Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: NnZwJr5zydz3so5S96XY9BejOLnPufF6m9hvM0oYagE=
Subject key identifier: 87:2D:5B:7E:44:E9:8D:46:B9:37:DC:E3:B8:E6:C8:FD:70:2D:D4:6B
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 0198D54E6933353A4A1D3057708D6097AB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:22 +0000
Manifest this update: Sat 23 Aug 2025 05:02:22 +0000
Manifest next update: Sun 24 Aug 2025 05:02:22 +0000
Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: suUYUsvxzBHys27NhvDEsBGYNAukgkUvFp00It63meU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:69:33:35:3a:4a:1d:30:57:70:8d:60:97:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Aug 23 05:02:22 2025 GMT
Not After : Aug 24 05:02:22 2025 GMT
Subject: CN=872d5b7e44e98d46b937dce3b8e6c8fd702dd46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:6e:8f:77:3b:1c:68:d3:55:41:b4:ac:52:
41:f2:3e:32:c4:25:38:eb:df:51:8d:0a:44:c5:6d:
28:85:c1:29:3f:c5:4b:cf:1a:1a:6e:53:f8:a9:51:
b8:16:76:d9:1d:b0:29:19:d7:69:fa:a6:3a:eb:66:
82:55:1d:39:9e:a9:fe:72:ed:3b:1e:9c:f5:8f:4f:
c7:44:18:a0:63:ea:0a:dc:b1:75:16:6f:9c:69:2c:
28:95:7e:a1:94:5d:fe:ff:e9:f6:94:7e:98:c7:3e:
fc:ed:9c:0e:7b:5a:2e:07:6b:1c:53:b3:b6:72:f7:
6e:cd:d2:84:7a:a1:c8:82:db:92:d1:42:4d:9e:d4:
b6:0c:46:cb:05:28:77:60:08:58:04:7b:5f:ee:9a:
70:b4:c7:9f:cf:f0:80:1f:91:52:a9:10:8b:bb:b0:
d8:c3:cf:f0:ae:ef:0d:86:3d:6a:0f:9d:f7:42:d5:
df:9a:de:1a:57:cc:0d:96:66:65:c8:8d:c2:e7:d1:
54:5a:f7:ce:e9:26:f3:45:75:81:98:c3:fd:da:e2:
df:90:74:f5:8f:c5:06:f7:af:52:a1:55:bf:41:7d:
87:94:dd:33:b8:3e:61:21:c6:01:8f:cd:86:c8:bc:
f1:38:f3:76:a0:b5:9d:c3:4e:d8:3c:2c:9b:73:99:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2D:5B:7E:44:E9:8D:46:B9:37:DC:E3:B8:E6:C8:FD:70:2D:D4:6B
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:21:71:d6:71:0a:e4:82:73:ba:12:e6:b4:5d:24:aa:78:5a:
8e:96:f7:f8:92:73:7c:07:ee:6a:58:9d:da:30:fc:bb:d6:b6:
e5:c9:e4:6f:14:4b:4d:af:d0:32:6b:eb:8a:60:db:43:93:3c:
ba:9a:ee:56:8d:07:a5:ad:d5:95:d5:4b:83:58:7d:2d:29:e6:
1c:2f:14:57:9d:00:69:88:ad:9c:d6:68:7a:95:52:01:ef:c3:
a6:e9:64:58:95:40:9b:17:60:66:69:c0:52:3d:31:df:7b:b0:
56:28:80:6c:5a:3c:4b:c6:3b:3f:6e:46:72:5e:c2:03:af:c4:
f1:9b:c4:fe:93:e0:09:12:8e:56:3a:57:76:f0:64:77:44:50:
38:10:7a:72:6f:79:31:0c:d3:65:57:7d:17:c8:92:e3:d0:e2:
aa:66:01:d7:30:17:22:1c:05:19:d5:70:70:86:29:11:d8:0b:
e5:77:ca:24:af:84:3f:e7:5e:d7:5d:89:bc:c7:27:55:98:4e:
d9:62:bd:55:2c:10:14:9b:8b:f2:8b:4c:15:89:0a:63:88:f3:
92:c7:74:88:1f:4f:9b:78:2b:4e:8c:32:5f:a3:6c:78:1e:5d:
12:a3:1a:ae:00:ad:4a:6e:90:17:ab:91:01:1c:1e:0c:a3:1e:
15:e2:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:31 2025 by rpki-client