Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: L6mOmtgp03eu/Glr9JFs0rFzGQpz4YU1Z7u8J1meoKA=
Subject key identifier: E6:60:2E:00:09:28:49:55:0A:75:3B:C2:F5:28:58:36:22:54:40:3C
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 0198D4E02D297BDA253A27AB08ACDE63B5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: NKSZ2N8Q0dF4X6k4Dcd+y1K0nNyfGOdkQVhYgINUBQs=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2d:29:7b:da:25:3a:27:ab:08:ac:de:63:b5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=e6602e00092849550a753bc2f52858362254403c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:88:5c:c5:e2:c5:56:06:5c:71:42:1e:1b:
fc:0f:64:65:ee:46:69:26:e5:85:dc:12:e5:ca:9d:
92:35:5c:52:e9:91:fe:84:72:63:4e:2e:8f:a0:04:
55:d3:f7:0b:36:be:05:e0:11:f5:4e:43:ac:7c:a7:
95:9a:61:f5:dd:69:f5:7c:d6:d3:dd:9d:cb:dc:09:
94:61:23:ad:bd:bc:84:9b:23:1a:38:f3:85:ec:91:
89:ec:c2:31:fb:ec:20:01:39:33:07:2c:40:cb:78:
db:41:27:cb:fc:fb:47:0e:68:6b:35:58:4f:57:e0:
6c:cd:99:c3:07:a2:54:3e:9f:0f:f6:4e:51:9e:6a:
5d:74:22:44:a4:62:b2:59:77:87:11:0d:14:e7:a0:
c9:e0:52:62:0c:40:d0:41:16:e2:8e:46:e8:8e:fc:
1f:4d:70:16:fb:a3:13:58:91:b1:4d:bc:11:e2:af:
b2:f4:80:92:eb:43:2f:67:90:2e:c5:be:bb:48:c5:
e8:88:d7:e4:79:2a:32:2a:65:c2:5e:7e:7e:4f:3b:
ae:f9:f8:1d:8b:f7:06:42:50:ed:a7:29:9a:a5:b3:
4c:e7:39:9d:64:bd:66:3a:dd:bf:6f:d1:2d:6e:9c:
d9:bc:4c:c8:0c:49:81:77:1a:7f:1b:f7:6a:fe:ca:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:60:2E:00:09:28:49:55:0A:75:3B:C2:F5:28:58:36:22:54:40:3C
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b7:ef:50:aa:98:bf:e5:5f:61:6f:d5:91:f6:36:32:68:35:
47:5b:98:db:39:93:73:ca:31:8d:2e:ed:22:84:ef:62:2e:ed:
5c:78:23:da:76:d2:89:9f:a0:ea:2a:3b:d5:9b:f7:90:d2:d5:
51:d3:8e:55:f0:9b:24:b2:b1:8b:0e:2f:d3:06:5d:6e:7b:6f:
96:07:ca:35:34:98:81:9b:be:8d:e4:11:43:63:0e:df:ae:1b:
19:2c:10:69:b6:f7:c5:e1:7b:51:da:93:6f:5d:a9:00:7b:5c:
4a:2b:11:32:6b:47:b5:79:6c:73:17:cf:97:96:b4:ea:0d:a3:
db:77:23:cc:60:a0:14:2b:ba:70:df:31:5e:9c:40:c2:13:38:
18:20:8b:63:d9:be:aa:10:1d:10:57:eb:7b:76:48:7c:e7:1a:
52:a0:7b:63:1a:e5:01:38:3c:df:95:52:45:21:49:5f:0f:a4:
8a:40:44:19:70:93:33:9e:00:1d:23:c8:f8:4f:bc:56:98:06:
da:de:bd:75:60:1e:56:79:40:ae:b5:16:52:c2:53:85:93:b1:
bd:bd:c3:f0:3c:7e:1a:0b:52:48:d6:f7:48:69:fc:33:47:47:
93:77:c6:4b:0d:c5:73:3b:7d:9c:40:c4:64:93:e9:44:84:7e:
d0:aa:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:41 2025 by rpki-client