Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File: x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier: 9Ji6iCTkL8wMaGVE+IlNk3T/FLDGUkAQpHod9XqydZs=
Subject key identifier: 43:E9:B5:E5:66:AA:78:A7:93:9E:7B:42:CD:02:FE:35:C8:5A:18:33
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer: /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial: 0198530D32B8BABBB1D43D0A06A5948C444D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number: BC
Signing time: Mon 28 Jul 2025 22:00:30 +0000
Manifest this update: Mon 28 Jul 2025 22:00:30 +0000
Manifest next update: Tue 29 Jul 2025 22:00:30 +0000
Files and hashes: 1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: CH8DhmQGTvqd7ycXxSXjztxIeNj0pMO3uO16r45RoRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:32:b8:ba:bb:b1:d4:3d:0a:06:a5:94:8c:44:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Validity
Not Before: Jul 28 22:00:30 2025 GMT
Not After : Jul 29 22:00:30 2025 GMT
Subject: CN=43e9b5e566aa78a7939e7b42cd02fe35c85a1833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:e8:41:ed:ed:f8:29:85:51:1e:f8:8b:24:
51:09:f3:4f:a3:ae:34:c3:6c:f9:3b:cc:89:83:bb:
c3:b7:68:ca:ea:d8:4f:99:d7:0d:49:59:9a:8f:8f:
56:7c:5f:16:d4:61:4d:0f:11:d9:47:93:07:72:40:
f7:b8:01:23:e8:8c:d0:9b:79:1b:a4:c8:22:90:72:
68:ea:7b:dd:9d:b6:3d:6f:2c:99:43:03:41:46:46:
6e:d2:89:a9:cb:fb:ac:dc:ca:18:34:f9:01:82:f0:
7d:87:9b:a6:a3:de:95:d0:ff:de:f6:2b:3f:92:9f:
15:d7:ff:50:41:3e:f3:73:4c:9f:98:8d:7e:69:ee:
8c:c5:37:67:b1:22:99:ad:c3:47:38:a5:04:dd:26:
16:e1:bd:d1:8a:04:94:12:58:03:8a:71:5c:59:f7:
7c:88:ae:9c:e8:5a:62:70:2d:05:94:cb:32:e8:e3:
4a:84:bf:0f:e2:6d:86:40:7c:17:0e:32:4f:74:0e:
65:73:9d:e7:fd:d0:e2:e1:e1:f7:c4:09:29:2f:f8:
0d:3d:db:64:bb:74:1e:eb:ed:51:e0:dc:bf:71:a9:
f5:02:25:e7:49:a5:ab:58:ca:bd:14:25:c6:5c:ba:
1a:9d:9d:30:ce:63:73:4e:03:b8:ec:2f:7b:ee:7f:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E9:B5:E5:66:AA:78:A7:93:9E:7B:42:CD:02:FE:35:C8:5A:18:33
X509v3 Authority Key Identifier:
keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c2:a8:d0:ba:94:e0:01:a6:eb:dd:d0:10:c8:30:ef:00:46:
10:43:cd:b8:a1:e7:6e:f2:de:e9:78:4b:f4:2c:a9:02:db:a2:
a5:71:63:61:cd:bd:a9:93:05:dd:6c:3c:70:54:89:9f:40:1d:
b0:85:47:17:73:e6:7d:6d:e3:50:43:bb:3a:d3:e2:8b:88:f3:
a7:1f:bc:83:16:cd:1a:2d:5d:ed:62:b0:0b:b9:32:9c:8e:e6:
36:8b:e7:29:a6:3a:2f:9e:93:98:9c:d0:93:33:47:b7:5b:e4:
99:ed:89:aa:14:2a:9a:84:f6:32:97:ca:d5:c4:40:84:99:75:
57:b5:53:dd:c0:bb:3f:3c:3a:2b:77:da:be:64:ef:d5:52:dd:
94:aa:b4:5f:26:08:d7:f0:d0:1a:45:17:72:be:77:0c:aa:f7:
a0:c6:7a:23:48:84:6c:0e:e4:e5:f0:4c:22:d1:15:aa:06:6e:
2c:d0:50:c7:5d:7d:58:b5:51:74:54:3e:eb:3c:d1:9f:63:b6:
36:f2:11:97:04:f4:65:14:42:ca:f7:bd:88:b3:a2:a0:c2:03:
6d:35:16:82:0b:eb:4b:53:cc:35:ca:60:73:79:5a:86:33:b8:
8d:32:68:0d:b9:a3:cf:ac:c9:ce:f7:00:76:fe:eb:52:a0:79:
ec:8e:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:14:40 2025 by rpki-client