Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: MDFFFOHOt2MlyY/hrp/dgVU1X6tlV1egSvUPYVgtiMY=
Subject key identifier: 7B:B9:F5:5B:97:61:14:4E:E6:C2:67:FC:B1:61:61:05:31:A1:F4:E3
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 0198D4A7F43ADABA1D4214213E97627CADD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0A26
Signing time: Sat 23 Aug 2025 02:00:33 +0000
Manifest this update: Sat 23 Aug 2025 02:00:33 +0000
Manifest next update: Sun 24 Aug 2025 02:00:33 +0000
Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: n5AW7xJxd4kM1vOyOycS8CROMzwpJVB9h8XPdO8XmhA=)
2: T5kWJ0zgWJZajIuh22W4Yozr5Js.roa (hash: nOTln1QfZH/4DaY3ZoWPaEWuEELecZ3pWov8YJOX40U=)
3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f4:3a:da:ba:1d:42:14:21:3e:97:62:7c:ad:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Aug 23 02:00:33 2025 GMT
Not After : Aug 24 02:00:33 2025 GMT
Subject: CN=7bb9f55b9761144ee6c267fcb161610531a1f4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:48:eb:69:99:3d:ae:fc:c8:24:bc:67:dc:
f5:98:59:a1:c9:cb:8a:04:b7:4f:72:db:ed:82:eb:
b8:cc:51:8e:41:7e:ab:a6:b2:e6:6f:5b:21:dd:e2:
df:2c:86:85:b5:ab:39:a0:ad:9c:21:57:48:38:b5:
d7:b2:96:28:5d:df:ef:54:5e:2b:fb:9c:fa:57:72:
a8:e8:a7:22:c3:50:6a:7e:44:9f:1b:1e:9c:62:87:
65:fe:99:d5:7f:42:14:4a:2b:11:57:52:a5:89:1a:
38:72:94:69:21:b8:8c:af:91:09:2d:5b:aa:08:43:
d3:90:66:95:f7:8a:5e:2b:7e:bc:40:47:dd:8b:71:
a7:ba:cd:73:14:81:c0:0f:f9:7c:ff:d0:f6:64:51:
58:1d:f7:7d:38:40:67:f9:07:28:5f:ee:c3:8f:a7:
53:0b:5c:5f:0c:4e:eb:59:db:50:1f:eb:8e:32:06:
d3:f0:7c:54:13:16:e1:45:d7:89:2c:3f:93:ad:7e:
d1:39:10:c8:91:79:0f:e1:73:9c:ad:80:c3:40:26:
2e:29:e5:11:a2:c3:51:0c:b7:6d:fb:df:15:9f:5b:
e0:1c:28:f1:42:98:7b:30:33:60:4e:f1:ac:84:9b:
7f:9a:12:9b:ef:b4:64:69:2c:2a:86:68:60:43:d8:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B9:F5:5B:97:61:14:4E:E6:C2:67:FC:B1:61:61:05:31:A1:F4:E3
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ce:f4:ed:f7:15:88:0a:49:b3:92:09:75:6f:0f:f1:f7:b4:
e6:40:49:5b:82:e8:79:0d:e7:10:1c:36:12:ea:10:83:8c:87:
d3:02:bd:2c:17:82:7e:98:4c:a0:16:07:51:33:67:48:e5:31:
0e:21:a2:f9:61:ef:bc:b4:31:cb:c5:1f:2a:63:e8:40:a2:94:
0b:ed:61:06:67:a3:3c:ce:cc:63:97:8a:c5:f2:d4:71:24:b3:
67:45:dc:0d:1f:fd:3d:a1:2d:53:6f:c3:71:12:a6:6e:6b:1f:
3e:5c:6f:fa:b4:04:4d:d3:b1:6c:0b:40:ff:12:55:06:65:c2:
94:38:8b:5d:3c:05:0b:e9:e5:b8:de:09:66:4f:1c:d5:37:42:
fc:43:ad:1d:d9:40:54:ef:dc:05:99:50:d4:c3:ab:0a:76:40:
a9:69:63:59:e7:4b:68:a0:e1:c1:50:ed:00:64:fe:06:79:09:
32:d1:53:e6:9a:ba:f9:ed:e5:8f:06:ad:f2:2d:23:76:45:d7:
9d:4d:8b:7d:6d:9a:33:ce:10:96:fe:a0:ae:58:8f:0a:01:4d:
40:c0:78:7b:03:9b:6a:58:10:66:63:93:62:35:11:91:78:47:
14:b9:3b:57:5a:22:35:70:3d:49:9f:54:38:9f:7c:15:3d:5c:
ad:bb:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:53 2025 by rpki-client