Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: Tc3ipodjoUW/m5Gu3nfDzS0ZTO3/Rbk11nSFDYQsQpQ=
Subject key identifier: A0:CE:53:5D:85:1A:8A:7E:F9:D8:7B:E0:D7:D4:AB:18:C7:5C:8D:7E
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 0198D5F1B55DFEBE079BA46880B8F313498E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: Bf5tJg1apdB9k+aN8t/WfuhmeCuDIyHLESkdt3FONZQ=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b5:5d:fe:be:07:9b:a4:68:80:b8:f3:13:49:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=a0ce535d851a8a7ef9d87be0d7d4ab18c75c8d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:2d:1c:9f:a4:0c:6a:e8:ae:a3:78:bd:7a:
3c:7b:bc:a4:03:c1:ef:74:66:aa:75:59:cc:ec:c1:
8d:fc:b7:b5:f7:dc:1b:81:99:24:78:c2:79:85:78:
99:b5:10:ce:23:36:34:18:21:6c:58:17:92:0c:e2:
0b:58:a0:ce:2f:64:4e:64:b7:34:3d:3b:82:4c:76:
48:29:fd:dd:bb:46:cf:35:f3:43:4a:df:bc:85:21:
ee:d9:e4:a9:bc:ce:20:d3:b4:8c:19:02:62:86:39:
bb:d7:00:cf:4c:ef:ac:95:5f:79:6f:dc:a3:83:59:
c0:e1:b2:f3:a4:2b:31:ca:cd:0e:93:de:91:0f:63:
01:77:85:7b:51:4a:3d:c9:03:e0:4a:ec:cb:a6:36:
a9:5c:b3:b8:27:5b:d5:9f:85:42:80:d8:15:1e:d1:
0c:44:36:6a:1b:aa:31:9e:07:26:1c:cc:ba:3f:c9:
4d:d1:df:79:26:d7:cf:65:df:72:7a:76:95:3e:81:
c6:d9:35:7c:5b:1e:46:40:c3:bb:41:d9:11:5f:87:
32:d4:2f:6e:29:26:65:9f:78:1b:45:83:42:cd:9e:
a7:ca:2f:e9:bc:b3:ed:41:95:18:9c:91:9a:0e:b8:
99:3f:e5:32:36:a3:95:63:97:4e:ca:63:da:ba:6d:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:53:5D:85:1A:8A:7E:F9:D8:7B:E0:D7:D4:AB:18:C7:5C:8D:7E
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:67:77:7d:f0:d0:3c:01:46:0b:5d:0b:9f:da:19:43:b4:
8d:99:2d:e8:a2:5c:49:77:d9:92:83:cc:89:99:1a:ad:cb:7a:
73:b2:4a:1a:7d:18:2e:12:63:b3:1d:9f:69:22:e9:73:21:4f:
d0:2d:ba:ce:84:02:a8:94:6a:59:04:41:88:37:32:a5:5c:b3:
80:00:a4:9b:4c:e8:47:00:94:75:12:bc:9d:37:30:be:e6:b5:
57:8c:56:10:71:c7:ef:1b:d8:96:24:e3:f2:d0:b0:6d:c0:ee:
a2:f7:81:11:57:7e:1a:3f:27:26:2d:b1:39:29:11:c4:56:d9:
5e:59:c9:ef:26:0a:3a:cc:9e:86:37:73:be:c0:a7:f3:62:01:
d7:b6:a4:ee:e9:97:7d:9f:13:d5:c8:bf:80:a1:f9:0c:7a:e1:
73:85:01:3b:e8:19:a4:52:d7:5b:e9:69:af:c5:e7:c3:72:3d:
b1:d8:71:ef:e3:60:81:01:45:df:de:f3:cb:54:45:5f:4f:88:
b6:0f:04:6e:3f:64:8a:93:57:60:78:fb:03:8c:7e:54:6d:06:
e9:3a:83:38:af:87:0b:3f:fb:1d:6e:60:88:ad:10:e0:30:98:
bf:90:ec:3a:1d:ab:3b:5b:e4:83:e6:f0:a3:7e:15:df:5a:2a:
bc:de:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:23 2025 by rpki-client