Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: LHBZMcxdMWbqUYPy37pBUhMF3p6UWtERhBmXgrdYbaw=
Subject key identifier: 08:86:25:F2:10:FF:94:16:CD:37:BD:E6:E4:59:A3:41:8E:52:5F:FF
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 0198D5BBED8AFADACE3968A0561728892061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 0501
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: Mnb50ZHvzVlLryxCNSVGS8cn2wTpbzylTNs6yilWteU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ed:8a:fa:da:ce:39:68:a0:56:17:28:89:20:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=088625f210ff9416cd37bde6e459a3418e525fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:94:d3:d1:6b:a6:cb:02:26:4f:3a:3b:aa:f2:
61:00:9b:56:f6:8a:ee:7f:57:df:fc:ed:b9:e1:0c:
f3:46:06:8c:50:f9:9f:a7:2f:2b:ee:a9:fb:9f:aa:
cf:ea:2f:1c:00:c4:9c:6d:ed:9f:05:b1:19:37:c5:
fe:d3:8b:74:a0:93:5f:b4:4a:37:f0:2d:a4:86:4d:
80:72:53:cf:1a:45:1e:58:ac:25:58:6c:6d:2c:2b:
34:b2:f1:a9:9d:d0:6a:68:94:b4:8f:a5:91:96:4c:
b9:cc:e9:76:87:40:72:01:bb:ba:1f:3b:26:67:57:
18:32:50:e2:9f:f5:d9:ce:83:9f:fe:58:f4:0c:e4:
9d:16:e0:30:8e:55:b7:20:22:92:a6:b7:10:d6:c8:
e3:8e:02:7c:76:1b:aa:03:a0:a1:c3:93:46:1d:f6:
5a:a5:bf:6f:d4:85:af:a9:ee:fd:55:e3:c4:07:80:
cc:0a:05:37:a9:df:c0:e8:1d:4e:bb:5d:d6:11:59:
56:ec:c6:1d:44:1d:47:f4:83:12:77:b2:6d:a9:28:
44:f6:5e:f1:2d:bd:b4:72:64:48:8b:5e:8c:5f:e7:
63:c9:d8:14:b1:ec:8e:01:e9:20:9a:de:3a:57:42:
b7:b9:f2:35:3a:8f:77:64:37:f6:ed:9f:28:15:2e:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:25:F2:10:FF:94:16:CD:37:BD:E6:E4:59:A3:41:8E:52:5F:FF
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e6:63:7c:e7:64:ac:92:0b:8f:c9:11:1d:4c:96:12:3b:5a:
2b:9e:c7:ff:9c:81:15:97:b1:f6:64:f4:44:dc:07:3f:ee:55:
71:3a:df:c7:a7:1e:14:f6:4d:aa:49:09:f7:b4:6a:67:19:88:
05:ae:09:c0:70:bd:68:7a:ac:8a:54:01:38:71:9f:d5:e7:71:
4c:60:94:0a:4b:2f:3a:86:53:b0:dd:57:70:64:65:30:7b:8c:
b1:b9:8f:be:26:ff:16:16:c0:07:b4:7d:2a:1a:39:df:34:f6:
3a:a2:8e:08:07:20:c8:8c:55:b3:dd:98:2b:9f:7b:82:ce:10:
d2:87:b5:54:4c:07:b6:4f:7c:d9:83:96:5c:43:52:8a:db:8e:
89:f2:7e:8c:fd:94:8c:5b:ca:84:12:11:22:be:98:db:93:7a:
47:33:57:08:6e:de:85:38:88:b1:e1:59:68:e4:95:18:13:d1:
d8:c5:c6:ef:0f:c3:04:9b:45:83:ed:98:47:63:0d:de:11:ad:
e8:e8:98:06:38:ec:e8:71:9d:ba:18:bd:89:62:1e:54:88:a3:
f8:04:3d:c6:9e:d0:f9:87:9c:bf:6b:8d:c2:98:6a:52:de:dc:
28:55:89:80:65:21:4c:94:20:24:4c:b4:94:5b:ff:dc:5b:9f:
26:b4:4d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:23 2025 by rpki-client