Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json)
Hash identifier: bgjVib51J4FCc/bdpGotsOenyBEMhLb83mzUQeD2r0M=
Subject key identifier: 59:46:27:6A:F0:2B:D4:C2:CA:EC:AC:16:CE:14:01:38:E7:2C:B9:0C
Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Certificate serial: 0198D660F0D929BE8957669376DE42099463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: Wds3Icj/h/RxdMLhM4viJTwbqCoOS87hkv5xXX+CZcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f0:d9:29:be:89:57:66:93:76:de:42:09:94:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=5946276af02bd4c2caecac16ce140138e72cb90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:7a:6e:c5:62:ea:9a:b5:c0:83:a8:58:16:
61:71:8b:d7:47:ef:6b:57:20:de:f6:83:35:6b:3a:
8c:f2:66:3b:aa:ef:26:50:48:8b:c4:df:f0:6c:78:
29:73:13:c3:aa:58:d4:86:31:02:9b:bd:0b:d5:66:
c5:00:ad:7e:21:ff:18:97:22:e3:c2:8c:c0:d0:e2:
42:31:47:c4:3c:39:4f:bd:46:b0:00:fc:62:ee:fa:
af:ba:7b:60:79:0f:5a:de:50:48:65:c2:55:3f:d2:
6f:57:74:66:6e:e7:0d:ca:c6:3c:96:1c:fe:9c:1a:
14:a1:18:d7:38:d9:e3:c4:84:21:dd:74:82:4f:81:
eb:b8:e6:e5:c1:83:c9:87:29:ad:41:c6:6f:35:95:
71:88:b3:a8:61:04:3c:fb:89:8b:01:c3:7f:3b:0e:
3f:2f:5b:dc:9c:a1:a3:ff:b4:e0:36:a8:93:8c:36:
0e:f7:c9:76:9a:2e:9d:f7:cf:de:5e:06:72:b1:9b:
d1:70:e6:4b:ce:cf:ec:5c:86:df:6e:ec:ef:4a:5c:
98:f9:17:5f:d8:95:b5:1d:79:fd:cc:5b:c1:9f:5c:
76:75:24:a9:50:d6:33:b9:86:1e:e6:fa:2e:29:ad:
d8:0a:3d:4a:b5:78:9d:8e:13:ee:ce:66:88:99:dc:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:46:27:6A:F0:2B:D4:C2:CA:EC:AC:16:CE:14:01:38:E7:2C:B9:0C
X509v3 Authority Key Identifier:
keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e1:18:e7:71:6a:40:57:9b:58:de:e8:e5:e8:df:7b:11:ee:
1a:36:95:6a:e5:6e:8f:e2:fd:b6:ab:4b:37:41:23:96:6e:ed:
75:b9:94:4a:8e:f9:52:9a:55:68:aa:b7:2f:1e:c3:a5:43:a4:
5b:42:93:81:d7:c1:1a:83:36:ed:90:c6:1e:90:3a:ec:b4:f3:
b0:41:0d:3a:09:c9:f5:c7:d2:a7:bb:17:a0:c5:cb:05:7f:39:
17:70:cc:62:9a:ef:10:9c:cf:6b:15:51:62:ba:f9:91:87:1c:
0b:64:0f:c0:47:e8:39:57:fd:c0:8a:8f:b5:3c:64:51:9e:17:
a2:3c:8c:1a:56:0e:8e:20:83:50:6a:2b:df:1e:1e:94:ee:55:
85:ca:fa:02:a0:c1:2f:30:40:46:ae:33:7e:da:d7:92:11:79:
db:49:1e:ae:e7:90:58:c4:a9:bd:fd:89:70:b3:03:c3:54:cc:
de:99:11:14:f5:f6:fc:7f:19:79:ac:55:0b:0d:b8:5f:a9:d8:
88:d3:8d:fc:6f:32:3d:44:5a:fd:ba:82:46:65:9a:56:b2:12:
84:96:e8:a3:0c:26:f0:3f:4a:e1:69:ef:d2:f0:3b:d0:d7:10:
d4:99:cb:74:02:3f:86:2b:24:41:6d:6f:1d:97:4a:58:e5:ac:
2d:dc:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:44 2025 by rpki-client