Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier: ac+6/Tyb4ev5XKgk9pnlmXkAXAuRh0CU+qbbhCNVkf0=
Subject key identifier: 47:3B:54:57:59:A0:BF:63:FE:4A:C0:7D:53:B8:ED:58:D7:D7:76:41
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial: 019849650346738D3224F2B949AD6BC526A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number: 0C2A
Signing time: Sun 27 Jul 2025 01:00:13 +0000
Manifest this update: Sun 27 Jul 2025 01:00:13 +0000
Manifest next update: Mon 28 Jul 2025 01:00:13 +0000
Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: 55HmgKUjM5UdXkTGfOJqs/KGOgb5a+QOL6DXuw6b6Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:03:46:73:8d:32:24:f2:b9:49:ad:6b:c5:26:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Validity
Not Before: Jul 27 01:00:13 2025 GMT
Not After : Jul 28 01:00:13 2025 GMT
Subject: CN=473b545759a0bf63fe4ac07d53b8ed58d7d77641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:24:37:c6:ac:a5:25:c9:1e:24:d2:1f:ea:
c0:27:6b:b9:0f:de:7f:3f:79:86:88:8e:25:9f:16:
39:9a:b9:b5:da:ba:81:4d:e0:6e:65:70:c9:51:b4:
54:79:62:b1:b6:9c:a3:6f:b9:0f:96:12:b6:34:a7:
0e:cd:56:15:94:82:c6:aa:2b:97:6f:8d:16:84:36:
4c:1c:a1:db:0e:85:a9:2f:2d:62:44:5f:1d:e9:fc:
28:c2:c0:d4:13:1f:2a:0f:9f:57:0e:f5:42:ae:57:
bc:4e:96:bc:6d:9c:71:57:9b:be:59:4b:78:88:50:
5d:44:d0:7d:bb:31:87:ae:49:f8:22:63:3c:00:9d:
48:d3:61:26:d9:63:32:19:29:9c:61:63:d8:54:a6:
4c:82:d8:ef:f8:01:22:53:ab:1e:34:c9:3b:16:0f:
85:b5:e1:15:a5:72:a3:5f:df:c2:99:36:ce:e1:16:
d9:fd:7a:15:e6:27:99:8c:c4:9a:d4:9e:cf:bf:db:
e7:f8:b2:fd:48:1f:20:22:77:62:3f:ef:a8:d8:cb:
25:50:1c:f4:12:6c:72:de:3f:b7:ee:bd:52:a3:8e:
0b:d0:41:d2:00:8e:fc:a4:6d:26:86:53:44:8e:7a:
14:9b:a3:10:32:02:22:0d:73:bb:de:a8:6c:6e:a2:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:54:57:59:A0:BF:63:FE:4A:C0:7D:53:B8:ED:58:D7:D7:76:41
X509v3 Authority Key Identifier:
keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:90:a7:22:17:d0:4b:37:37:97:2d:45:e0:4a:5c:33:26:83:
cb:b2:0e:f5:ba:d4:ef:28:4f:a9:be:ee:8e:88:70:dd:d8:03:
37:5c:f3:09:73:85:89:6f:26:ab:44:57:bf:74:e3:b1:84:eb:
33:53:a1:95:23:cf:e1:7e:52:66:58:ac:bb:54:5d:1b:5a:c1:
e2:30:a1:1a:70:12:b4:88:53:84:4d:99:37:42:bf:cc:5b:54:
dc:15:57:1d:ef:4b:6e:98:89:c3:c4:04:bf:c6:91:c3:ca:81:
22:a8:61:b3:94:0d:ed:c4:80:c3:de:35:a9:52:b6:de:87:0c:
b2:21:2a:56:ef:c4:c0:a1:0b:d3:ef:f0:e9:cd:dd:bc:8b:91:
56:cf:7d:bc:d4:5a:63:88:95:67:86:84:e9:1c:2d:34:b8:8f:
0a:80:91:2c:70:7a:f4:63:fb:f5:2e:6a:0d:70:d0:35:7b:2f:
89:76:ef:f5:8c:2f:be:42:84:6e:cc:0c:0f:c1:17:de:45:d0:
0e:63:5b:ac:8f:53:59:ff:42:f2:37:1c:ad:df:d6:7e:8d:de:
fc:3b:f9:b7:3e:1f:9b:c6:32:7a:b0:d8:a4:d3:b3:2d:da:a2:
25:d1:0b:91:39:e0:5e:1a:d8:6b:7d:90:ae:14:41:99:1d:65:
5d:28:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:55:05 2025 by rpki-client