Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier: qes6uVBHvImWDHm9TrvECcYvbBRisjsMZa7fGC07Qgg=
Subject key identifier: DB:FA:10:A3:AA:28:9C:52:1D:2D:11:13:0C:E6:61:CA:8B:79:5E:03
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial: 01984B53BC95E85612B45A2009B665030684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number: 0B02
Signing time: Sun 27 Jul 2025 10:00:35 +0000
Manifest this update: Sun 27 Jul 2025 10:00:35 +0000
Manifest next update: Mon 28 Jul 2025 10:00:35 +0000
Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: NlZOlCEti50lnYak038n97ct0Ry9XKbaFb4qEUyoGu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:bc:95:e8:56:12:b4:5a:20:09:b6:65:03:06:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
Validity
Not Before: Jul 27 10:00:35 2025 GMT
Not After : Jul 28 10:00:35 2025 GMT
Subject: CN=dbfa10a3aa289c521d2d11130ce661ca8b795e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:ca:16:6c:79:c5:58:2f:69:18:dd:35:34:
8a:7d:c5:08:85:20:14:0e:19:03:31:4a:a9:f4:18:
51:33:47:34:3b:17:97:10:e5:0a:0a:e5:d3:f2:d9:
17:b5:8d:ee:02:95:bf:e0:ba:2b:c3:0b:ba:9d:02:
e9:7c:d4:6f:77:71:ea:cb:9b:0b:5d:5d:bf:f9:0f:
3d:08:5d:5f:19:5c:ad:f6:1a:aa:73:b6:b6:ab:c6:
64:30:64:88:2d:38:8e:69:c9:f5:a5:34:cf:e7:69:
77:ba:ac:8f:08:5e:8b:26:e1:22:ec:4c:68:80:90:
0e:3d:cb:b5:45:65:03:70:2b:80:f1:0a:6f:2d:20:
f3:7e:b0:aa:14:ef:c3:50:34:27:a3:3c:3a:71:17:
bf:cb:b2:7c:f7:21:c1:2b:e9:74:db:51:09:f7:bc:
94:9d:7e:b4:0a:78:ea:04:0a:8b:54:e4:3d:c1:1a:
8f:68:04:92:10:aa:7f:c7:ca:2d:2a:f7:4d:58:9b:
73:75:3d:47:85:ac:df:59:c5:af:07:dc:80:e5:46:
6c:f0:d3:dd:45:b4:66:0c:56:dd:45:07:b2:89:d6:
60:4a:88:8e:54:cf:f0:be:76:2a:9d:52:aa:8a:b9:
ba:f6:30:71:f0:d2:5c:a9:f6:ff:c4:45:ab:94:24:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FA:10:A3:AA:28:9C:52:1D:2D:11:13:0C:E6:61:CA:8B:79:5E:03
X509v3 Authority Key Identifier:
keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5e:0b:6b:3b:06:57:fc:e2:e8:42:4e:7f:a5:e1:9b:5a:79:
f6:21:ac:38:b7:0b:46:21:70:ea:e5:38:64:69:59:8a:71:ab:
83:ee:c9:11:ad:84:ac:51:b5:65:5a:e5:17:69:f8:17:b4:15:
ea:0c:c9:aa:80:87:ff:0b:74:da:61:3b:5b:d0:0c:b3:74:9d:
c5:16:69:62:c6:4f:0d:15:10:7c:e6:11:8f:87:63:9d:eb:37:
87:39:5f:9f:17:40:53:3b:2a:8f:e6:2f:a0:85:8a:f6:3a:fa:
40:b5:18:c8:42:6e:94:00:62:12:6e:8f:5a:00:ee:f6:46:af:
13:9b:2d:f2:42:5d:43:64:d6:b3:af:52:ea:99:c3:cf:b3:d8:
c5:82:e4:fd:3e:29:05:dd:ac:e2:fb:a0:81:b8:33:3b:98:6e:
2c:6e:da:3a:50:44:f1:d2:56:39:2d:c5:e0:18:94:d6:f6:a2:
44:25:8c:1f:39:ea:fa:15:2d:4f:c4:58:5e:6b:a8:5d:4a:73:
ba:2a:41:df:61:55:6d:27:19:df:8c:f1:b1:a2:46:0b:c0:35:
d7:17:7c:4e:1f:c5:14:6b:80:1a:55:a5:b4:d3:48:d5:3e:2a:
b6:22:fa:ac:01:31:87:ca:05:a2:ff:7c:4b:a2:3d:b0:06:25:
bd:9d:ca:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:50:28 2025 by rpki-client