Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: WqAnHo7QCO1eR1bsOvKGki/uakoDDOiUplgEApAwDJg=
Subject key identifier: 68:41:64:EE:B4:7C:FF:95:4D:C3:E7:72:C5:79:1B:96:10:2C:FF:1C
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 0198D4A8319C409BB23D2CB9BFD5F31D41A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: FE4MhWBZSXfLc6fun21PIaUdByBKnlUyzmsL7XyetZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:31:9c:40:9b:b2:3d:2c:b9:bf:d5:f3:1d:41:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=684164eeb47cff954dc3e772c5791b96102cff1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:f5:42:7e:58:80:c9:6a:48:66:a1:41:ef:
c1:9c:76:99:5f:da:e7:a0:36:5e:52:25:98:97:ee:
b8:79:c2:e9:34:de:9b:17:c1:f0:74:08:9e:bb:94:
c7:36:44:5d:bf:fb:6b:fa:c9:c3:04:23:a1:00:a9:
a6:bf:dd:40:26:51:29:8c:0b:75:a9:04:69:20:46:
47:56:75:87:c6:d3:f4:75:b9:52:72:f5:57:8a:82:
93:3d:3a:70:55:75:3d:f1:ca:1a:d3:53:1e:de:de:
72:5d:b9:c9:5e:86:1b:5b:46:ce:a1:cb:2e:56:ae:
e5:33:2c:ab:58:ae:a8:cb:6d:91:4a:3b:ad:bf:4e:
21:b0:bd:52:73:ce:25:ee:44:24:90:26:d9:4a:17:
4c:a0:f5:ff:f2:27:54:1f:0a:ba:93:21:15:b5:a0:
83:77:ee:bb:7c:05:50:8b:d5:a7:65:14:e6:77:fc:
cf:b2:02:3a:37:56:40:3d:8f:23:26:32:44:4f:b2:
19:05:00:a5:48:c4:bb:e7:be:4b:86:84:cf:f6:98:
af:33:bc:fe:04:9c:96:cc:1e:4e:a0:e0:ba:92:d1:
22:3c:9e:bb:9f:be:32:11:76:bc:64:ee:20:5d:c3:
f2:e6:bb:18:69:91:9b:94:dd:22:8b:1c:44:a7:3a:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:64:EE:B4:7C:FF:95:4D:C3:E7:72:C5:79:1B:96:10:2C:FF:1C
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bf:43:0c:05:bd:3c:30:18:c8:72:99:97:3c:f1:34:b4:21:
43:92:5e:f0:97:be:8b:77:8c:58:81:3e:02:c8:7d:c4:5b:9b:
7e:d2:41:3c:19:0f:7b:98:3a:b0:ed:14:fa:1b:cd:24:2d:03:
f9:5a:ea:3d:bc:17:3d:47:ea:2f:27:e1:0f:32:4d:b5:aa:a2:
b1:af:13:2a:b0:0e:b5:e0:68:1a:24:6b:74:2b:d7:02:91:0d:
9e:2b:dd:0e:a1:6e:dd:d6:c7:ef:48:19:99:86:ad:69:97:73:
b8:22:c8:23:94:95:7e:da:c6:39:d8:fe:fc:1e:5d:9c:f2:93:
49:5b:b5:aa:0a:3e:fc:05:c0:d4:a6:78:59:c0:33:3b:5f:ac:
d8:b4:be:33:2a:b1:12:c7:c2:e0:ab:e8:10:81:f3:51:6d:75:
fc:25:af:7d:75:45:a5:bd:d4:70:19:bd:61:62:47:ee:71:5a:
9b:04:ef:2e:55:42:f9:72:f2:6c:b9:84:87:9e:f0:d0:56:49:
0e:26:cb:58:22:7c:7f:9d:67:9a:f0:bd:74:97:00:46:e6:33:
fe:95:54:4a:5b:4b:9a:0d:7d:41:4c:7a:9b:ce:87:24:47:df:
bc:7d:d3:5c:49:9d:5c:a6:d8:b7:ed:df:9f:ef:b4:24:da:23:
1a:f9:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:38 2025 by rpki-client