Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier: vD/zKDLGmOhGfc9973zGqdOttpcj9wP+/32DmnUSaNk=
Subject key identifier: 93:11:86:45:66:95:FA:96:5C:55:95:B0:AB:98:C8:A7:41:E7:A5:57
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 0198D4E03CBB635162BAD60B96505F4054D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number: 07E2
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: zyWjXDbz1GsdYscpmPVNCpzifgYGV7OeiujlhdGMw0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3c:bb:63:51:62:ba:d6:0b:96:50:5f:40:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=931186456695fa965c5595b0ab98c8a741e7a557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:f7:37:d4:cf:33:11:a4:f7:f9:d1:f0:01:
3a:ed:bc:24:b9:d7:59:23:af:e3:7b:3f:11:00:86:
9b:6b:9e:05:3b:51:71:80:a2:00:51:df:dc:6a:5a:
22:ca:e2:ca:e2:13:6a:86:cf:97:94:d4:72:00:1f:
59:ba:a6:bb:6f:98:aa:60:50:e9:9e:38:c4:08:9e:
eb:a4:23:0d:15:eb:00:87:6c:93:fb:1c:e7:07:e4:
4f:d8:10:a5:6d:eb:04:8b:ed:52:b2:9f:13:e2:f5:
13:c8:cc:61:59:c7:84:01:a9:c1:bd:1c:dc:9d:c5:
46:1a:68:70:8a:fa:53:0e:87:d7:22:7d:76:b0:bc:
4e:cf:89:b4:70:fd:76:e4:c1:82:e2:08:57:9c:91:
e9:64:19:4f:16:eb:90:9d:76:4d:2a:f8:e6:41:88:
75:9b:77:16:e6:4a:05:b9:5d:b7:92:4c:24:ad:69:
1f:0d:a1:09:b3:5c:d3:34:00:60:f8:31:a9:2f:7c:
84:48:02:01:70:df:c5:31:da:ba:a3:2e:0b:39:eb:
a9:04:5d:f3:87:ed:0d:d9:44:f3:30:fb:81:9f:7c:
f6:cd:19:cc:a2:a9:1d:d7:01:69:42:34:85:b5:c9:
ea:60:64:21:24:e6:74:0b:a3:f4:25:02:a8:2f:1d:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:86:45:66:95:FA:96:5C:55:95:B0:AB:98:C8:A7:41:E7:A5:57
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9c:70:f6:fd:50:04:0f:e5:cb:eb:55:c1:08:77:32:ac:5f:
89:4b:4c:ce:4f:7b:7a:d2:fb:e6:54:99:45:45:29:7f:e0:77:
81:1b:15:de:86:aa:e6:d4:55:00:d6:5d:d5:26:bf:6c:4a:6d:
6e:5d:c0:ce:03:df:31:92:f5:36:ba:e0:84:4b:10:50:37:bb:
b8:f9:e6:e4:e8:21:4e:f4:3c:81:9c:53:09:26:a8:2d:7c:87:
ea:f6:ab:fb:25:d4:a3:85:7e:ba:59:fd:04:c2:ff:1a:77:1a:
6b:c2:d2:0f:73:cd:3e:fb:dd:cf:48:fe:3f:ce:b7:eb:6a:b0:
ef:5a:ea:7d:c6:c4:80:db:55:21:4b:73:31:40:89:4a:ce:a3:
65:06:2b:51:8b:50:3a:f2:12:0a:48:7e:dd:b0:03:b3:7b:1f:
0f:30:ca:14:d7:8c:13:e7:5b:6a:fd:f6:29:03:ed:b6:64:7a:
08:66:d3:4b:06:44:05:29:1f:ab:06:af:b3:9c:c2:51:c8:66:
a3:c2:69:0d:63:92:dc:36:cf:2d:c9:e5:a8:1f:19:e2:19:06:
b8:40:03:a7:c3:c0:8e:0a:0e:a2:ab:8f:5e:a3:cd:24:5c:f8:
ba:a9:ae:35:9c:2e:7b:09:4d:c8:59:80:a3:92:59:bf:be:5b:
82:a8:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:21 2025 by rpki-client