Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: 2cNK97YOt46eBHNJ40PYe+5/NbaSuqWICdP9n1FBXDs=
Subject key identifier: 53:F3:38:41:30:64:5B:6D:10:4B:85:58:2A:85:1F:AC:6F:93:87:83
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 0198D8BDBF08CB3720E8A66E2D6F76570F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 21:02:50 +0000
Manifest this update: Sat 23 Aug 2025 21:02:50 +0000
Manifest next update: Sun 24 Aug 2025 21:02:50 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: SdteBUvB9na51XIzDRTFxyJqfdOiyiggCaoDS/InNeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:bf:08:cb:37:20:e8:a6:6e:2d:6f:76:57:0f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Aug 23 21:02:50 2025 GMT
Not After : Aug 24 21:02:50 2025 GMT
Subject: CN=53f3384130645b6d104b85582a851fac6f938783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:90:bf:9d:02:e8:d2:dd:13:49:78:d2:38:
1a:d2:59:34:91:f4:69:70:48:ed:32:ca:aa:56:98:
22:39:dd:1f:4e:f3:d3:8f:e2:1b:86:b6:e0:85:6b:
7d:1e:f4:0a:e1:ab:16:8d:25:ae:9a:03:27:35:1c:
1a:89:6b:e8:14:82:c1:18:9a:89:2d:d9:ea:33:42:
3d:f5:c7:e7:5e:5c:a2:ac:9d:3b:ea:20:b3:49:08:
b5:f0:8e:a2:17:3c:a5:dc:1f:cc:69:96:24:ae:6f:
e1:f1:0a:5b:3c:f0:99:2e:42:54:c1:65:9b:95:d6:
20:df:26:9c:38:b7:cd:59:ba:c2:fe:28:82:b1:d0:
fe:e7:0f:4b:fe:70:1c:19:f8:86:1a:f0:7e:f3:a5:
13:4a:39:28:56:6e:34:80:4c:f2:59:71:5d:7e:c4:
36:13:b6:b0:14:74:f6:de:db:33:c4:7e:e7:00:ae:
9c:d8:f5:10:a4:f3:05:84:03:3c:61:90:bc:35:1c:
9c:bd:5f:1c:c1:99:4a:6e:b0:ef:fb:f8:7e:67:f7:
fe:2a:be:56:13:b3:a0:f8:73:10:cd:9b:b5:e0:7a:
a5:1e:09:13:a0:54:69:aa:06:53:81:e8:82:b0:5e:
a5:d2:a3:8b:fa:39:20:75:e0:a1:a1:81:88:07:e8:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F3:38:41:30:64:5B:6D:10:4B:85:58:2A:85:1F:AC:6F:93:87:83
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c0:95:3e:20:e3:71:78:18:5f:68:8c:64:ae:17:48:79:82:
7b:32:95:5c:ae:3a:7b:f6:68:23:70:27:86:7e:0c:96:e2:23:
ad:58:e2:d8:94:76:0e:c2:af:1c:20:d3:b6:ea:0d:6e:95:7a:
60:82:12:11:92:25:67:58:67:b9:80:cd:d6:8c:a7:37:ac:70:
14:65:a1:2e:bf:30:8d:8f:24:b1:79:90:39:9b:d6:f0:07:4e:
35:14:58:3f:c8:59:52:0d:d8:ef:03:f4:af:f9:fc:55:a7:36:
ba:33:3e:a6:88:d0:60:ca:45:b2:bd:bf:aa:b9:57:e6:49:12:
af:2b:12:e6:b8:d9:4e:ba:41:39:c9:dc:9f:71:e0:55:3f:fb:
fb:ca:e6:87:38:fe:8f:da:df:8e:3f:3e:6c:5b:66:e1:2e:3d:
06:b5:b3:7c:92:e5:5c:62:59:49:c1:74:5e:26:75:b7:92:c0:
30:e4:83:cd:9c:f0:2c:b1:a9:e5:58:e8:42:23:12:af:01:ed:
88:dd:f8:4a:b0:ef:8f:77:0b:92:c9:a5:86:a6:41:24:58:f3:
6d:be:8b:bf:9b:27:bb:d6:79:29:6f:b8:62:c7:41:e5:12:b3:
d8:ad:af:f9:10:c6:9a:bf:b3:85:49:23:7e:3a:77:32:d1:5a:
36:9a:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:06:31 2025 by rpki-client