Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: DXx5P3a1wtQV8PNNIsl7G/9XkzDE7MsQSN1wYXGWFvg=
Subject key identifier: D9:17:E4:F1:05:AF:22:63:24:C3:DD:68:DD:E6:BC:6D:C8:12:9F:5D
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 0198D8507922720A2E2F8794D381533EF2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 0749
Signing time: Sat 23 Aug 2025 19:03:29 +0000
Manifest this update: Sat 23 Aug 2025 19:03:29 +0000
Manifest next update: Sun 24 Aug 2025 19:03:29 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: N0rwIXp1FkdRTWKbVnmYlQ3MXgH2Vmv1fCSHtDYp/zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:79:22:72:0a:2e:2f:87:94:d3:81:53:3e:f2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Aug 23 19:03:29 2025 GMT
Not After : Aug 24 19:03:29 2025 GMT
Subject: CN=d917e4f105af226324c3dd68dde6bc6dc8129f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:0d:fe:bb:25:2f:e0:1d:ef:f3:64:0d:76:
e8:25:ee:b7:8d:ef:ff:76:8e:09:d0:d0:38:84:13:
02:2f:cb:3d:bc:e9:51:42:ff:7e:04:e6:c6:2d:9a:
cf:9e:de:5a:30:53:aa:b9:0a:23:21:52:3c:39:8f:
aa:26:5b:01:c7:9d:b3:b2:22:ba:f7:35:5a:d7:05:
33:dc:d2:68:32:56:01:48:5e:fd:1c:9d:3d:c7:46:
16:d8:e4:84:20:bb:22:bb:ae:f1:b9:7c:9d:00:60:
8f:62:e2:71:38:96:e2:e7:59:6c:1d:e0:a3:b2:10:
6e:b0:fa:e8:7b:44:fb:b6:6f:8e:76:d4:d5:b0:fc:
50:3d:d7:c8:45:b6:0f:e2:b1:cd:c3:f0:0c:ea:50:
a0:ab:58:b6:c2:42:02:dd:f1:2d:99:6b:1c:74:9c:
8e:7c:d5:4a:c2:c2:07:10:f0:f2:77:6a:88:32:a7:
4d:45:0f:9f:9b:d6:80:25:af:62:c0:ee:67:f1:fa:
81:d2:f0:2c:36:e3:a2:1d:bf:89:f9:45:af:71:f3:
52:ce:06:f6:8c:c6:32:65:81:3a:46:7f:f3:a7:7e:
c8:ab:17:fc:0d:52:eb:19:3a:f5:91:08:c6:70:24:
eb:2b:e8:f0:dc:f9:0b:ff:6e:02:fa:8e:e4:15:1c:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:E4:F1:05:AF:22:63:24:C3:DD:68:DD:E6:BC:6D:C8:12:9F:5D
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:50:97:33:6f:57:fe:22:96:69:c3:e9:07:ee:0b:c0:03:d6:
57:d7:6b:bd:27:83:7b:9d:88:ba:13:1f:6f:23:36:17:a6:b9:
15:db:f8:d6:d5:52:9b:3e:99:30:9a:d9:23:ee:56:a4:69:12:
73:20:f2:30:02:1c:07:41:67:05:47:ba:a0:b8:1b:37:7f:c3:
6f:97:78:ba:ea:9a:30:5e:da:9e:54:7d:00:18:c4:b0:93:38:
2b:6a:d3:20:2b:43:d9:d8:93:09:88:33:12:f5:8d:10:de:4c:
e5:c0:1c:e4:b3:15:ba:6f:94:64:b2:5a:84:90:01:35:d8:d7:
f7:0b:32:59:f9:de:9f:99:44:83:b7:dd:92:52:79:c9:db:65:
08:55:a0:37:54:1a:a7:14:c4:9a:6a:7c:f4:b8:97:5c:6a:b2:
09:67:42:05:b5:5f:cd:ef:59:4c:be:52:5a:72:39:ff:1d:b4:
59:c2:8e:f2:d2:3c:c0:58:e5:28:0b:11:40:f2:ba:f3:49:a7:
bb:59:10:05:dd:ea:29:7c:01:76:f2:5f:e4:84:10:c2:60:b6:
7b:81:12:ca:46:01:06:1a:c0:33:f3:19:0f:83:dc:bc:9d:4b:
b9:b7:1c:19:50:48:37:65:ae:34:ed:47:72:e6:5c:ef:49:51:
30:b2:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:54 2025 by rpki-client