Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: Y3f/mpeF7LdqqsitW91S4H2t6NWcHqeEIEhRMnPztXY=
Subject key identifier: 43:EF:03:66:40:8C:95:B6:72:BD:92:62:D6:66:AF:4D:77:27:DB:2C
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 0197B745AA4FE402085862A1DF2F2ECC73C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 105D
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: QYS6mCxIwuUBhuyuKPFXA9ZZAd4SjNIkIlkgYYuf31E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:aa:4f:e4:02:08:58:62:a1:df:2f:2e:cc:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=43ef0366408c95b672bd9262d666af4d7727db2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:8f:8c:cb:58:d0:98:29:f9:4c:f8:7c:bd:
34:1f:d1:8e:64:1a:69:2f:3d:92:60:2c:21:c6:6f:
cf:77:ed:d5:7f:04:fd:87:f1:50:c0:0b:5a:80:ff:
1b:af:74:52:0d:bf:0b:6c:26:b1:ec:f2:97:a2:f8:
b4:97:a2:83:93:d1:a7:1c:94:f6:e3:66:72:2c:8f:
12:5e:7b:ff:3c:85:74:b3:89:fb:e3:e5:d5:b3:2b:
d2:73:96:48:0d:df:38:ca:e7:22:a5:97:08:3f:7b:
dc:a3:39:f7:b7:fc:6d:9c:e8:1a:d1:40:c5:50:fc:
18:14:89:13:ba:07:2a:e9:d1:76:85:4f:da:04:10:
eb:12:cf:f5:34:11:b2:4c:fa:94:be:8c:e3:d8:cb:
52:7d:b6:79:98:fb:18:74:9f:7e:69:f4:42:18:1a:
24:2b:cf:80:a0:c0:8f:39:75:27:63:63:fd:18:37:
2a:66:a6:2c:5d:b1:41:d9:8e:22:35:bc:46:c6:f1:
c3:77:48:0e:90:9c:4b:ad:95:0f:dc:84:5a:c7:15:
ee:03:53:8a:38:eb:ae:b3:83:be:e4:c6:ae:1c:6b:
ec:b2:d2:e2:a0:83:3b:61:ab:76:70:4a:7d:5b:71:
89:e5:fb:30:ff:de:e3:34:ff:85:80:de:30:e3:f9:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EF:03:66:40:8C:95:B6:72:BD:92:62:D6:66:AF:4D:77:27:DB:2C
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:4e:4e:b9:25:4e:b2:5b:cb:9e:2f:b4:e8:ad:69:2b:b1:
f5:b6:5d:e4:bb:7d:e6:a0:3d:2a:6c:d9:ff:66:4e:5b:f8:e1:
9f:83:fb:ed:5c:7b:0d:13:37:17:01:30:94:3e:49:0f:17:73:
f0:3b:27:61:3f:b9:76:49:36:a1:a2:c7:f6:a9:fd:5e:0d:34:
fc:8b:87:0f:98:8d:d0:93:6e:96:a8:e1:2e:f2:e6:ab:56:de:
90:d9:93:63:ed:b3:7c:d6:4b:9b:44:7e:98:02:9f:61:0f:77:
cf:f2:35:ff:b3:c7:33:a4:41:2a:03:a2:7d:45:76:45:32:bf:
b2:a1:0c:ee:8b:4f:32:bb:01:d9:6a:fc:d8:2d:3a:1d:62:5f:
05:2a:e5:8e:d0:cc:95:4e:4e:87:f2:13:75:9a:d6:dc:f5:f2:
14:f5:8e:2a:bb:ba:4d:f0:95:6f:c7:c1:8a:94:d4:9e:00:33:
1a:f9:ae:03:54:c1:c8:0e:97:94:53:b6:03:eb:7d:c7:f6:fb:
1c:6f:0f:59:19:61:a8:b4:ba:98:a9:22:37:e6:a7:bf:8d:f4:
d2:28:22:de:60:11:6f:b3:59:9b:80:56:7c:21:49:16:61:11:
20:d6:f1:5a:73:57:4c:d6:da:1f:9a:32:94:ea:d5:20:a7:7a:
d5:2f:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:12:55 2025 by rpki-client