Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
File: NbdnbT6rzEXogFTIuEBH7ocyvHM.mft (raw, json)
Hash identifier: nylAtkWZ5G1ltZVAq4MnzMte1jFm5Vv2xBvlQ7hGOGY=
Subject key identifier: 6D:52:88:54:4C:C8:DA:C7:53:A8:9A:00:43:AD:CD:57:51:23:7F:3D
Authority key identifier: 35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
Certificate issuer: /CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Certificate serial: 0198D5839F218EE0F1C2F675B68AF47E9254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
Manifest number: 033D
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: NbdnbT6rzEXogFTIuEBH7ocyvHM.crl (hash: F8t9eL3ih+n6PvZeuAdYgW77ksv1LkYDtUzQGVhtxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9f:21:8e:e0:f1:c2:f6:75:b6:8a:f4:7e:92:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=6d5288544cc8dac753a89a0043adcd5751237f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:00:23:b2:cd:80:32:71:1c:0e:16:09:17:
7d:c7:88:ce:21:55:3e:7e:9a:41:bd:7b:aa:88:d5:
95:e6:7f:e7:50:5e:a4:67:c2:d1:40:9e:15:ec:2d:
a2:71:30:5d:a9:07:c1:1a:ff:b9:ed:f5:99:22:96:
dd:e8:3f:6b:f9:53:57:7c:70:0e:35:64:10:9b:37:
75:90:e1:82:27:16:e3:4a:b6:36:8a:c6:c8:00:47:
84:30:c3:be:c3:d5:a6:60:c2:68:a6:4b:b3:aa:34:
b0:5c:a7:aa:67:7a:e7:f0:e0:2c:90:c8:d4:a7:0d:
0f:f1:99:79:5a:d2:76:b2:f3:2b:e5:db:67:7e:2e:
71:3b:c9:25:22:16:be:ec:75:74:6e:2a:db:ef:9e:
72:68:25:05:89:24:91:51:22:58:fd:49:01:c1:c1:
e4:c4:ad:98:bf:b7:62:86:13:5e:a4:2e:e8:37:e2:
64:fd:65:3c:3a:8e:b3:41:71:de:ed:b8:5c:06:8e:
c8:ec:b8:54:9f:45:87:31:fc:53:54:35:49:bc:77:
22:1a:bf:c1:fe:10:26:83:c8:73:6a:5b:5d:40:43:
29:c0:71:97:b1:30:2d:92:cf:0f:62:8d:6c:73:82:
e8:af:92:79:53:87:12:ee:98:3d:7c:57:6d:af:88:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:52:88:54:4C:C8:DA:C7:53:A8:9A:00:43:AD:CD:57:51:23:7F:3D
X509v3 Authority Key Identifier:
keyid:35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:52:96:3c:95:a4:c0:62:f1:07:f7:98:8b:9f:bc:be:ef:62:
04:d4:b0:fd:51:ce:f9:06:58:e8:1a:d3:c7:ad:9f:9d:ee:99:
6f:e0:c1:f4:fc:42:2a:73:b8:44:55:12:8e:f0:5e:1b:b2:c5:
40:0e:cc:44:dd:b6:7c:99:cf:93:ec:5d:88:d9:10:a8:d1:f5:
4c:b7:e2:fa:00:d9:b8:54:96:2a:a3:ee:d0:e7:73:39:76:2d:
c2:28:cd:97:27:90:5b:a7:12:4b:89:b5:8e:5a:07:cd:1d:42:
93:6d:4a:58:de:e4:d5:73:4c:e0:c6:4c:96:dc:b2:e9:b2:f9:
ad:5f:f1:91:f6:87:32:97:d2:18:8c:0f:69:92:f7:db:65:9d:
1e:a0:15:56:65:04:10:dd:2e:6c:ef:7f:6e:ce:6a:5c:87:28:
96:b6:97:06:35:a9:15:9d:af:2e:12:ed:19:05:2e:b1:27:c7:
fb:0e:97:1c:32:f0:98:74:46:13:f2:df:47:a2:cd:79:39:5a:
8a:dd:19:8c:e9:b9:67:e7:50:d6:5e:64:b8:ec:5b:27:b1:93:
24:3c:0b:d7:22:72:5f:87:ea:3c:94:2c:e0:03:1c:1b:bf:cd:
6b:c1:ff:66:e1:78:92:cd:fb:44:89:1c:ab:6f:af:9f:77:42:
05:08:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:53 2025 by rpki-client