Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File: x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier: +sCMC0uOzvasQiSNyulKVA6ZDzbf/vB53QNVDcI/7XE=
Subject key identifier: 43:91:B2:E0:AB:5D:D5:A4:51:91:95:7B:EE:CE:72:DD:8B:AE:27:0B
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer: /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial: 0198D47355C17573225E6310A0797CF78967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 01:03:05 +0000
Manifest this update: Sat 23 Aug 2025 01:03:05 +0000
Manifest next update: Sun 24 Aug 2025 01:03:05 +0000
Files and hashes: 1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: tcJFcttfr85EprNMc3dTy35N6NZAMp5yHnI7k0hOvoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:55:c1:75:73:22:5e:63:10:a0:79:7c:f7:89:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Validity
Not Before: Aug 23 01:03:05 2025 GMT
Not After : Aug 24 01:03:05 2025 GMT
Subject: CN=4391b2e0ab5dd5a45191957beece72dd8bae270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:ad:a1:cd:84:94:60:a3:83:27:f6:23:b4:
ca:17:7b:d3:f2:38:d6:40:44:55:fe:3b:db:e2:63:
b2:82:18:94:0c:10:30:bd:5d:47:f8:bf:ee:3a:49:
7e:2e:e5:dd:62:ab:ad:76:cb:46:77:d5:d1:66:69:
45:96:99:43:c0:be:9c:87:cf:c5:4d:72:f5:01:4c:
79:78:9e:68:c7:d6:e4:2b:4f:38:bb:a3:c7:1e:3f:
15:d4:2d:c1:d6:dd:8a:e0:28:f2:9a:fd:0b:c1:31:
7f:27:76:e9:7a:7d:8d:9b:9d:67:13:8f:3a:71:9e:
c7:df:bd:19:73:9e:73:bb:45:74:59:6d:1e:48:26:
79:5b:d3:25:80:57:4a:ab:28:48:a8:78:e5:21:37:
7b:5c:c5:59:9c:f2:78:aa:a4:cf:a1:8c:f1:70:ae:
de:a9:80:9b:e7:78:17:57:03:e9:9d:54:10:45:1a:
6b:d1:3a:01:e2:57:91:52:75:c3:78:1e:e8:1b:46:
7f:62:45:e7:fa:8d:e9:48:a7:24:a5:f3:8d:96:f3:
9e:76:c9:2f:17:65:0f:a8:03:b0:6a:1f:ff:fa:2c:
0d:3c:29:4c:a9:4c:6d:55:f4:54:4b:e0:e4:f5:f9:
66:c4:c4:a5:97:2f:02:6d:0c:3a:d6:f9:cd:9e:81:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:91:B2:E0:AB:5D:D5:A4:51:91:95:7B:EE:CE:72:DD:8B:AE:27:0B
X509v3 Authority Key Identifier:
keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0a:7b:fc:cf:9e:90:e1:4f:bc:31:ea:b3:ad:08:ce:2c:e0:
49:ff:18:7b:20:79:75:a5:de:d5:88:94:8d:04:85:8e:46:c6:
96:7e:29:3b:ab:d4:e4:ca:17:0b:0f:23:0c:c3:1c:99:da:77:
18:7c:ac:bc:4d:58:6e:8a:7f:69:fa:b7:27:b3:4e:e6:8d:97:
68:5f:64:0e:27:fe:a2:f7:bf:bb:9f:b0:57:b7:d1:b3:ed:ab:
78:c9:cf:da:f2:e2:97:5a:cd:0f:a6:40:7f:1a:a2:05:1f:7f:
e8:7b:5c:26:7d:10:36:dd:a4:8c:e5:68:cf:d4:b2:91:12:62:
6f:a6:30:51:8e:90:88:78:07:95:f0:19:d4:e4:39:78:ea:3d:
0e:9a:de:79:24:e0:45:51:1f:c4:21:d9:11:38:74:38:80:28:
96:f2:b6:34:f5:74:6d:cc:0f:5b:8c:0c:ff:88:be:cd:cd:d4:
f6:b9:d5:41:c2:09:ea:be:9d:a5:4d:8b:32:24:54:72:05:08:
7b:bb:80:9f:28:55:de:53:9b:f4:f4:0b:ae:b7:1b:29:d7:57:
c7:a2:7b:1e:d0:aa:6e:c3:80:5b:df:92:ad:8a:ad:99:96:39:
e2:8b:ec:6f:0b:84:c0:55:8b:bc:1e:5e:95:a8:a1:fa:ad:c8:
c4:ad:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:38 2025 by rpki-client