Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: outycNGGlEZl+TJH6hacxDDEORXsrFyYw3AihSwjNRs=
Subject key identifier: 77:99:DC:DE:0B:94:45:5D:BA:7B:EF:28:D5:70:39:23:AB:AA:AA:CD
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 0198D584023DBD3C9B7EE311DC4ECCB911E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 0360
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: xWkLFAep6NqCpw8wODpBN9f/Isn51BwYHCCB9lw1qJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:02:3d:bd:3c:9b:7e:e3:11:dc:4e:cc:b9:11:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=7799dcde0b94455dba7bef28d5703923abaaaacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7e:43:60:1a:d9:c0:4f:d2:fe:b3:f1:77:39:
0f:b5:a3:89:41:9b:b8:62:66:6d:9c:ed:ca:7e:11:
c2:07:d0:8e:6f:03:b1:6a:66:d9:63:3a:da:2b:fe:
61:36:1c:7c:4f:0e:1e:66:1a:5d:4e:1b:45:e7:7b:
72:2c:16:38:b0:2c:79:6c:d6:3e:82:56:2a:59:57:
64:c0:84:a7:b9:ff:dc:58:a9:74:73:94:1d:87:ab:
cc:e3:fa:53:80:78:8f:04:92:8d:df:6f:64:5f:e8:
02:6e:56:9c:a4:14:55:57:b3:2a:aa:47:af:32:05:
9f:8a:e7:aa:73:e3:83:85:e3:48:e6:aa:a3:62:68:
c6:c0:25:ae:c7:33:83:37:0e:f9:f5:a0:ad:8c:b9:
31:40:e9:c1:be:89:6d:03:cb:50:e7:d8:a0:90:9c:
e3:7a:d1:88:4a:7e:5f:14:aa:d4:30:e8:c1:9d:04:
18:18:01:f6:00:05:1c:22:36:0f:4a:8e:b5:d2:34:
4f:1c:48:06:c7:19:cb:d3:e9:46:2a:dd:10:6d:7b:
f7:45:5b:2c:bc:1a:89:0b:52:80:49:d5:55:15:e9:
e2:91:b8:d9:c7:7c:fe:21:90:4b:5e:bc:41:45:ad:
ed:67:a9:02:60:9a:e4:50:a2:cd:f0:00:55:6f:ae:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:DC:DE:0B:94:45:5D:BA:7B:EF:28:D5:70:39:23:AB:AA:AA:CD
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:66:d0:3f:f7:f0:98:6e:d9:e5:62:e0:95:83:1e:e5:e2:9b:
54:36:d0:20:b6:01:c1:0e:c9:7d:8b:0c:fc:d2:f1:98:e4:ab:
5a:a8:25:bc:ad:3d:5e:d4:65:65:d2:0d:f2:f2:f2:b0:86:31:
5d:16:18:55:a5:f1:ca:62:49:e1:a9:89:9d:bf:c3:bc:04:e2:
d3:c5:3c:3e:4e:9b:ab:63:52:3c:3f:47:1a:ed:af:ec:49:82:
57:b9:52:ee:34:f0:3c:4a:4d:58:c5:d7:f9:1d:f9:8e:d3:19:
be:54:ca:5e:b7:ca:25:3f:bf:a1:f1:b2:63:4b:83:7d:e6:0b:
ae:c2:55:88:88:92:d8:38:a3:58:cc:c8:7f:33:aa:50:24:b9:
76:70:da:50:b7:01:85:e7:ea:fc:c9:a9:d5:b3:e8:9e:88:dc:
98:fa:6d:d5:a7:bb:c3:f9:d5:9a:7a:72:8e:28:62:46:b4:38:
8f:91:dc:10:20:4f:6c:aa:3c:ee:58:0a:45:28:25:c2:b0:b3:
1d:04:74:a5:e0:03:6c:5d:89:7f:d1:1d:78:f4:c6:45:38:c4:
f5:91:c3:fa:b4:96:95:92:52:9c:5f:df:50:42:11:ad:8a:b5:
e3:d3:59:42:c5:6d:ba:24:fc:90:d5:69:40:e1:56:33:96:e2:
bc:82:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:41 2025 by rpki-client