Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: XqNpdl0ZGl5zukBu7Mu2o1obBIYiNRkHDp3AVg38fIo=
Subject key identifier: FA:BC:AA:1C:00:59:3D:E7:E1:EF:9E:A0:4A:70:44:39:7D:BE:14:90
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 019849664AFA4193F2A3D8CF8D8E7C8E683D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 08AF
Signing time: Sun 27 Jul 2025 01:01:37 +0000
Manifest this update: Sun 27 Jul 2025 01:01:37 +0000
Manifest next update: Mon 28 Jul 2025 01:01:37 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: g7MD/gtq1oREnYY2YuMpxuU2z2fhuYindN4wLGzTcl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:4a:fa:41:93:f2:a3:d8:cf:8d:8e:7c:8e:68:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: Jul 27 01:01:37 2025 GMT
Not After : Jul 28 01:01:37 2025 GMT
Subject: CN=fabcaa1c00593de7e1ef9ea04a7044397dbe1490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:7e:28:e8:41:fd:23:4c:e9:1f:f0:7e:42:
2a:b4:48:af:e2:6c:42:a9:06:57:6d:49:e1:9b:86:
22:3f:a0:30:5c:2a:4b:11:7e:a7:6f:51:da:43:80:
eb:ba:20:27:cd:1d:59:a4:39:4f:2a:31:a2:cb:42:
00:c4:5f:b9:66:f8:0d:0c:33:a1:61:07:cb:30:b8:
29:c2:48:f6:65:41:5c:8c:3f:e2:a3:40:c6:f3:d0:
78:f1:fa:df:20:06:ef:bd:92:2c:bb:45:d3:9f:d4:
26:56:e0:e7:b9:bb:ed:60:9d:30:ce:46:cd:3c:0e:
72:ac:43:52:09:1c:ce:0e:da:ef:df:93:c1:47:1d:
a7:80:11:61:7b:be:b4:b2:5c:2c:d3:ea:b6:a7:83:
56:23:4b:f3:31:d4:9c:67:72:26:0d:b4:07:f0:87:
20:0a:8d:0d:4f:97:37:88:42:2a:e1:40:b6:57:2d:
e1:9b:2f:dc:e6:73:0d:65:2e:b2:eb:1c:a2:21:67:
85:26:6e:c4:b7:ec:b1:a5:7d:72:a5:b5:90:3d:9c:
66:51:0d:2a:25:09:26:52:c9:11:52:e1:3a:e3:1f:
f2:9f:58:32:63:07:2a:33:8a:fe:df:f0:3a:9b:b0:
c2:0b:5f:7f:7a:63:ab:5a:15:54:ae:fc:25:86:03:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BC:AA:1C:00:59:3D:E7:E1:EF:9E:A0:4A:70:44:39:7D:BE:14:90
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:9b:f2:60:35:86:a0:32:56:c0:31:22:65:87:7f:70:11:
cb:85:a3:3b:ab:a6:19:c5:30:db:cb:d3:e5:d0:e8:d9:e0:f5:
b2:93:b4:1f:31:74:ba:6f:5b:c6:23:d8:27:46:4f:81:f3:c2:
6c:9d:03:cf:2d:ff:7f:12:a6:32:7c:79:26:62:e0:49:71:d5:
e8:ce:cf:62:28:fa:f9:46:9e:a9:56:b9:31:4e:e7:f5:30:5e:
35:87:f7:65:d2:dd:f8:31:e5:d7:fc:bd:b8:46:15:0c:48:64:
92:34:e0:a5:68:0f:fb:44:69:30:f5:70:12:c7:8a:29:34:1b:
89:5d:6c:e9:63:f7:8a:15:f3:39:da:1c:72:24:3c:3d:91:f2:
56:10:0c:18:5c:37:88:18:a0:dd:cd:f9:28:3e:68:16:61:91:
1a:b7:a3:4d:58:31:d5:a8:0e:2f:61:fa:c6:5c:b6:99:7c:34:
ab:c5:ab:94:cd:b1:26:0c:88:6a:e0:5f:f8:21:06:b7:cb:c5:
20:e8:76:59:3c:bc:30:ce:fe:c3:73:00:e8:42:d3:de:dc:31:
69:6b:1f:c8:0e:06:e3:3f:3a:42:57:d3:a0:b4:7d:d0:c4:43:
4f:89:80:ce:fb:f9:c7:c5:d1:11:d0:9d:90:38:26:86:c0:59:
e9:c8:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:20 2025 by rpki-client