Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: ur5ICNeNMarK+goYRE7IUMoWQI2TNQGoxeEQ7u4J+rw=
Subject key identifier: 0C:54:27:3A:FC:8B:89:0A:2F:B3:A6:F3:1C:D2:22:A6:53:FF:A6:BB
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 0198D5F19A19916A55A583AFC10018144CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 06E3
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: gvCq2aQy/odEhhxcH1QQgYmZWlsloQJHmg7BoisiLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9a:19:91:6a:55:a5:83:af:c1:00:18:14:4c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=0c54273afc8b890a2fb3a6f31cd222a653ffa6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:3e:08:0e:0e:d2:c8:66:95:db:c1:cf:2e:
ef:1c:8d:8e:99:7e:dd:bc:00:87:1b:3e:ce:1a:f5:
b0:3a:61:59:c2:ff:a5:1f:3b:f4:e1:77:ac:41:10:
d1:17:04:bb:3a:32:cd:55:ca:bc:26:f3:a8:12:a0:
f6:c6:e9:18:98:d2:76:8b:c3:3d:80:69:9a:bb:f1:
37:28:bc:1e:2d:ab:e5:4c:ff:20:78:c1:0b:7d:72:
bf:c7:77:ca:1d:0f:98:7b:14:a7:bd:80:66:eb:9f:
bc:b2:a8:ed:54:98:de:7b:14:f6:a1:2a:4e:d4:43:
8d:ab:93:2e:b3:98:ce:88:4e:9a:fe:01:9b:ff:0d:
13:d0:e6:8e:dc:7b:41:26:46:4b:be:ae:09:1e:7c:
51:ca:ca:03:4d:49:27:5a:7a:11:8e:59:6d:f3:4f:
74:3c:8e:a0:18:06:5b:14:02:9f:f2:c1:02:8c:64:
2c:2d:f1:fd:a4:7e:71:d2:66:26:85:9d:dd:8a:97:
e1:f3:6a:47:ab:c6:e7:86:76:91:27:f5:76:aa:7d:
17:21:75:68:76:31:c2:68:97:fe:f9:5a:02:d5:98:
a2:5f:bc:98:f7:50:8b:10:93:e5:0d:be:80:81:4a:
79:56:9c:83:3b:c2:be:77:68:30:4f:98:d7:92:69:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:54:27:3A:FC:8B:89:0A:2F:B3:A6:F3:1C:D2:22:A6:53:FF:A6:BB
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:54:dd:e9:7c:21:8d:21:82:cf:3a:42:ea:50:3b:0f:59:6c:
ba:0f:10:81:e7:6d:50:03:8c:a7:41:af:76:a1:c9:ae:f5:de:
67:86:81:41:93:38:a9:5b:01:20:a6:d3:50:af:6f:d7:38:3e:
82:04:be:6d:f4:ed:8e:11:1b:cf:a9:50:a8:52:13:27:ae:24:
b6:fb:b4:10:45:e3:07:4d:ce:b5:cb:9d:54:cd:8d:9e:38:f1:
9b:88:70:9f:9a:82:11:bc:16:a3:d8:ba:4e:74:c7:b0:fd:6a:
f5:27:5a:37:89:b8:2b:f8:23:1a:bd:24:b5:a7:9a:60:90:5a:
72:f2:2e:5f:ac:00:f0:de:b4:c3:aa:b3:51:20:17:87:ec:7a:
6c:13:59:b3:d0:3c:42:08:93:07:4c:93:bd:d6:67:e9:a6:78:
2a:71:14:22:bc:11:b0:b2:0f:7a:98:99:71:5c:43:87:22:00:
e3:50:2a:13:7f:31:8a:d2:ab:b1:5a:58:9e:24:a3:ba:c9:e8:
e4:bb:63:1c:19:96:b6:a6:50:0d:fe:4b:b8:da:b0:04:ff:74:
79:33:8b:e8:24:b5:2e:8c:d0:18:05:0b:0f:76:1f:0c:a0:fc:
93:23:5b:48:9c:fd:dd:ff:16:4d:f2:c8:2b:9b:e0:b0:74:fc:
5e:34:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:37 2025 by rpki-client