Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
File: nTW9eP7OI2XlsT9SOIfS2NakU_k.mft (raw, json)
Hash identifier: cl0HqtzRhyO1DYOjkyjCu/prxIYgpMKTM2wlmDF9ngQ=
Subject key identifier: 8E:C4:F1:D6:10:C1:FD:E2:7E:D2:14:B8:F8:71:AE:DA:E5:F6:D5:FF
Authority key identifier: 9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
Certificate issuer: /CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Certificate serial: 01982822E2825651735E7CB60BFD10CF1E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
Manifest number: 12
Signing time: Sun 20 Jul 2025 14:00:31 +0000
Manifest this update: Sun 20 Jul 2025 14:00:31 +0000
Manifest next update: Mon 21 Jul 2025 14:00:31 +0000
Files and hashes: 1: nTW9eP7OI2XlsT9SOIfS2NakU_k.crl (hash: NBfVY3EnAeHav0ADfSp2jhoaWYCoeCKa133KQMYvHWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:22:e2:82:56:51:73:5e:7c:b6:0b:fd:10:cf:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Validity
Not Before: Jul 20 14:00:31 2025 GMT
Not After : Jul 21 14:00:31 2025 GMT
Subject: CN=8ec4f1d610c1fde27ed214b8f871aedae5f6d5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:64:85:16:c0:a0:72:fc:40:05:0e:98:60:
dc:ff:0b:cb:6b:90:33:05:ad:83:94:91:3b:5b:cd:
fb:0a:d5:a1:0d:f8:6e:12:77:59:a8:80:68:1c:16:
1a:3b:b9:5c:e7:a7:1d:17:de:9d:a8:34:f5:5d:85:
07:47:2f:43:f9:ca:69:de:ee:e0:b4:04:de:d2:37:
15:ba:53:26:a9:10:d5:a5:cf:4a:5c:32:0f:8a:b4:
db:ea:52:72:14:d2:25:ed:95:55:0d:bb:a9:af:07:
74:3d:ab:f7:13:a5:85:00:9d:ed:ee:6e:21:40:8c:
cd:d2:d6:db:ef:0e:84:4e:45:f8:7c:26:2e:c3:38:
d5:c1:8d:34:df:22:ae:fb:dd:1e:ca:45:65:9b:67:
63:04:58:17:f5:1b:98:b7:27:5e:1d:5a:4c:35:7d:
45:d4:bf:02:24:20:2c:2a:55:48:6a:31:39:12:20:
11:99:b7:4f:66:ee:ff:8b:ba:c7:81:14:6a:1b:7a:
46:aa:1b:15:6c:c2:5d:db:c5:9e:64:68:6d:2b:f9:
ab:9d:f8:44:c5:2b:01:e8:2c:36:e6:d6:99:74:a1:
91:da:0e:73:eb:70:bd:65:cf:09:c4:56:98:3e:60:
48:23:3c:4b:04:ae:bd:9d:13:fc:91:52:c0:10:d9:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C4:F1:D6:10:C1:FD:E2:7E:D2:14:B8:F8:71:AE:DA:E5:F6:D5:FF
X509v3 Authority Key Identifier:
keyid:9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ac:1f:0c:3c:b4:08:35:d9:34:37:c1:cf:8a:54:56:f5:25:
f6:f6:6e:aa:32:1e:1f:63:cd:b8:a8:c1:06:6b:e9:82:56:41:
5c:55:ea:a5:ca:c1:0a:6f:6a:e7:f5:34:3c:b3:6a:87:be:ab:
fa:14:4b:cb:66:50:64:7e:98:62:51:37:c3:4d:e7:13:54:a5:
a2:dc:ff:f0:4d:5c:b6:40:60:d2:6a:88:57:6c:40:1a:3c:a3:
56:d7:12:09:c2:17:bc:99:ab:a8:8b:41:cc:96:b3:d2:67:70:
e3:9e:68:d5:04:76:92:86:1a:86:fb:77:08:37:7e:21:1d:8c:
17:5f:36:8b:cb:48:4b:29:67:18:52:6b:45:c6:3e:7c:8d:f1:
52:cc:b7:43:a9:d1:f4:66:60:3a:a9:a8:6f:b9:86:72:99:2a:
f2:dc:6f:14:39:ed:4c:8f:b4:2f:9c:b0:8c:8a:16:21:49:cd:
08:ac:6e:1f:8c:04:5b:ff:5c:91:52:44:7b:1b:16:21:67:af:
96:6e:8b:a5:76:4a:50:18:69:38:84:06:af:02:f2:ad:1f:a3:
5f:0b:3b:8e:c6:bf:44:07:be:dd:28:02:9e:cb:26:48:3b:1b:
10:f5:26:7d:bd:8b:f5:ae:65:d5:11:95:55:7a:76:ba:72:dc:
3b:32:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:30 2025 by rpki-client