
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
File: NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft (raw, json)
Hash identifier: l4/5TIxazWpj7QlSI6CscdYkNgbEZ4Oa7XN+weYRxvU=
Subject key identifier: E5:44:B5:D5:5C:18:BF:DD:56:F5:46:2D:A6:83:44:43:5D:E7:39:74
Authority key identifier: 35:41:E9:D6:00:DA:AB:65:35:43:72:5C:F1:F9:CF:98:8B:50:D8:79
Certificate issuer: /CN=3541e9d600daab653543725cf1f9cf988b50d879
Certificate serial: 019847E548F5AB10A9B41DBAF24605CE2731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
Manifest number: 0A62
Signing time: Sat 26 Jul 2025 18:01:05 +0000
Manifest this update: Sat 26 Jul 2025 18:01:05 +0000
Manifest next update: Sun 27 Jul 2025 18:01:05 +0000
Files and hashes: 1: NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.crl (hash: 6NqQc7iYTbBZ+WLrLQNBD68XdqcOeXTCeoAM7jTQS2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:48:f5:ab:10:a9:b4:1d:ba:f2:46:05:ce:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3541e9d600daab653543725cf1f9cf988b50d879
Validity
Not Before: Jul 26 18:01:05 2025 GMT
Not After : Jul 27 18:01:05 2025 GMT
Subject: CN=e544b5d55c18bfdd56f5462da68344435de73974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:f0:71:e5:b6:bb:79:e2:c5:dd:00:e3:d2:
1a:d6:57:16:99:07:3b:96:10:5f:44:de:14:d4:81:
d5:ac:1a:87:d4:b8:74:71:b6:e4:7c:66:74:b1:f9:
fb:e4:c8:75:81:b0:d1:d9:99:5d:82:28:bf:23:f9:
0d:9b:89:c9:75:4c:17:5a:54:f6:ad:14:60:d3:5a:
62:c5:1e:df:54:09:d1:31:60:97:02:bc:85:09:5b:
33:fe:f8:ac:10:34:e7:88:c2:96:6c:2c:f5:5c:21:
dd:f9:ad:f2:56:cf:23:23:12:87:95:5b:58:fa:6f:
69:dc:29:ed:67:b4:5b:76:ae:eb:bf:25:96:65:a1:
b7:7e:4c:09:d5:35:42:87:d9:63:fa:97:f6:22:97:
08:11:72:b8:a9:f8:9e:84:ee:d2:54:ed:e5:7f:d5:
6c:5d:5f:d4:f4:5b:6e:71:57:69:9a:eb:62:96:a8:
85:b9:a5:b0:3c:ba:8b:45:4d:1e:30:ab:e5:15:5e:
0f:47:ce:58:75:79:f8:e4:75:6d:78:14:b0:63:e6:
34:58:fa:cf:e3:ba:bd:d1:a4:80:92:ba:22:79:94:
5a:2c:a9:51:62:f7:1a:eb:da:38:34:50:d2:4c:76:
4e:a5:5e:23:a7:17:68:9f:b0:6d:02:8b:53:22:87:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:B5:D5:5C:18:BF:DD:56:F5:46:2D:A6:83:44:43:5D:E7:39:74
X509v3 Authority Key Identifier:
keyid:35:41:E9:D6:00:DA:AB:65:35:43:72:5C:F1:F9:CF:98:8B:50:D8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:61:fe:ce:f8:da:7d:b6:9f:68:47:0b:dc:cd:d0:22:9b:f1:
72:21:39:74:0d:e7:56:3d:c2:68:4d:7e:1a:c9:82:87:83:a6:
4a:37:06:42:f2:76:ca:78:53:ef:06:77:da:0c:95:d3:e3:07:
75:0c:a6:19:ba:7b:19:b3:b0:92:28:b6:5c:07:5b:eb:d0:ea:
24:da:fc:1a:eb:8e:f6:e9:5f:9f:fd:71:93:02:a3:86:96:78:
b8:c9:0f:80:0d:55:ed:32:c5:f1:e0:49:fe:35:20:8f:25:bd:
96:ab:97:26:87:ca:47:13:98:e7:22:31:a5:ce:37:65:09:52:
fc:6c:f6:93:ac:96:2b:0f:77:5e:b6:35:45:51:53:98:d0:14:
6f:a4:8a:09:9c:89:c9:99:e4:e0:1a:8e:5f:8c:97:09:22:58:
fa:2d:0b:c1:f4:3e:a9:03:f9:9f:1b:3f:82:0e:70:0a:c8:67:
d1:44:ef:0c:5e:3c:6b:37:1f:fa:00:99:f8:7c:4a:16:d7:a1:
fa:b6:29:86:50:6d:5c:84:ac:61:51:d1:46:0e:b9:dc:e3:ba:
06:5d:50:9e:cd:06:8f:f0:27:90:31:be:12:f2:35:31:a5:1e:
94:81:8c:8b:c4:05:e2:3c:6b:33:ea:25:54:d1:d7:31:fd:a0:
dc:e6:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:30:11 2025 by rpki-client