Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: IwarW3bNpUSaLXAMr/AUaSB7nKK+hGom4I8tGojwI+M=
Subject key identifier: 58:77:29:A1:DE:A7:06:03:73:5F:47:4C:31:CB:A6:0A:A5:92:89:46
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 0198D472C9192A2C2CA1B33BA3DE3A513C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:02:28 +0000
Manifest this update: Sat 23 Aug 2025 01:02:28 +0000
Manifest next update: Sun 24 Aug 2025 01:02:28 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: alzeCU/3NkYQgm3cBbLBUitxprxx1CDnE6oDqLkB6hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c9:19:2a:2c:2c:a1:b3:3b:a3:de:3a:51:3c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Aug 23 01:02:28 2025 GMT
Not After : Aug 24 01:02:28 2025 GMT
Subject: CN=587729a1dea70603735f474c31cba60aa5928946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:29:2a:9e:88:ac:50:db:09:fd:c7:50:6f:
64:8a:f3:ae:98:d4:27:73:60:ac:76:61:92:51:d7:
4e:7c:f4:83:0a:93:4f:4b:15:76:d0:ac:15:fa:67:
b8:4d:7d:82:7c:97:68:6e:c2:fa:d9:32:7f:d1:34:
4d:b5:ba:ec:72:72:01:71:1c:96:fc:70:8d:53:8f:
be:ba:6a:13:52:ca:ea:66:7a:60:de:cd:52:02:b7:
24:af:83:0b:96:ee:37:dc:3f:75:42:9b:9a:f8:e6:
e6:5a:2b:72:63:de:38:90:95:dc:c9:37:08:14:48:
b4:59:92:5f:5a:e3:9c:ba:ca:74:6e:1c:f1:d0:09:
42:66:a3:34:0b:61:55:c6:4a:4d:9b:1a:f0:6d:6e:
98:09:d9:45:e9:06:f0:e7:0d:ae:ae:39:c5:e2:de:
6b:f1:e9:a3:6b:d9:41:e6:67:e7:b6:29:7d:81:1a:
13:25:cc:7a:60:4f:a5:7f:2c:83:c3:83:8b:98:8b:
35:d8:f1:dc:d7:23:46:6a:b7:6d:4f:05:e8:74:d4:
07:ed:2e:12:99:2b:d8:62:38:a5:38:05:e3:42:19:
57:69:04:3b:f9:f8:29:77:d2:dc:e6:93:b7:03:ec:
5d:bc:f7:24:33:e5:86:3b:55:01:ad:21:13:60:04:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:77:29:A1:DE:A7:06:03:73:5F:47:4C:31:CB:A6:0A:A5:92:89:46
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4e:86:cd:7f:5a:ec:ac:73:34:e5:06:d9:55:f4:ab:43:0f:
f2:69:6b:bd:06:21:60:4f:4e:75:67:8a:b5:ca:0f:ef:3a:fb:
87:da:90:8b:bf:20:b8:0a:bd:8d:3f:12:c2:9f:a5:dc:97:39:
29:94:62:ef:68:cf:a8:bf:eb:28:4c:2f:f0:fc:6d:47:29:83:
61:d5:96:df:04:51:e4:54:f3:7a:f8:a3:34:82:30:bc:cc:39:
fd:a9:0a:5f:24:8a:b6:f3:75:fd:13:e7:72:82:e2:3f:d1:38:
7d:cb:a4:e5:94:dc:35:e1:79:d7:66:0f:6c:e7:ce:ba:91:87:
84:46:39:fa:74:1a:6f:d5:d8:36:69:b3:76:5f:58:d9:0b:23:
ac:f9:bf:9e:8a:38:eb:78:a4:3f:b0:d4:09:cb:cd:b4:d3:c4:
2e:19:d7:77:fe:80:2b:a7:50:8f:57:c9:77:7f:d1:9e:c9:45:
37:de:82:a0:b5:0b:20:83:e7:7e:a8:80:96:85:85:2d:ad:b7:
e8:df:66:c5:93:1e:69:72:40:92:b8:6a:5b:fa:46:98:35:ba:
13:9a:fe:d5:4d:39:3e:b4:8d:b9:2c:e0:a2:bd:32:76:1e:73:
4b:db:55:0a:43:c3:e0:49:e2:10:f4:c6:33:0b:6f:8e:ca:98:
1c:9c:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:14 2025 by rpki-client