Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: ie1o9z+lqmvV5zIQhyqf7i5yI4AbAjmVdJUOS8jzDLo=
Subject key identifier: 22:F0:04:04:68:65:00:6C:68:87:24:14:38:17:97:36:1F:DA:35:CA
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 0198D5BB9F2E767421FBA0990C87B1B23128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 124C
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: AZ+Cmy4glaTukXQutyX6nqGzPxTb1uFLNucDZv8ak58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9f:2e:76:74:21:fb:a0:99:0c:87:b1:b2:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=22f004046865006c68872414381797361fda35ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:6e:6f:7f:eb:72:4c:0f:48:fe:66:87:2e:
ab:06:97:7d:b2:3a:3e:d2:5f:f2:c8:06:3d:27:b3:
60:e5:15:ca:59:b0:ab:b4:cc:ad:15:d7:68:4e:ce:
ae:64:88:f5:b9:15:fa:85:dd:9d:d3:20:7c:7f:df:
0b:12:29:f3:d6:a4:1b:ad:70:23:34:af:8a:08:ed:
47:df:a8:3a:af:71:b6:70:fc:d2:35:66:4c:5b:0c:
5c:6b:e4:ae:83:c5:7d:ba:e6:59:f4:aa:0c:82:0e:
82:9a:0e:11:6f:cd:f2:61:00:25:14:0d:21:e3:78:
42:b1:08:c2:cc:29:1b:42:0b:32:1c:e3:bc:e2:a2:
44:46:f6:1d:c3:17:68:58:7c:61:00:d9:67:c1:f7:
54:f7:7f:a2:f9:aa:6f:83:79:b2:cc:e1:fe:17:4e:
77:d3:aa:85:16:de:f3:15:40:f1:f0:4e:55:f1:67:
90:ee:bd:e2:ad:3f:ad:bc:6c:59:98:4e:02:43:e6:
97:b2:3f:71:a8:3f:b9:f4:ed:3e:48:de:e8:23:e9:
91:22:c6:d1:d3:52:75:01:a0:4c:aa:74:66:29:26:
ba:c4:27:59:22:cd:f6:22:ce:e3:d9:21:f2:e9:0f:
53:ce:f7:16:08:37:86:7f:c3:33:7c:68:16:7e:5c:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:04:04:68:65:00:6C:68:87:24:14:38:17:97:36:1F:DA:35:CA
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:1f:ec:c1:f7:e1:bc:9d:dc:c6:fe:75:8b:b4:48:d8:f2:
ac:65:b3:c7:3f:05:22:d1:eb:ee:f0:ce:db:34:7b:b0:a0:81:
8d:4b:21:34:d2:e4:29:68:06:d3:fc:b0:53:18:e0:a0:e5:f0:
6e:e9:f6:03:f6:0f:f4:0d:3f:36:60:3a:e1:5c:0c:50:02:e9:
cb:21:54:e8:86:4b:54:3f:ce:03:77:80:34:1c:5f:88:7b:a0:
23:ac:cd:4e:dc:c1:fc:9d:2e:05:63:17:c2:dd:77:bf:8b:27:
f1:91:db:74:71:a6:d3:a9:14:6e:18:aa:8c:b2:db:07:44:a5:
47:a4:fc:e2:fa:ae:94:0c:72:e4:fe:b3:2e:09:4e:1e:71:ba:
82:fb:ef:7f:7f:28:d4:4d:70:15:e5:37:05:c9:dd:8a:bb:f9:
3c:bf:1e:8a:91:cf:55:c8:78:5d:36:b6:74:25:d7:a4:3b:a4:
de:ab:06:0b:43:ae:01:b2:eb:08:7f:35:10:16:bd:fb:72:2c:
01:ca:bd:3a:6e:b9:11:10:bd:8c:1a:68:9c:4e:9c:e6:64:b3:
a2:58:fc:86:39:3c:7c:c6:d5:23:2c:b5:ac:77:89:e8:63:73:
1d:87:26:4d:4e:b8:72:69:e0:7e:ed:6c:e8:42:88:64:18:15:
35:dc:a5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:46 2025 by rpki-client