Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: apvpC7RdfDD9KA7cOqlJsfujeLTpzWSk8x3ufAHpWJ8=
Subject key identifier: A4:47:4B:E7:14:49:55:6F:1D:E1:59:F2:F7:01:CB:47:AE:8B:6C:37
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 0198D5BBE162064628166ACE14E5C1186585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 1630
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: 05CspJcNLkqIMU6cJqmhJTDUbr29erDZByDrXG4K1bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e1:62:06:46:28:16:6a:ce:14:e5:c1:18:65:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=a4474be71449556f1de159f2f701cb47ae8b6c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:21:ed:34:f9:07:9f:d4:12:64:f8:6f:c4:
62:6d:0e:77:ac:92:cc:fe:7a:13:77:ea:72:a1:51:
2d:81:9c:af:6b:cc:54:b9:9c:6e:f7:61:0e:c9:af:
e3:0d:95:0b:83:28:a7:58:06:d4:68:c7:d1:52:4e:
28:71:08:9a:68:71:54:e5:43:ec:47:8b:13:fc:c9:
2c:5b:02:7d:59:8d:3d:72:86:59:2b:48:6d:59:ac:
f3:52:44:c4:b5:90:b6:9b:33:c6:ba:c6:24:0e:c4:
3d:24:0f:80:d5:3f:d4:24:c5:6f:2b:d9:00:bf:dc:
9c:09:b2:b4:41:2e:f1:7d:62:c6:ee:f5:0c:19:a0:
71:64:59:d0:ef:bc:53:03:dd:10:24:24:ad:ad:2b:
8e:40:59:cc:f8:6a:fc:d1:53:5e:6a:c9:92:d1:86:
44:6d:dd:cd:31:b2:17:2c:87:8c:c8:51:3c:b0:34:
d3:47:44:bf:80:cf:25:f1:dc:21:4f:22:fb:93:b8:
4a:32:a5:f2:b1:89:50:8a:1a:6c:07:18:c0:d8:c4:
8b:fc:04:c1:0f:00:8a:e0:2e:48:86:f0:44:84:d1:
59:b5:d1:49:ad:d8:77:7b:ad:e9:eb:07:3a:46:f5:
f5:ba:9f:3b:45:bc:df:af:88:74:d9:2d:0c:c5:ec:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:47:4B:E7:14:49:55:6F:1D:E1:59:F2:F7:01:CB:47:AE:8B:6C:37
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:72:f4:e5:36:dd:1f:48:9c:0e:16:37:ce:ae:ef:16:e4:
99:82:36:9a:4a:69:02:04:34:43:fe:9d:92:77:a5:b9:65:65:
a1:02:62:b1:3c:94:bf:fa:c7:50:d1:7d:fa:5b:f5:9f:41:92:
6a:59:8a:58:21:45:ee:be:e8:cf:e6:3d:71:3a:bd:76:e1:14:
52:fe:2a:47:59:62:76:f3:5e:ec:43:82:e0:d8:8f:be:0a:76:
2a:03:8e:ea:54:14:50:52:10:42:91:80:6a:ea:a6:e9:09:36:
7c:5d:44:0d:26:4c:94:7d:72:ef:f3:0b:d8:0d:d1:2e:96:77:
a0:0c:86:58:89:9e:11:bd:69:d4:b9:70:6e:42:0f:be:80:64:
db:2f:3f:01:33:c8:e1:d0:07:5e:f1:76:be:47:ff:e7:9a:bb:
c1:31:b6:7d:0f:76:1c:5c:df:8d:c0:8b:37:33:3a:1d:56:44:
88:15:2c:95:0c:6e:39:58:7f:4a:eb:f3:6c:4a:c1:d9:b2:c5:
16:ba:69:8f:ff:1e:24:f1:2a:46:18:70:ee:9b:54:86:8b:7c:
67:ee:3f:e2:a0:7e:10:e0:98:04:32:3d:00:02:2d:42:02:7e:
dc:0b:36:b9:fc:38:76:c5:80:84:23:49:64:09:67:1b:b5:21:
c7:cf:0a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:04 2025 by rpki-client