Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
File: nckgfnB-NQXfaLmlvXCtKM1N04U.mft (raw, json)
Hash identifier: axCoc6VBaU4aimgdiEJIUANDV65etMO6PW2Yt4qm7/Q=
Subject key identifier: B7:F4:9E:AA:93:BC:55:F1:4A:67:E5:EA:3C:11:BA:E1:E0:3F:9B:FD
Authority key identifier: 9D:C9:20:7E:70:7E:35:05:DF:68:B9:A5:BD:70:AD:28:CD:4D:D3:85
Certificate issuer: /CN=9dc9207e707e3505df68b9a5bd70ad28cd4dd385
Certificate serial: 01984BC21CE6BFB9D68A9494349C1CEBC71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nckgfnB-NQXfaLmlvXCtKM1N04U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 12:01:09 +0000
Manifest this update: Sun 27 Jul 2025 12:01:09 +0000
Manifest next update: Mon 28 Jul 2025 12:01:09 +0000
Files and hashes: 1: nckgfnB-NQXfaLmlvXCtKM1N04U.crl (hash: hkpG+vXIOWLUJrDDxAJIBxd8QnglkW9yt6p769Tl4p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nckgfnB-NQXfaLmlvXCtKM1N04U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c2:1c:e6:bf:b9:d6:8a:94:94:34:9c:1c:eb:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc9207e707e3505df68b9a5bd70ad28cd4dd385
Validity
Not Before: Jul 27 12:01:09 2025 GMT
Not After : Jul 28 12:01:09 2025 GMT
Subject: CN=b7f49eaa93bc55f14a67e5ea3c11bae1e03f9bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:db:09:b0:e8:30:4a:3b:2c:06:2b:64:e8:
85:65:0e:d4:0f:fe:e9:81:7f:48:b5:29:e8:5c:5e:
8c:50:50:7c:51:f4:55:66:6f:e7:2c:63:a3:8f:2d:
70:30:52:b6:c0:b4:62:c6:95:9e:88:c2:17:24:d5:
b9:a3:e2:84:ec:e7:d4:37:f1:d6:46:36:01:39:4f:
48:d4:a4:12:0f:09:f8:07:75:27:78:a1:8d:0e:26:
95:ed:d0:69:20:f0:82:79:a7:4c:08:72:55:6e:2b:
ee:86:05:e0:b8:57:da:2f:25:53:bb:1e:fa:b5:e5:
38:d9:f6:7f:2f:cd:f7:c6:b7:26:5f:04:00:99:dc:
93:02:2e:0c:fa:2c:78:69:58:56:30:b8:45:14:7a:
a8:3b:84:0c:ac:3c:28:18:2b:c9:6c:60:9b:bc:df:
07:d8:17:86:29:07:5a:70:6f:99:a9:c3:99:e1:17:
a8:95:b0:b8:08:51:29:7e:3b:59:f7:80:37:87:66:
0e:03:82:51:97:55:18:af:6f:bf:77:ef:53:2c:f1:
e8:d8:ce:21:2a:52:db:a6:ea:98:63:74:7f:f3:b9:
a2:9c:f2:9d:be:e3:bc:1c:57:68:eb:f0:a1:30:fb:
8e:40:38:e4:4d:98:60:9e:3c:c3:5c:1d:a6:e7:71:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F4:9E:AA:93:BC:55:F1:4A:67:E5:EA:3C:11:BA:E1:E0:3F:9B:FD
X509v3 Authority Key Identifier:
keyid:9D:C9:20:7E:70:7E:35:05:DF:68:B9:A5:BD:70:AD:28:CD:4D:D3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nckgfnB-NQXfaLmlvXCtKM1N04U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/916d0e-7683-41a6-96f0-ff6a1f41d1f8/1/nckgfnB-NQXfaLmlvXCtKM1N04U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:3f:a8:a6:9c:f7:16:b2:a8:68:69:4f:32:60:e5:1e:62:81:
3f:df:f0:e7:87:41:a3:b2:74:de:72:9d:c5:b1:5c:6e:5c:44:
7d:f7:a8:5e:aa:49:15:29:53:54:ab:a9:40:90:f7:03:ab:1c:
f1:65:96:3f:55:13:8b:f5:92:f7:53:78:82:49:c9:08:59:de:
a0:da:4e:b4:b4:f9:d9:30:41:42:36:7a:1f:c4:50:c6:9e:75:
a7:d3:2b:a5:9d:18:b4:27:ca:f4:b9:0c:a7:2e:58:f0:15:b4:
f3:35:77:0d:73:7d:62:46:42:d2:39:a9:3f:ac:f8:d1:e6:86:
ec:6b:07:75:ab:6c:41:61:c6:41:a8:7c:7f:dc:62:ce:30:fc:
7e:da:40:72:e7:db:4c:ad:1f:ec:5e:6a:fa:98:76:b3:6c:f5:
6a:2c:90:f8:bd:f8:94:e7:95:df:7a:f9:60:3c:95:ce:5c:03:
86:66:e5:e9:04:99:dd:d6:14:f7:5f:06:8d:a6:9f:e5:4b:49:
27:23:23:08:86:11:98:76:e7:6a:52:86:16:80:67:e1:61:7b:
7d:30:7b:ba:c2:9e:46:74:56:64:c4:85:d4:d3:00:37:5b:6f:
e2:18:03:58:ea:19:fe:ab:e2:17:0a:be:66:1d:49:97:03:65:
72:80:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:08:01 2025 by rpki-client