Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json)
Hash identifier: x+tKgk3RfsIty6C0hWYrvHOUlrhjkeOHiQA+ESyVqnk=
Subject key identifier: DE:E3:48:9B:22:FE:04:2B:95:8A:43:AF:89:E1:09:C8:67:34:CF:89
Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Certificate serial: 0198D439AE11C9522A764D4B4E88E97734FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 00:00:06 +0000
Manifest this update: Sat 23 Aug 2025 00:00:06 +0000
Manifest next update: Sun 24 Aug 2025 00:00:06 +0000
Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: HNz9/rqqlVbBLpwfMlwBM0al/giLBgFbLL1uZFRnx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:ae:11:c9:52:2a:76:4d:4b:4e:88:e9:77:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Validity
Not Before: Aug 23 00:00:06 2025 GMT
Not After : Aug 24 00:00:06 2025 GMT
Subject: CN=dee3489b22fe042b958a43af89e109c86734cf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:7c:18:cf:55:4c:dc:76:5b:78:38:5a:3b:
13:ec:47:5a:11:c4:2b:58:82:6e:04:e0:b0:18:82:
f6:69:7c:68:f5:17:77:b4:6f:ed:23:de:55:b3:e3:
d3:38:70:40:0a:14:c0:23:39:e2:e5:94:bf:4f:6a:
78:5c:f4:8d:79:2a:27:59:36:8d:1d:e2:c0:2f:94:
b1:47:72:7f:ff:71:48:19:c7:6b:e2:13:37:f4:51:
5c:5a:e5:f6:75:6f:f8:d1:9c:d8:d1:d2:6d:f2:25:
57:b8:a8:a7:2c:ee:41:b6:57:de:34:10:1d:04:b7:
67:fd:98:ea:2c:7d:0e:d4:72:5c:0c:ef:66:a7:8f:
f2:70:0b:2f:eb:ce:ec:0f:b6:4e:59:3f:29:59:0b:
b9:15:ef:d5:7f:bf:40:c8:13:a0:6c:21:85:3c:0b:
23:49:89:d9:75:ca:11:7b:7f:4a:71:6d:8b:1d:a5:
33:fd:87:76:8c:80:93:d1:66:54:86:0a:91:e8:f0:
44:4d:4a:87:32:d6:5a:33:c7:9f:ca:b5:93:b7:e1:
a2:5f:d2:14:a5:43:e4:e3:3b:f1:59:b7:b9:11:60:
59:a1:96:23:32:8a:e9:1e:eb:16:90:33:fe:95:93:
7c:ee:a8:da:25:f8:88:a2:10:23:bd:99:e8:8a:c0:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:48:9B:22:FE:04:2B:95:8A:43:AF:89:E1:09:C8:67:34:CF:89
X509v3 Authority Key Identifier:
keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2c:bf:32:7f:44:85:00:41:0b:2b:9c:12:c2:ed:8c:c9:0d:
5b:ad:90:6e:5a:36:c7:29:5c:8b:50:1a:b1:4d:db:56:be:3b:
95:10:4c:56:1f:8c:fe:ea:c3:f4:cc:88:bf:bf:57:68:0d:dc:
35:ad:62:9c:19:cd:aa:78:09:a5:8e:cb:27:5c:b4:a1:41:7a:
9b:73:1a:47:4d:b4:2f:61:95:ba:52:29:b1:89:f7:1f:ef:69:
34:dd:13:4d:37:a0:59:90:e4:90:2b:b9:d2:ce:7b:13:4d:38:
1d:3a:3a:0e:ec:c3:be:2d:e7:08:a0:cd:6d:95:2b:e0:60:e8:
a7:aa:06:cf:10:c6:46:31:15:eb:bc:07:58:4f:73:9d:4d:f0:
a8:2b:6a:86:35:a3:d7:89:f0:f1:50:f9:65:60:1b:fa:3d:4f:
26:93:94:00:e6:b4:9f:47:6e:8a:59:e6:28:1e:9f:de:a1:6a:
15:24:a0:d0:e7:05:8f:b9:86:ac:ec:ee:a3:b0:eb:e4:6a:fe:
09:d0:c3:df:32:a6:c0:6f:4d:e8:62:c7:ac:15:50:b5:fc:75:
9e:9b:7c:29:f4:4a:94:4e:31:56:25:df:2e:18:50:a0:cc:7c:
b6:36:cc:13:1e:ba:cf:10:c6:eb:80:28:ad:d8:3e:29:6f:c1:
9e:53:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:41 2025 by rpki-client