Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft
File: NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft (raw, json)
Hash identifier: YP62v5H3of5GJBKD0Ub7YubZ0zhnqoWjRjxKVAPwe3E=
Subject key identifier: 7C:7C:EE:6B:E8:03:A9:65:DF:D4:33:6C:9C:08:99:F0:53:DA:D5:23
Authority key identifier: 34:01:9B:2A:50:26:7C:B6:1C:0B:E7:65:2A:8D:14:B2:7B:F4:86:9E
Certificate issuer: /CN=34019b2a50267cb61c0be7652a8d14b27bf4869e
Certificate serial: 019842BE14E3E9F23E6E999E428F657DCCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAGbKlAmfLYcC-dlKo0Usnv0hp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft
Manifest number: 06D6
Signing time: Fri 25 Jul 2025 18:00:10 +0000
Manifest this update: Fri 25 Jul 2025 18:00:10 +0000
Manifest next update: Sat 26 Jul 2025 18:00:10 +0000
Files and hashes: 1: NAGbKlAmfLYcC-dlKo0Usnv0hp4.crl (hash: 0q3eLRqK7cU6yTOi5+UBwE5NCXjZegteT1lQ8LIhHLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAGbKlAmfLYcC-dlKo0Usnv0hp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:be:14:e3:e9:f2:3e:6e:99:9e:42:8f:65:7d:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34019b2a50267cb61c0be7652a8d14b27bf4869e
Validity
Not Before: Jul 25 18:00:10 2025 GMT
Not After : Jul 26 18:00:10 2025 GMT
Subject: CN=7c7cee6be803a965dfd4336c9c0899f053dad523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:16:04:43:e3:5c:86:0e:73:0a:8a:b1:f9:ab:
ff:5c:6b:48:24:6f:eb:5a:e2:0b:c2:af:45:68:df:
b7:4d:f5:1b:71:31:d2:64:d1:68:0c:58:43:c9:4b:
e0:ed:ca:d2:67:49:fa:ce:b0:a6:92:28:d3:59:9c:
dd:2c:99:95:e7:bc:8b:38:67:7e:9c:e6:2b:55:15:
b8:95:5a:8e:ff:c9:8a:08:17:2e:de:85:51:97:60:
45:8c:28:80:2a:eb:bd:e0:a4:fb:cd:17:19:3e:c0:
3a:33:41:6e:85:fa:17:3b:45:86:ba:1b:89:45:48:
1b:89:a4:12:df:48:66:88:39:af:d3:64:41:84:30:
4f:1c:6c:c7:1a:bf:7d:13:94:93:49:0a:f3:0f:4b:
96:06:01:f6:cb:2b:c1:28:48:1c:cd:1f:07:fb:bb:
7d:77:57:3e:e0:fc:38:d6:aa:09:60:ea:d2:45:58:
d2:db:9c:ce:3e:e0:61:ba:eb:23:15:fb:93:64:ea:
fd:5b:ca:0e:ee:05:43:70:8e:8c:91:09:ec:f6:bd:
01:fe:c8:5a:71:5d:61:5c:eb:05:9e:5d:a0:4f:a6:
54:0b:b9:a3:0d:b7:51:59:14:98:c1:26:b7:94:f8:
46:0e:d3:fb:7e:cf:ed:41:4f:36:7d:5c:ad:51:0c:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:EE:6B:E8:03:A9:65:DF:D4:33:6C:9C:08:99:F0:53:DA:D5:23
X509v3 Authority Key Identifier:
keyid:34:01:9B:2A:50:26:7C:B6:1C:0B:E7:65:2A:8D:14:B2:7B:F4:86:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAGbKlAmfLYcC-dlKo0Usnv0hp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/108b2c-d0c8-4818-97bc-f8efe29397ea/1/NAGbKlAmfLYcC-dlKo0Usnv0hp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:60:32:52:1d:a3:cf:8d:cc:9d:37:bb:1d:42:ef:65:68:9e:
31:2f:d5:48:b5:dc:c6:8f:6a:9b:f8:c2:cb:24:6c:64:18:a9:
28:f2:b0:60:24:02:11:13:8c:8c:97:57:b6:46:e3:9c:80:67:
84:f5:57:4a:f2:dd:9f:88:e4:b9:a1:bf:eb:4f:f2:ce:8b:f0:
69:06:ed:3d:91:26:88:03:ff:c4:4a:b6:22:ba:1a:9a:68:13:
f7:4a:23:43:4e:d6:57:4a:bf:fd:f0:27:2a:2e:69:98:55:03:
55:96:e9:27:e1:14:b9:79:cb:57:52:9a:f3:b1:4a:76:22:f4:
4d:58:a5:99:48:50:49:e5:5a:73:42:25:74:95:7b:c9:c5:c7:
9a:47:27:bd:f8:12:ff:7b:5e:ec:1d:02:b2:30:0f:c9:bf:be:
3a:61:84:97:50:e8:bc:12:d2:f8:cd:ed:0c:66:4e:fb:9e:26:
c0:9e:ba:04:74:76:8a:b6:a9:33:4d:53:cf:5a:97:24:08:75:
85:9e:e6:d8:a1:f1:91:cb:60:e6:95:ac:0e:71:b0:0c:d9:7f:
47:23:ca:83:9a:06:bf:2c:3a:8e:4a:46:32:f9:5c:38:99:f1:
98:9a:04:d5:cf:90:97:ce:43:4f:31:03:1f:5e:5d:66:66:65:
65:c0:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:58 2025 by rpki-client