Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: VbH9G/ofgVeH6TRdE0HbSVcDZ3GG1SEAgfnffw/2CKk=
Subject key identifier: 28:90:E3:FE:4C:DB:75:1D:9E:C4:8C:A8:B1:D3:9E:89:67:06:46:0E
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 0198D4E0827D983216E71476C4493DBAE7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: Yns5s3CtAX+1IunIOzxBMS72Cw2PJJtBJ7Rp5x0xCLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:82:7d:98:32:16:e7:14:76:c4:49:3d:ba:e7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=2890e3fe4cdb751d9ec48ca8b1d39e896706460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:2f:08:9b:59:83:53:75:d7:ab:98:cb:2f:
84:66:75:9d:cd:50:90:30:54:06:79:4a:63:a0:02:
07:45:0c:34:7c:c9:56:a1:af:5f:56:e2:d9:ab:7c:
ab:e5:ae:38:18:fc:44:61:90:6c:d4:1d:01:8e:06:
64:e4:63:85:cc:3f:1a:b1:d9:d6:bd:74:a0:46:9d:
12:84:34:25:97:38:2e:c5:c0:dd:42:68:5d:c7:c2:
cb:c3:17:d3:24:ab:9e:dc:cf:a0:b1:0e:58:6e:bc:
b2:f8:8c:fa:a5:a9:de:c3:d7:7b:9a:1f:2d:a8:fd:
bc:7c:4d:7f:d8:5c:c3:58:4e:92:e6:ac:6a:e0:01:
33:11:5b:68:99:91:53:cf:39:d0:0c:25:68:9b:6e:
33:1d:9d:25:b3:2f:98:f6:2c:2d:32:71:c3:f3:b1:
7a:9f:7b:0a:1d:98:54:d7:08:d9:c2:7b:ff:d2:e3:
e7:6f:a4:23:07:38:8f:a1:f5:e1:33:20:45:b6:f6:
5e:52:f5:88:6a:67:b9:4b:68:41:c9:00:34:bf:ad:
d1:63:08:5b:78:28:11:ae:fc:d6:54:6e:5c:a7:49:
90:5f:38:8f:35:a7:e3:c9:85:a6:d1:b3:25:6f:11:
23:13:d3:fa:2f:0f:1d:fc:e3:2c:51:b4:e9:7d:fa:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:90:E3:FE:4C:DB:75:1D:9E:C4:8C:A8:B1:D3:9E:89:67:06:46:0E
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3b:4f:0e:8f:b9:64:40:4b:56:20:a4:f1:3b:cb:17:0c:ca:
e0:b2:3f:41:9b:da:27:e7:74:33:22:a1:53:b0:c1:60:78:31:
9f:f6:47:a6:15:1a:ea:db:8d:00:00:61:e8:7c:e0:06:40:9c:
fc:9c:6c:6b:d7:15:d0:51:77:ea:72:70:1f:93:76:4a:d4:13:
aa:2b:37:f5:26:36:f6:00:06:24:87:e5:08:7a:f6:2f:db:9a:
28:3e:ba:39:34:9c:d9:08:8d:7a:1e:b9:b7:f4:c6:e6:35:de:
76:7a:7e:53:d9:d8:ba:bc:ab:cc:4b:0e:14:2b:6e:92:1f:80:
26:54:be:df:cf:8a:2a:28:2b:92:38:95:81:a2:fc:e6:1c:22:
87:9b:24:85:24:5a:32:85:ae:90:30:9a:6d:85:74:c4:af:48:
7c:6f:e2:fa:f3:e4:75:e1:ab:3f:aa:65:02:39:48:51:f4:2e:
cb:40:44:8d:8d:37:f2:bd:68:48:fa:2f:a8:e4:1e:4a:c2:a6:
75:12:9c:98:a5:78:33:c9:37:13:4c:02:8a:5a:46:1e:8c:54:
65:29:2c:6c:7a:30:55:96:bc:57:39:ec:be:3c:ab:a9:4a:3e:
fc:ba:c9:f9:56:22:97:d9:86:35:f1:1e:ae:65:51:ff:02:c3:
e2:29:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:52 2025 by rpki-client