Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: nWAAHyqX0bh0ZA0DFDn+RH4UADcjP4OmyZnXQhzvHQI=
Subject key identifier: AF:DE:02:C3:46:23:17:3A:D2:91:3D:6C:9C:8D:41:AB:D8:9D:6C:4E
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 019847E47B2245D66F70BD372A6D1AC5206E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 04FD
Signing time: Sat 26 Jul 2025 18:00:12 +0000
Manifest this update: Sat 26 Jul 2025 18:00:12 +0000
Manifest next update: Sun 27 Jul 2025 18:00:12 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: JVviDsisIJ8CCvDJr75+enHU75VSuAXgrhAHTFwWWFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:7b:22:45:d6:6f:70:bd:37:2a:6d:1a:c5:20:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: Jul 26 18:00:12 2025 GMT
Not After : Jul 27 18:00:12 2025 GMT
Subject: CN=afde02c34623173ad2913d6c9c8d41abd89d6c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:16:e4:28:ce:3a:1c:13:cd:35:12:af:aa:
e2:ac:f3:9d:7a:d9:62:00:e3:13:4b:4f:32:c5:6b:
10:29:7e:72:2f:9f:1e:5f:ae:c2:00:fd:e0:f0:68:
48:2e:c0:24:f7:37:49:86:45:3f:08:a8:8d:22:ff:
ad:1e:e7:60:04:30:6d:5d:cf:79:1b:67:69:f8:8f:
b8:32:4f:18:d9:50:3e:c9:0f:b5:5a:e1:2a:21:e9:
eb:19:16:09:5d:c8:56:80:4d:0b:42:dc:3b:8a:eb:
84:04:30:d9:78:8e:06:6e:16:b7:7b:12:1e:dd:0d:
9f:fa:ed:03:78:22:db:30:30:5f:e1:cc:f7:aa:45:
5e:a5:43:28:81:61:94:7d:b0:e5:da:6d:ca:b6:70:
cc:7b:e7:b9:6e:37:75:ec:be:0b:9a:5f:a5:70:99:
eb:bf:56:58:44:36:8b:37:be:95:e0:5b:f0:21:eb:
18:0c:5e:d4:ff:b2:99:2e:32:cf:ca:87:57:c5:00:
dd:7d:8e:6f:bc:56:fe:45:ab:df:20:c0:e6:7d:73:
5d:ee:64:da:ce:5b:0c:76:86:95:ac:58:21:73:c2:
cd:de:51:4a:8d:40:51:cc:6c:a4:43:3b:c6:28:fc:
5f:2e:77:07:72:47:46:32:c8:38:5c:47:e7:ba:06:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:02:C3:46:23:17:3A:D2:91:3D:6C:9C:8D:41:AB:D8:9D:6C:4E
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:cb:6a:58:60:d7:79:98:26:e0:3f:ee:1d:77:16:7a:92:
80:9b:5c:e2:4a:a4:65:08:78:89:5d:52:51:d0:4a:a9:70:d8:
d7:51:a3:3f:02:11:e2:bf:ad:14:8a:e1:be:67:6c:41:cf:69:
73:86:c1:0a:0f:d4:b3:93:ec:bd:3a:17:b8:ff:4e:ee:68:99:
b4:51:c8:f2:f6:c0:35:4b:09:90:3c:64:f1:e7:80:95:22:bd:
31:28:ed:a1:57:b8:5b:92:6c:85:a0:a9:2b:b5:af:e1:7f:e2:
66:36:42:e1:93:16:dc:2e:02:1e:18:63:c1:3a:a7:60:10:59:
b2:26:ef:e5:ad:b9:36:af:94:da:d7:38:4b:f7:83:8e:e3:b6:
5d:a7:bd:5b:2d:2d:63:f6:19:e1:61:e9:d0:60:fe:8a:75:33:
69:f3:d1:ce:9f:b9:c8:94:82:65:ca:76:b8:95:4f:7d:14:ec:
0d:26:6b:ed:b5:a7:1c:24:f1:ad:31:3a:8f:03:1c:62:1f:08:
92:7a:43:e5:c2:c1:38:12:e3:f5:42:31:1b:f4:be:b5:a7:f8:
77:99:18:b0:53:c7:22:c6:65:55:f8:1f:bb:e6:b0:1e:4c:40:
b3:98:8b:12:fc:05:c4:93:f9:cb:53:20:a3:e1:31:e8:ef:71:
df:6f:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:18:50 2025 by rpki-client