Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: zU23d56nZAUCxU+RAe0su+RIm+44vAiUHjlTfck1KM0=
Subject key identifier: 91:E7:DC:93:34:1D:6B:87:3C:CC:DA:2B:2A:AB:EE:E5:B1:1A:30:93
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 0198D4DFFDC7C13C34D0309B9E6F4004BB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 0546
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: dSiilMmk2f7OP3Dd2pru5lLTT7qjX/iSV2WFj0NNuPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fd:c7:c1:3c:34:d0:30:9b:9e:6f:40:04:bb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=91e7dc93341d6b873cccda2b2aabeee5b11a3093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:c2:76:54:51:4d:a5:09:4e:fb:3b:37:c6:
f1:51:a2:6c:ec:ae:de:6a:38:4c:42:de:e5:51:e8:
c2:f7:68:50:3d:11:12:62:cc:f4:0a:a4:0a:2e:05:
b7:3b:6a:d7:a9:ac:ae:4a:16:63:b3:23:9f:6e:4f:
37:6a:e1:39:78:ea:ca:18:e7:fa:1c:c9:33:27:bb:
f7:fd:59:46:4f:18:42:08:1d:85:f8:7a:0f:04:d9:
59:00:e3:5d:69:a2:06:9f:9f:71:19:87:cb:00:6b:
f3:c8:93:a8:ca:f2:7d:d7:55:46:59:52:e8:61:94:
da:b7:09:79:a6:ab:b4:19:a8:16:da:ae:8e:d7:d7:
de:9c:c5:62:22:68:5d:37:d3:7e:ab:6c:82:04:9f:
69:79:b6:80:1b:5f:50:56:dd:a9:ec:2f:5e:d2:b2:
e5:61:e0:13:88:be:e4:83:39:df:6b:a5:9e:01:30:
94:ce:61:ea:27:c1:49:d8:44:51:d3:c2:53:62:c7:
a1:13:c7:b0:b9:50:ad:5f:d0:a6:49:4a:8c:8d:43:
e1:ce:be:5a:39:36:17:5a:e2:d3:0c:42:65:8c:3c:
04:1a:15:6f:7c:30:b7:d4:95:c3:e7:b0:f1:90:81:
a9:c0:05:a3:b8:8a:35:70:84:bd:f3:31:e9:16:ae:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E7:DC:93:34:1D:6B:87:3C:CC:DA:2B:2A:AB:EE:E5:B1:1A:30:93
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:76:8c:70:51:a2:bf:7d:18:55:b9:35:2b:f8:76:a5:fc:24:
ca:50:55:7e:2c:21:fd:c8:f3:cd:e3:07:94:51:62:39:0b:5d:
d8:c3:c9:ef:37:de:69:4f:2a:19:44:18:2f:e5:88:62:b5:b3:
cd:e4:c1:4e:56:52:71:68:ae:81:cd:0c:4e:26:65:81:99:01:
7c:ce:91:71:55:d8:f3:32:2f:0d:3f:52:fd:ee:3d:32:27:eb:
be:dd:ff:77:6e:d2:e7:12:51:49:80:03:a8:4a:31:bd:5b:4d:
67:22:d1:9f:d7:79:9f:f8:eb:29:d2:98:c9:52:df:fa:8a:67:
c0:f7:71:28:1b:dd:2b:57:3f:89:88:b5:ec:95:d0:1d:69:90:
5f:b4:8d:31:47:fe:9f:c0:7a:b4:67:c5:89:72:77:18:9f:16:
11:3e:67:ab:bc:25:a9:57:e3:8d:4c:0c:04:88:c2:6c:21:02:
c3:95:3e:25:d6:a3:bd:25:ad:5b:71:bb:35:ef:e4:95:f7:70:
54:17:26:26:35:bb:64:ed:7c:7d:4c:61:74:30:98:12:32:1c:
1f:a4:98:ec:d2:e5:c1:22:b8:5e:53:b1:2d:7d:44:a6:0b:e8:
30:bd:a4:d1:52:fe:30:9d:c1:d5:16:87:27:ae:77:82:d9:f2:
79:27:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:28 2025 by rpki-client