Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: VOgJZa+YLor38awozYtl/3XsIquXuEhYIIVb95MbLWA=
Subject key identifier: BA:EF:81:51:88:AE:0F:2B:8F:46:E4:2E:D9:2F:F2:AC:4D:E4:FF:2B
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 0198D47376A6BE9E0A3BB1558E2F52A46EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:03:13 +0000
Manifest this update: Sat 23 Aug 2025 01:03:13 +0000
Manifest next update: Sun 24 Aug 2025 01:03:13 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: sjEgKY3AM9+lnfJVaJRBsHurdjUNDNkTImBlcL02m9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:76:a6:be:9e:0a:3b:b1:55:8e:2f:52:a4:6e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: Aug 23 01:03:13 2025 GMT
Not After : Aug 24 01:03:13 2025 GMT
Subject: CN=baef815188ae0f2b8f46e42ed92ff2ac4de4ff2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:e1:8e:4c:75:ee:2f:25:5e:1d:9b:f8:91:
d7:df:cc:71:b1:66:9b:3c:c2:46:40:fa:78:32:3a:
2f:b7:64:a7:2d:41:f2:9d:0b:08:f1:97:3a:51:68:
ef:31:c4:0d:68:43:cc:3a:0e:f8:9c:1e:6c:57:c1:
8e:25:09:7a:b6:b6:da:d7:1f:51:d2:1e:13:fe:48:
b3:1c:74:b7:b2:b7:d6:db:9a:f6:de:28:22:a7:6c:
b3:7a:b7:03:59:4f:b6:fa:3f:a3:15:24:a4:cc:14:
e6:4b:f4:7c:a5:c7:60:a2:b4:89:e5:fa:23:fc:90:
4a:b4:08:ee:a3:3e:e4:5f:a1:c3:36:f6:9a:bf:84:
38:79:24:3f:91:18:f3:3a:41:20:0f:5f:62:6b:19:
89:8b:a5:9b:1c:40:d2:72:31:39:5e:e7:d4:c7:5c:
57:7d:b0:2d:22:00:bb:1a:3c:a8:17:77:0e:4d:e2:
4f:18:f8:f4:9e:0a:83:88:a6:9d:6e:81:1c:b9:57:
d9:e5:80:6e:1f:dd:1a:eb:60:6f:4d:b6:28:54:05:
73:f2:72:a0:21:d5:ff:82:46:e7:6f:11:dd:57:54:
0f:6e:61:e5:69:60:25:2c:f7:f9:94:e4:eb:fd:78:
72:c8:89:12:8c:96:06:fd:6d:50:5b:fa:45:c7:13:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:81:51:88:AE:0F:2B:8F:46:E4:2E:D9:2F:F2:AC:4D:E4:FF:2B
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8f:eb:c2:12:d6:a8:20:66:b9:06:0e:03:d1:2a:76:dd:7e:
d6:eb:79:72:fc:6b:17:1d:bf:a6:12:02:11:1e:2d:a7:63:50:
ae:5a:84:63:5b:35:14:5d:3b:67:19:ca:94:5e:f3:f8:68:0f:
6d:59:77:03:d9:a4:29:62:7b:f3:7e:04:8a:36:f2:07:6f:0c:
df:b5:81:03:de:6e:d7:7c:5c:42:3e:a7:97:bd:42:00:71:bf:
f5:0c:e7:00:c1:24:3e:18:6e:34:3c:3e:08:ca:d7:4f:cc:2e:
63:63:b2:d3:ca:b9:36:7f:b2:92:b5:08:fb:63:1b:a4:72:58:
a1:8d:00:1f:2a:a3:4e:e8:58:26:f7:b4:12:45:ad:73:5a:e8:
62:97:41:7a:8e:2c:5f:8c:87:ad:c3:fb:ac:ed:f0:79:4e:71:
c2:96:99:6e:4e:5e:54:fd:5c:f1:bf:33:20:35:53:7a:8a:94:
f5:46:17:d3:c9:b8:1b:1b:00:47:a2:61:ab:2d:e3:2f:da:4f:
bc:93:a8:44:e6:b4:ff:f8:92:eb:b9:99:25:46:93:10:7b:17:
28:fd:8f:97:9d:a1:27:bf:78:95:bb:f9:01:e0:1e:9b:db:79:
ef:c5:bb:13:de:68:20:b2:be:4f:45:0a:cb:87:05:00:74:49:
62:2f:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:13 2025 by rpki-client