Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: dcrI8133T1jhrwBvryd+m+a2/+51b5qN+zozXzizgK8=
Subject key identifier: 19:E1:93:3A:91:4D:E9:FE:92:27:60:6E:25:37:3D:C4:32:9C:37:99
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 0198D62982B47EDB31F5E20E563DE40512A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 65
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: nSN+H5nvuhheylk2xYgDEp1OK6SNMp+ci8cQY+UOikk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:82:b4:7e:db:31:f5:e2:0e:56:3d:e4:05:12:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=19e1933a914de9fe9227606e25373dc4329c3799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:95:f4:85:41:f8:9b:00:70:47:94:92:49:a8:
69:f5:f4:70:23:c8:f4:e6:c7:d2:5d:4a:19:17:ec:
db:ea:11:70:b1:c2:ac:8d:40:a1:59:ba:a4:b1:60:
c2:6a:73:ee:fa:9c:31:d6:76:ec:b8:63:51:20:97:
79:c1:6e:8b:34:41:c7:90:eb:99:f5:44:38:ae:16:
56:39:24:76:73:88:e8:fc:ac:e3:e4:5a:d9:7f:1a:
23:2b:4a:2b:9c:9e:25:ba:96:06:ba:7a:72:af:fe:
25:e5:45:1d:af:2f:c0:2b:76:23:34:37:bd:7c:de:
0b:b4:95:81:b4:fa:09:f1:17:6e:ca:e1:0e:80:86:
5e:59:f4:ea:76:04:05:6b:5b:67:31:9a:43:df:f5:
c9:3b:f0:0f:23:34:88:0f:86:03:73:58:6e:d2:4b:
5c:ff:fe:3b:ad:09:1f:f4:86:e1:6c:12:3f:97:b6:
b4:b2:45:c6:c0:57:ba:a0:9d:0d:5c:9e:2d:25:1f:
a9:93:96:95:bb:64:91:13:c0:24:b0:17:49:f8:e5:
fb:ac:c3:20:91:5f:ff:59:07:13:0f:49:73:11:a5:
84:bf:00:ba:30:6e:c9:f7:90:d0:1d:0c:58:57:b6:
fc:8d:b0:77:7b:ab:b9:3d:34:ab:75:08:36:b0:29:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:93:3A:91:4D:E9:FE:92:27:60:6E:25:37:3D:C4:32:9C:37:99
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ab:ed:81:82:cd:a3:fc:3c:33:1b:00:02:e3:2b:81:5a:0b:
77:9d:18:91:a3:a0:cb:d6:fa:3a:e6:86:2f:a3:3b:2c:1e:33:
43:ae:d8:8d:90:e4:5c:c5:39:a9:f3:52:49:ef:60:22:23:05:
3a:bd:7b:4d:96:6d:8c:a4:03:f9:98:50:6b:3a:5c:ad:f8:de:
64:93:8d:25:b0:1b:86:1f:26:dc:84:28:c0:7e:3c:11:a3:a3:
12:29:cb:ef:79:75:0c:15:82:bd:1f:90:f7:dd:56:df:1e:d2:
3c:7a:53:c6:91:90:e6:55:31:fc:43:52:4b:e5:77:9e:e0:da:
f2:5d:fb:88:68:c1:c6:c8:e3:97:eb:93:3c:e6:20:b4:0a:63:
c2:1f:09:a2:7e:34:b4:56:30:66:68:91:f9:e0:d1:25:e6:49:
2c:8e:e1:2d:6b:45:7d:f8:aa:87:4c:ea:46:ac:31:98:01:fe:
a2:4c:3b:dd:d9:02:2a:b6:1d:05:3c:93:85:94:26:c7:d3:e0:
c0:09:4b:7a:55:bb:8c:0b:57:08:c9:95:e2:28:c3:19:5c:96:
ae:22:69:8c:30:54:7f:31:34:3a:fc:94:4f:2b:81:8a:d1:23:
0d:2d:d4:b6:cc:e8:53:4b:fd:fd:86:08:f6:00:f0:ff:5c:80:
51:e5:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:37 2025 by rpki-client