Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier: JR9gxSUW3nCTJ/9rbSGaGcg5KtvLhrb8KXhux7F4ecI=
Subject key identifier: 44:36:85:31:88:78:0B:8B:CE:49:AB:E7:AE:48:B5:0E:10:A5:F2:70
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial: 0198D4740D6E76A142B929D77F6DEC12CF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number: 0B49
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: pjZ2n4gMmkupEo1SlNKJvvjpfbVxo8Axs2UFTOiB/z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0d:6e:76:a1:42:b9:29:d7:7f:6d:ec:12:cf:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=4436853188780b8bce49abe7ae48b50e10a5f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:4e:58:3f:0a:c3:f0:9d:3c:60:47:89:99:
1f:b3:89:83:e0:08:67:28:97:3b:99:ae:7d:52:5c:
b2:9a:8a:a5:d0:c1:31:53:54:22:ef:b4:85:8e:ef:
60:7b:71:7a:99:4e:ab:46:3b:bb:e1:3c:81:ae:5b:
02:dd:ed:44:a5:18:3f:6c:00:a3:fb:7d:5f:08:49:
94:17:8a:85:79:f7:f4:0d:95:00:b4:35:19:9b:46:
06:d4:58:fb:53:27:92:15:20:a4:c4:eb:b1:44:b4:
e3:be:76:18:82:96:89:75:cf:81:c1:c6:50:08:41:
97:85:18:c4:ce:73:fb:5c:06:12:0d:5c:18:74:d9:
97:66:3f:90:4f:5c:f3:88:b8:e8:df:1b:ed:15:c8:
f1:34:53:25:94:13:b8:28:6f:3b:85:f7:7c:b0:8a:
6b:ff:a8:6e:a2:f6:11:1c:2c:e7:39:28:3a:f1:01:
85:11:38:b3:27:de:c0:19:52:19:d8:1e:d0:7a:9e:
5a:a5:05:21:26:82:14:ae:a4:ea:85:11:b1:ce:5b:
af:17:18:08:fd:77:53:3c:f0:eb:3e:80:9b:1d:0d:
76:a5:38:d8:cf:5c:45:5d:08:2a:88:78:57:7d:ea:
cd:99:d1:4e:79:aa:3b:99:66:99:09:8d:7e:f0:6f:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:36:85:31:88:78:0B:8B:CE:49:AB:E7:AE:48:B5:0E:10:A5:F2:70
X509v3 Authority Key Identifier:
keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:90:bb:30:01:a1:d5:fb:e9:1d:bf:e0:ea:f0:87:4a:49:2a:
96:a7:f7:3f:5d:47:b1:ad:cd:09:e9:cb:29:5e:97:24:0d:f2:
a6:c2:96:78:a7:ed:0f:3e:5e:72:e1:2e:ef:59:b9:a9:1c:1e:
bb:eb:78:2a:90:b0:10:fd:58:d3:ef:b2:f8:cd:95:e3:5a:8e:
ae:54:fe:42:2c:80:df:51:fc:84:2d:f1:9d:fa:da:a8:c8:ab:
22:71:ea:8f:c7:ad:65:44:13:6a:4a:5c:8c:89:af:04:3f:ef:
4f:76:6e:4c:5e:0a:6d:93:ef:0b:58:39:d0:f2:1b:cf:8c:24:
23:ee:4b:04:b0:10:31:25:04:27:b1:d2:5e:84:0f:04:7d:a6:
36:7d:65:f3:b5:ca:4a:97:be:87:9d:fd:4d:a0:ad:cc:10:06:
f6:19:28:06:ff:d9:57:56:65:a0:1c:3f:f2:f4:0f:74:4d:df:
fb:18:44:5c:8b:2f:db:d6:f4:e3:d0:c1:ab:a8:58:10:8b:ad:
16:a9:a4:08:bf:0f:3c:bc:b0:1a:a9:68:26:f8:5b:8a:4e:87:
16:45:a4:84:6d:17:0f:24:0f:1d:46:e5:a0:50:47:ce:e5:33:
27:b4:e3:d6:48:b4:b0:e1:f4:38:bf:ed:19:42:07:26:5c:d4:
b2:73:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:38 2025 by rpki-client