Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: HcxAaQ8UCjGU4Ykfx+JR35aw5ixZIq0GWHQ5ymy+KDE=
Subject key identifier: 3D:73:08:7E:73:73:2E:BC:33:37:8F:78:C4:4C:D8:10:73:2D:9F:93
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 0197B70EF7EE24CE2F1412DC65C16CB1EDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 0380
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: bxlbKKwlS4oY+GA56rj/H5cl2yDUbAj7B2a/nw4eHm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f7:ee:24:ce:2f:14:12:dc:65:c1:6c:b1:ed:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=3d73087e73732ebc33378f78c44cd810732d9f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:85:78:f5:57:46:c3:06:d8:50:8d:0d:8f:
67:17:0b:7d:4d:fc:26:50:35:88:e3:a2:b9:61:3a:
02:f0:ae:3f:54:9b:19:92:64:81:cd:5e:cc:e0:b3:
65:63:75:ee:7c:85:71:aa:4e:ad:b7:5b:7e:90:ae:
5f:cc:49:cc:a0:49:e8:82:fc:b1:88:1e:95:a3:61:
6a:36:42:23:3d:35:c5:da:31:fd:c9:db:86:fd:ac:
14:11:31:d7:59:7c:16:5c:0d:27:82:c9:43:8b:e7:
4a:e9:b7:b5:06:b6:fb:f8:0a:45:a0:e2:02:2f:a2:
32:e2:f0:a7:2e:86:a0:fa:1b:48:a8:13:07:f0:07:
2d:87:bd:61:5c:27:51:ba:80:65:57:35:2d:11:cf:
82:24:3b:f4:c7:e1:df:57:5a:c9:70:59:f5:e3:d3:
04:53:63:95:3a:75:50:ad:8a:25:a6:0e:33:11:cf:
09:d0:09:a4:4e:49:2b:0c:e0:6c:96:5a:e3:bf:81:
1c:c8:0b:67:79:91:36:70:97:8d:ea:78:f6:18:ff:
95:5c:53:05:52:45:ad:be:9a:5e:dc:0b:3c:b2:61:
bb:17:8e:c0:45:7c:27:9b:6d:fe:6e:7f:74:15:09:
ca:2c:72:d5:ff:27:cd:a4:a6:e1:e7:cc:ad:c9:9d:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:08:7E:73:73:2E:BC:33:37:8F:78:C4:4C:D8:10:73:2D:9F:93
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b7:4f:30:d9:96:60:bc:06:7b:e5:5d:e7:fd:8d:64:23:df:
f1:f3:18:fc:f4:12:f4:d8:44:62:dc:c3:a7:55:c9:20:2e:f5:
62:bc:ff:43:b7:81:c3:07:08:de:df:c2:38:a5:59:fd:aa:0c:
3b:5b:75:7d:28:dc:78:c2:b4:8a:0b:28:9c:b7:d7:99:d2:8e:
dc:2a:6f:7f:c4:b2:16:eb:72:85:ef:54:ae:3c:0f:75:19:ee:
23:e1:d1:da:2a:8f:9f:ec:28:8d:54:1d:c0:e6:c5:ef:e7:83:
3d:b3:90:08:de:d3:67:41:59:8e:38:2e:cb:e6:59:ae:6e:ef:
57:4e:eb:0e:24:a8:c9:a4:6f:57:0d:19:c1:2d:44:4c:7f:c3:
87:d7:fc:ff:ad:a8:b3:cc:7d:1f:f2:7b:84:79:7f:f1:35:27:
88:8c:fc:da:49:7c:99:2a:45:42:f4:f8:a3:3d:c1:3a:cc:72:
15:da:3e:ca:93:7b:62:34:ee:f1:ff:ec:ba:b7:76:f5:90:03:
a8:fa:64:be:e2:ee:17:6d:ee:46:3c:d9:cb:67:48:bd:bb:90:
f5:d9:9a:c6:21:73:d2:40:4f:2f:3c:2a:c1:53:c5:b7:61:31:
bd:29:ae:91:00:58:0b:4d:d7:3b:7e:5e:ce:eb:88:2a:6a:8c:
bf:68:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:39 2025 by rpki-client