Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: f2aALkGNdPBAt9x7eSHlk6u60ebVFoO9hPOFuL9EX2s=
Subject key identifier: D0:A1:2A:CA:E9:5B:8A:09:B2:8F:DD:07:54:71:A6:29:80:78:2A:99
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 0198D4E008F03B6EA14225EED81646E36E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 0414
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: xMnBTGOyNiw146+n4cAisMCVetRqjHq+7AKz/fyuEaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:08:f0:3b:6e:a1:42:25:ee:d8:16:46:e3:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=d0a12acae95b8a09b28fdd075471a62980782a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:07:ca:38:e1:df:0f:1c:a7:68:cb:95:21:
d1:c1:62:99:89:ce:f7:64:88:fc:ff:85:38:73:49:
87:2f:ec:14:d2:b8:43:09:5b:ae:64:a9:f8:53:34:
66:ea:a0:c1:85:33:40:fa:3f:ad:95:54:7e:08:d9:
a0:bf:c9:ca:56:79:d2:cf:ad:a2:05:84:67:45:50:
a5:ea:9d:9f:c6:7f:ac:51:b5:70:77:a7:ac:d6:93:
ea:87:d1:c5:b1:98:e2:7d:7f:24:37:a4:03:81:67:
a4:cf:73:2f:c8:2e:d8:44:65:25:ce:1c:e0:4b:24:
f1:74:1d:7b:3d:a8:dd:3e:c7:61:a7:59:0f:c9:43:
25:0f:00:4a:fa:54:d5:8f:10:95:90:65:eb:b3:93:
16:83:f2:c5:ef:bc:60:14:f2:f4:49:46:87:f6:69:
36:dc:b4:19:06:59:e6:e6:a3:aa:19:58:45:2b:83:
4b:76:9f:77:3c:00:61:7e:66:a3:c4:db:fb:fb:de:
1a:de:87:42:4c:51:9d:59:22:e2:35:84:dc:bf:85:
32:02:04:26:19:d3:67:14:fd:37:f6:6b:19:4d:13:
e0:37:7e:fb:92:67:16:58:c9:7f:43:e8:c3:b8:cf:
5a:e9:bd:78:15:15:00:25:d5:5a:fe:fd:aa:43:bf:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:2A:CA:E9:5B:8A:09:B2:8F:DD:07:54:71:A6:29:80:78:2A:99
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:e0:18:f8:df:94:8e:9b:a4:61:71:ae:9d:a5:bd:19:62:
c1:1a:2f:15:a8:39:cb:f8:00:4d:71:4f:cb:68:29:3f:da:0d:
ef:3d:5b:14:a4:2c:13:ee:f4:59:2d:0d:07:4c:b1:3f:3c:4c:
82:4a:0b:9a:1e:39:af:01:b2:cc:72:64:1f:84:7e:02:e9:16:
4a:11:46:f0:b0:3f:f1:bb:8c:bc:d3:d3:f7:71:fc:1d:b3:a3:
ce:6a:a7:7e:f8:35:ca:86:a3:df:fc:63:eb:39:ec:62:83:b2:
35:a3:7f:62:aa:74:cd:73:7e:d0:bf:47:98:58:db:62:dd:c0:
8d:93:a6:72:cb:44:66:29:75:71:f8:1f:b3:66:e1:41:f7:67:
a1:c8:c3:f8:5d:7d:d7:5b:52:e7:02:0a:fc:df:3f:db:92:b1:
f7:13:2c:b1:2c:cf:6a:ac:7c:fa:5b:b5:85:23:a6:87:5a:0b:
18:55:1e:83:f7:7f:8b:ae:81:a3:ea:d5:af:2d:8a:3a:66:b7:
7b:b7:c6:28:75:7a:9d:7e:fc:30:6a:06:af:60:91:92:35:92:
90:e0:cc:8a:44:cd:10:27:03:f4:89:c4:68:30:f6:9c:7d:84:
d0:40:19:05:88:c1:9b:9a:aa:10:88:ac:60:ba:3a:e2:22:ba:
4c:32:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:01 2025 by rpki-client