Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: k0WPmx9QlcaCmmUnIBWtuL71wf5zGmvqhiBvlLtGbW4=
Subject key identifier: FB:BE:CE:76:21:6B:39:B8:10:90:A3:0F:94:EB:88:66:21:59:48:86
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 0198D5BC126FBB1014E74F8AAEC6E79941AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 1094
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: L4Y9EtQSdLxGXLDS7ypaCOZrhU45B2DV1UyRIQznjXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:12:6f:bb:10:14:e7:4f:8a:ae:c6:e7:99:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=fbbece76216b39b81090a30f94eb886621594886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:cb:d3:a3:6a:b7:44:fb:5b:6b:d4:bc:c4:
34:49:62:a1:7d:b3:af:eb:af:ef:e7:df:65:f9:2f:
9b:69:60:c3:f9:9d:55:10:59:23:a5:78:00:c7:26:
a7:09:85:55:3f:92:31:cc:3c:e3:e5:07:21:77:1d:
24:c1:a8:e8:45:46:ec:aa:e8:1b:20:99:04:6b:da:
b0:43:42:08:d3:95:eb:bc:76:b8:0a:32:fb:1c:78:
3c:d5:97:3e:58:72:8a:56:d3:8a:85:f0:0e:67:d5:
e4:bd:47:52:45:cf:79:09:8e:61:4b:23:d5:bd:41:
b9:ed:93:3a:ec:35:d9:ce:f1:ad:d6:70:0f:91:b7:
23:c0:2d:d0:7c:18:65:13:b6:55:d4:14:b3:e0:ee:
60:7f:48:f6:a0:93:0b:89:6b:50:de:f0:6b:82:26:
79:f7:cd:be:7c:e1:42:08:ee:40:a4:47:0b:a3:c5:
f8:42:0e:fe:3d:b0:8a:7a:57:af:7f:cf:a1:d6:c3:
ed:73:46:89:c0:b6:ab:eb:0e:f9:1d:e7:59:ef:d8:
08:0d:f5:1b:b2:16:ee:f4:95:c2:90:51:e1:b4:88:
1c:c2:99:49:4a:10:fa:d8:b1:d8:32:d2:78:2b:d5:
55:95:99:5b:c2:c1:2d:c6:bf:f9:30:8a:3b:e5:d5:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:CE:76:21:6B:39:B8:10:90:A3:0F:94:EB:88:66:21:59:48:86
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:13:15:47:18:9e:60:a2:2f:62:ab:55:8c:8e:09:43:d7:a4:
fc:1f:74:23:60:5d:43:7d:2b:cf:88:a2:ea:66:09:2c:41:33:
e2:48:99:33:c3:2f:63:39:f2:97:9d:ee:a9:7d:50:a1:56:59:
e0:48:56:5c:b1:18:eb:13:9e:0f:87:b5:34:45:99:99:fd:e5:
7f:d3:cf:19:8f:de:82:4d:63:f5:55:da:3a:c3:df:5b:47:3b:
b3:cd:1a:36:30:f2:68:c5:ed:d2:c6:f6:39:c8:e4:49:75:2c:
05:75:36:31:c2:e4:f8:1b:c2:4a:47:53:0c:d3:cf:40:f3:14:
58:87:38:61:18:95:2b:2b:f1:c2:54:2a:11:60:38:d1:b8:6c:
9a:8e:ea:da:9e:25:f9:49:21:f0:aa:69:73:74:d2:5d:7c:80:
18:a4:52:45:d2:a3:1a:c4:97:15:6d:a2:8e:c0:ef:67:7a:ce:
ac:b4:d7:ff:e1:ba:f9:f3:ed:7b:4a:9e:b5:b6:7d:43:db:f9:
50:c5:46:d1:90:39:64:82:4e:3b:10:08:dc:c4:f5:ed:87:f4:
6b:f4:27:7c:e2:2c:32:01:f8:3e:f7:35:c5:30:e8:2d:56:e0:
ed:f7:a3:ea:4c:9b:0c:44:43:c0:0c:69:5b:f5:af:0c:07:79:
bd:bb:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:46 2025 by rpki-client