Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: lRFMed9a3JcO2Q8ecasBMBvBytxJNIUeGbzSAJCwH+Q=
Subject key identifier: 62:34:43:60:64:19:08:9E:0C:CB:29:64:B4:DA:F7:FD:89:8B:06:C1
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 0198D4E08C2A825975C0E5D9460493317D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: ybkRz8QktWqe8eDht+oxb27euVow0b5M2+M1FfTYfa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8c:2a:82:59:75:c0:e5:d9:46:04:93:31:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=623443606419089e0ccb2964b4daf7fd898b06c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:26:b1:ce:83:38:f1:f4:db:25:16:a2:a3:
44:9a:f1:92:ca:c5:18:f6:8c:9f:25:3c:5a:cb:36:
66:2e:fd:1c:29:35:ab:08:d6:70:0a:e0:70:86:6d:
ad:af:34:dc:46:d7:6e:fe:b4:17:ed:49:4c:46:eb:
d8:fb:3c:75:a5:34:66:d1:f5:e7:fb:ff:76:24:7f:
a6:0a:38:44:6b:d8:d0:c1:5d:f9:0c:3b:6d:37:d4:
95:56:0c:c1:ba:91:0c:49:97:2a:a6:ab:db:b8:99:
33:1b:c9:d9:9f:97:6f:75:56:42:36:f0:53:b2:89:
f8:2c:b3:c3:e9:6f:b7:d7:59:ad:3f:30:60:49:cd:
9b:d0:4f:b0:e0:9d:01:29:df:9d:29:05:10:73:5d:
d4:f7:6e:a7:68:75:40:4e:49:d7:df:3e:8c:2a:c5:
f1:6c:c7:c4:27:1d:94:a8:12:a2:e4:d2:2e:3d:f3:
6b:04:b9:6e:fd:ae:8b:17:47:be:ab:96:4d:b0:75:
92:b3:99:c2:a2:95:85:c4:fb:c4:85:d7:fc:a8:8d:
60:56:04:4c:fd:de:eb:c0:8f:15:53:8a:29:47:58:
04:0d:7b:f2:a9:41:13:df:ae:07:a3:24:3f:6e:fb:
c2:53:7a:6d:32:e3:fb:30:d8:64:6f:01:0a:02:b3:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:43:60:64:19:08:9E:0C:CB:29:64:B4:DA:F7:FD:89:8B:06:C1
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b8:df:e4:cc:54:49:0c:ce:2d:d3:90:36:57:6d:b3:f5:88:
39:6f:db:05:77:c1:f8:b2:b8:93:d1:75:fd:2e:e3:9f:18:1e:
84:39:8b:f5:cd:38:94:3a:a1:3c:3f:09:9a:09:6c:22:a2:f7:
7c:19:ba:cb:f8:59:12:ce:7a:95:55:d2:d5:19:e4:34:81:f1:
a7:c4:52:9e:05:e2:0a:90:b8:06:7a:7b:89:64:60:db:87:b3:
75:2b:30:e6:d8:77:46:49:45:58:d8:16:1e:4b:11:0b:be:8b:
77:de:2c:19:96:be:d1:55:20:7c:7a:fe:57:11:c0:d7:e6:3d:
63:15:9d:53:5b:85:dc:3f:97:35:2a:f1:d0:bd:a9:eb:36:1b:
1b:90:4e:05:75:a5:e6:2d:1e:aa:5e:f3:5a:c6:15:16:6f:05:
3e:ba:88:46:b1:27:29:f4:79:9d:98:ac:48:b4:35:b9:fc:fe:
ee:c2:b4:b3:5d:1d:19:db:99:1b:11:66:c8:bb:94:92:65:52:
57:b1:2d:cf:cc:90:61:79:31:f8:5e:61:72:2c:74:0e:b9:f5:
1d:4e:c0:77:70:4d:9a:52:2b:69:ad:a5:81:ef:f7:d3:45:69:
c5:83:5d:7b:e4:0d:e1:1f:a2:71:a8:a2:21:bc:58:17:4a:6d:
6e:57:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:25 2025 by rpki-client