Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json)
Hash identifier: fklGSTp0NFmwzm3C0aMUCEE0ucZVtdDVnlgXcIgIoy0=
Subject key identifier: 82:CC:C9:7A:E2:43:B9:F5:CD:11:56:11:80:F0:40:27:D3:BF:AF:9F
Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251
Certificate serial: 0197B74551C493492529F40109BBBDBBD29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
Manifest number: B4
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: 1yP6eMl0UY2Rreq0tiOhpL+HKTXWXmQKztYpvnWG2n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:51:c4:93:49:25:29:f4:01:09:bb:bd:bb:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=82ccc97ae243b9f5cd11561180f04027d3bfaf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:fc:a6:d0:3d:3a:73:44:3d:4f:9b:c3:c7:
8f:d0:e5:ba:7d:cc:09:04:7d:e6:4b:27:69:7b:97:
95:b3:ff:71:b2:70:fb:1c:95:d0:d8:99:32:42:d7:
f7:17:b4:09:41:26:06:25:34:6c:14:8e:54:04:f7:
7c:81:66:26:60:8c:a5:bd:df:ef:2f:59:0f:1a:ea:
ce:a2:73:26:b0:8f:68:b9:ec:7b:94:77:32:dd:56:
f6:ed:ad:1f:4a:1a:f7:c7:f9:3b:73:c8:ab:80:32:
25:ac:36:bf:13:f5:26:9c:10:44:0e:1f:90:61:48:
16:93:94:8b:19:c8:8a:ea:b2:e3:c5:df:1c:bd:8d:
b2:39:56:ad:df:2f:7c:e9:66:3b:c7:41:d7:19:9b:
9c:ac:c1:18:80:1a:63:20:ed:cd:0a:0c:23:c5:08:
98:ca:bd:63:56:54:e4:ff:c2:f9:7c:21:f8:82:90:
90:bf:44:89:bf:7a:93:07:a3:3d:5a:02:dc:ee:9f:
a5:3f:ee:79:ae:04:4b:9d:d4:db:df:a4:7e:38:28:
7a:ec:45:39:e5:86:d5:e0:34:b7:35:e7:4e:0d:96:
01:a4:ca:bb:d9:f0:b9:64:0d:60:33:e5:7f:b4:48:
d4:e7:86:cd:b8:90:ff:34:56:89:2f:6d:78:31:57:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:C9:7A:E2:43:B9:F5:CD:11:56:11:80:F0:40:27:D3:BF:AF:9F
X509v3 Authority Key Identifier:
keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9a:f4:a1:d8:93:9c:39:7f:3a:26:c9:94:e7:bd:9d:b9:a7:
db:33:e3:87:3b:0a:01:b4:c4:07:e3:c7:64:a0:7d:5b:04:0f:
d7:00:63:47:48:ed:df:55:71:05:f9:d1:7b:76:0c:8e:1e:f3:
b8:24:70:86:9f:e1:28:9d:8f:af:91:8e:17:64:ec:ea:bf:fd:
2c:63:bc:13:fb:de:6c:29:b4:12:ad:c0:93:62:c9:5c:5d:5e:
1f:df:6b:c0:cc:fb:65:fa:df:34:d9:20:eb:db:a0:f0:aa:45:
f7:cc:e5:26:b4:17:31:f1:bb:8c:23:13:89:e1:f1:40:45:c2:
4f:55:6c:13:eb:f2:d5:4e:8d:c4:c3:8b:5a:d7:2e:d0:70:63:
6b:22:00:61:9d:84:b8:a7:d5:5e:fe:e4:14:b4:1d:14:c2:d4:
26:d8:c7:83:7a:8f:d5:bd:5b:47:cc:e2:0b:f4:12:28:9e:c9:
0a:48:08:70:ea:e0:64:08:86:c1:db:31:21:bf:ab:1c:a3:da:
5b:a8:97:a6:ba:e8:ae:22:b0:91:f0:cf:6d:d9:90:07:c8:07:
1d:cf:5e:a3:35:6c:d7:c2:25:6e:3a:a0:3f:fe:40:cc:de:b5:
ef:10:e1:04:78:22:2d:53:1a:1a:6b:9f:f2:4b:54:90:f5:69:
c6:66:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:55 2025 by rpki-client