Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: m+4sIe7epK6nIybVFt4GhhBVFBGToFl3pxTa4d6nEWo=
Subject key identifier: 5E:CC:65:A1:3F:53:B6:51:14:AD:29:4C:3F:01:66:52:5F:23:7D:88
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 0197B9D91DA6770078FD57E340146356DF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 0963
Signing time: Sun 29 Jun 2025 04:01:43 +0000
Manifest this update: Sun 29 Jun 2025 04:01:43 +0000
Manifest next update: Mon 30 Jun 2025 04:01:43 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: Rtxd4oRbTh4jttYRCJY7b5+EkMZxsF2mAD1MHZuzl0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:1d:a6:77:00:78:fd:57:e3:40:14:63:56:df:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Jun 29 04:01:43 2025 GMT
Not After : Jun 30 04:01:43 2025 GMT
Subject: CN=5ecc65a13f53b65114ad294c3f0166525f237d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:54:43:3d:78:c2:8f:77:ce:ad:e6:c7:af:
aa:9b:f2:87:97:ec:83:37:eb:92:6b:e7:36:34:63:
f6:fd:4a:96:69:ba:d7:37:c2:ba:39:73:b4:5a:84:
07:c0:87:be:25:d1:6b:bc:78:33:ab:5e:b6:08:23:
64:ee:61:a0:cc:b7:32:f8:54:45:94:a6:63:f8:3d:
d3:86:83:3b:53:ec:f2:bc:92:e7:7e:8c:d6:5b:40:
6e:8b:18:fb:33:c0:61:85:f7:5b:09:5a:19:74:74:
c7:e8:d7:36:e4:47:53:35:8d:69:cb:a6:8a:20:c9:
19:b7:83:e7:2f:45:ed:7f:43:ff:44:eb:f6:27:21:
46:7d:79:bb:a7:14:f7:73:26:49:a7:65:ae:d9:25:
e2:6c:24:d5:cc:a8:28:f8:30:b2:e0:ed:53:ed:52:
21:f1:42:d2:08:9c:4d:6f:16:97:0d:10:9a:11:07:
ed:79:43:c2:bf:e0:f6:de:f1:30:37:a3:de:8e:9c:
29:05:95:f7:02:10:c2:68:b0:13:0c:27:11:8a:35:
2c:98:21:6f:10:e4:33:21:13:c9:0c:8c:82:fc:32:
77:23:bc:57:ba:d0:fc:9d:f0:86:8b:50:0f:49:ae:
1b:ba:f2:e3:b8:fa:ee:9a:57:0c:dd:ad:53:dc:b7:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:65:A1:3F:53:B6:51:14:AD:29:4C:3F:01:66:52:5F:23:7D:88
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e0:be:3a:e5:a7:5c:da:8e:42:fa:57:91:83:5e:a1:bc:41:
0f:7e:74:59:17:95:d6:b3:a4:cd:43:4b:eb:3b:a2:62:6f:df:
37:6e:99:23:88:2a:dc:dc:cd:3a:02:6c:b3:36:e6:16:92:ba:
e0:e4:12:64:17:17:15:ac:2e:b9:8b:e0:8e:a8:91:cb:59:46:
a8:82:64:f7:91:a1:5f:e1:a6:bf:62:6b:03:e0:ad:dd:71:90:
d0:b8:dc:d7:07:91:b3:b3:4e:a6:bb:fd:9c:3e:33:3d:b2:d7:
21:6b:20:20:aa:0d:90:47:cb:06:ca:7e:e7:e1:04:fd:24:06:
8b:ad:eb:02:15:39:e2:67:be:f3:8e:ae:e9:dd:45:45:53:74:
3e:f3:c0:72:7e:56:78:75:ea:40:fc:b9:c2:47:14:cb:0c:cd:
37:1c:18:54:2f:13:ed:9a:b4:2a:fb:5c:7e:1c:dd:d9:ef:5b:
91:dc:0b:7b:83:b3:64:91:04:0e:76:57:ea:0e:58:c1:7e:b2:
26:b8:25:d6:a3:49:e8:bd:06:31:83:47:ee:8f:0d:4c:74:f8:
4b:36:cf:79:97:c0:3e:ae:5b:c9:b5:ab:dc:72:a9:d3:be:2e:
a2:74:5c:01:31:06:2e:de:82:60:f3:d6:28:47:59:b3:03:eb:
7b:08:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:28 2025 by rpki-client