Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: /DWcK0JfQs5HCh6Bpjm4jcv0cCnVDl3s5pHCnWAChAI=
Subject key identifier: 68:41:EF:68:0C:43:AD:DA:9A:20:4F:DB:85:A8:BC:CA:BE:BC:FE:D2
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 01984965D8704448737E91D8CDFA869731D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 0797
Signing time: Sun 27 Jul 2025 01:01:07 +0000
Manifest this update: Sun 27 Jul 2025 01:01:07 +0000
Manifest next update: Mon 28 Jul 2025 01:01:07 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: VECVicGhorShzxpS2bCyE0uGY5qqnvz5r7hhjZo+0xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:d8:70:44:48:73:7e:91:d8:cd:fa:86:97:31:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Jul 27 01:01:07 2025 GMT
Not After : Jul 28 01:01:07 2025 GMT
Subject: CN=6841ef680c43adda9a204fdb85a8bccabebcfed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:90:bd:06:53:52:af:5d:35:55:0c:c4:00:
68:c6:8d:32:2e:3d:8a:ae:04:98:8c:14:8d:f5:07:
54:0e:ed:ce:b7:68:b6:1b:6b:8e:8c:87:68:a3:f6:
a3:28:65:96:ed:9f:82:02:52:7e:69:57:aa:2e:6f:
7b:9d:1e:d1:4d:39:40:dc:5e:10:b0:93:c4:3a:5e:
cc:17:b1:1d:73:0c:83:18:eb:7f:59:e1:66:c1:8d:
48:ec:46:46:1e:2d:f8:f4:ce:09:c0:07:4c:ea:6c:
72:c7:b4:a6:dd:3f:e7:71:0d:ba:bb:79:06:e9:fb:
9c:6e:52:c3:bf:cd:9e:bf:79:0e:21:df:1c:77:a9:
64:b9:ac:e9:5b:49:71:40:bc:ed:ee:4c:5b:4d:69:
fe:23:56:b7:d5:f0:24:df:9b:ba:8b:f0:de:30:70:
5d:c6:a8:96:5a:cd:5f:43:eb:c0:cd:5c:11:59:37:
5d:a5:59:0e:09:81:0c:06:cc:ae:ec:f8:43:b2:f6:
cb:8b:b6:ae:c8:0d:0b:aa:b7:5e:4f:23:6e:aa:6b:
0c:21:00:54:36:fb:21:6f:0a:60:ea:de:e6:57:ef:
35:14:8c:6a:67:a8:37:05:b9:ac:65:84:42:a8:1f:
23:7c:16:74:79:a6:b4:f8:b9:e6:1a:20:b5:07:09:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:EF:68:0C:43:AD:DA:9A:20:4F:DB:85:A8:BC:CA:BE:BC:FE:D2
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:71:3b:22:34:54:25:f0:96:b1:69:f2:5c:dc:c8:e7:84:e3:
8c:31:35:68:02:2a:e7:b9:d5:8d:85:72:e1:1d:83:f3:31:b7:
51:2c:4e:a7:61:aa:fd:ab:42:70:89:68:c3:5a:54:89:a4:bb:
2d:ab:c8:4e:d4:91:ae:e7:f7:4b:55:4e:6f:a7:bb:44:5d:a2:
c8:42:8f:ba:88:24:0a:00:73:75:2f:5b:cf:97:2f:15:91:7a:
d2:3e:05:1e:b1:4e:56:5f:3c:7f:14:1b:b2:75:1e:22:bb:0a:
98:77:b5:83:60:71:3a:77:b9:9d:bb:ef:c8:7e:33:9b:0c:7e:
f5:de:8e:85:29:39:8e:d0:6f:17:a9:88:cc:82:1a:5f:be:d8:
45:fa:ed:1b:44:3a:da:40:27:77:8d:73:19:c6:23:5f:25:3c:
f4:64:a4:03:ef:72:e7:39:ce:3e:4e:b1:60:b3:03:26:62:c0:
bb:1b:36:b5:a5:06:ba:e3:6a:39:bc:25:03:78:75:59:3a:98:
b7:df:98:c0:1a:e7:68:39:e1:70:44:a3:a4:b4:9e:15:de:be:
53:a4:38:a9:ac:e1:40:89:03:63:d0:e6:d1:b9:20:ca:b9:78:
0c:4d:ef:89:61:c4:1b:89:7e:b5:a2:ee:47:76:7f:b8:54:20:
0e:5e:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:52 2025 by rpki-client