de:85:7a:1e:ce:f9:75:47:00:4c:1d:d7:b4:7f:57:
77:cc:64:71:83:f9:c8:bc:73:be:87:f7:1c:05:71:7a:5c:44:
e8:b1:e3:35:c4:c9:c5:5a:61:8a:4f:47:d5:7d:29:f4:c3:c8:
06:bc:5b:08:4b:95:42:d1:00:c1:f1:70:3a:6d:e9:8f:30:4c:
f0:d4:21:9a:4e:11:a1:30:e7:0e:6c:4e:b7:ed:52:bd:ae:0a:
8d:1a:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:27 2025 by rpki-client