Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: IjIRLnfYwK+j4o3ANQoKJf//vKcPsPma1QhMmJVkeGE=
Subject key identifier: 4E:AC:C7:9E:F6:A9:0E:99:08:BB:2D:46:97:D7:44:C9:CD:50:2E:4C
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 0198D54EAD1C281483F1900A7E6BE63FD500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: hzYQrGTqycIxefjT+asHWffIjKMXNX8Obtv+6H5/6wA=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ad:1c:28:14:83:f1:90:0a:7e:6b:e6:3f:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=4eacc79ef6a90e9908bb2d4697d744c9cd502e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:1c:a9:62:40:9a:a4:71:3e:f0:1c:01:7e:
28:17:03:b2:29:25:21:f1:95:ed:47:e2:6f:c0:9a:
5d:69:42:18:f5:94:f0:b0:7c:9d:85:31:23:73:4a:
2a:54:04:7b:f6:a1:30:17:66:3e:4c:28:64:04:dc:
1e:09:20:9b:26:25:0e:a9:d3:6d:5c:88:65:c3:49:
99:a4:14:25:0e:18:51:03:92:75:91:bf:ef:2b:27:
4d:1f:ec:ff:7f:b7:2c:35:81:0f:20:14:43:80:16:
8e:52:54:70:f8:f6:c0:85:65:26:d4:3d:98:50:15:
37:83:89:5c:c4:69:3d:01:9f:93:3c:70:f9:1b:b1:
f3:31:9f:cd:7e:48:77:87:80:b1:49:ce:2c:c8:e2:
c6:27:1a:62:1e:26:1c:ff:72:35:4f:23:0e:7b:d3:
97:03:28:b5:1e:b2:6c:dd:ab:9a:73:c9:94:1c:27:
26:c2:e1:93:96:52:5a:d3:a4:a8:31:82:77:fd:da:
44:8b:5f:87:0e:51:05:92:5c:3a:c9:73:63:84:bd:
d9:69:3b:d4:79:a1:12:e6:7c:7e:38:a0:09:57:82:
97:d4:1b:d8:24:f7:e5:3e:ff:5e:f6:01:4f:c9:12:
dd:89:34:b7:ba:d7:69:45:d8:27:b2:22:99:ea:45:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:C7:9E:F6:A9:0E:99:08:BB:2D:46:97:D7:44:C9:CD:50:2E:4C
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0a:f8:4f:10:08:da:e9:df:f3:cb:51:9f:f0:d0:56:0d:d5:
49:23:9d:e7:2a:b9:eb:fe:35:c6:15:03:61:c6:5c:12:56:0b:
0f:96:00:b8:e0:74:21:2c:39:40:d2:07:d4:79:c6:28:1e:d6:
93:64:48:41:56:55:3c:1c:a0:06:ac:61:2f:c7:5e:46:00:1f:
b4:88:81:7c:75:e0:50:68:77:ed:bf:61:f0:38:14:3f:2e:14:
43:f5:b3:ef:0b:b3:4a:b5:a0:00:13:48:32:cd:47:34:9a:6d:
30:57:cb:f4:69:20:25:a9:3c:2c:c9:31:f8:c3:c4:4b:23:9a:
10:35:26:c1:5d:fb:82:72:69:99:a3:99:71:99:59:c1:90:00:
04:4d:55:32:f8:e4:64:61:8b:84:89:a2:8b:91:99:32:36:2d:
38:30:6f:9a:fe:82:84:56:d7:6e:dc:e4:e5:f5:34:ce:40:76:
63:ac:23:2b:a7:d5:d4:c2:86:9e:83:0a:ae:9a:6d:71:7f:d8:
b2:46:94:ac:bf:69:d0:e6:30:10:79:02:83:02:8e:31:cb:16:
66:9b:27:94:7f:40:f6:49:3d:9e:63:b1:01:ac:08:ce:05:3d:
5d:2a:cc:f3:d5:90:49:a8:9d:f1:50:55:ed:dc:f8:17:70:95:
7b:fc:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:43 2025 by rpki-client