Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
File: nvnDHh7MuhkCs_YiWT3pcspxi1w.mft (raw, json)
Hash identifier: Epd55MzDKRhSpimL+2HmHnbzU5X5ZxmPE4uRp4IfneM=
Subject key identifier: A6:A0:7B:EA:72:4E:D5:7E:6E:62:70:43:35:A0:79:DA:F7:92:27:4A
Authority key identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
Certificate issuer: /CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Certificate serial: 019855DF80D11F73EB866B3E48A559B43D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
Manifest number: 0D5F
Signing time: Tue 29 Jul 2025 11:09:27 +0000
Manifest this update: Tue 29 Jul 2025 11:09:27 +0000
Manifest next update: Wed 30 Jul 2025 11:09:27 +0000
Files and hashes: 1: nvnDHh7MuhkCs_YiWT3pcspxi1w.crl (hash: 1/6zypkYVbTVgQqT7DjODdGjEoiJBV75eB7zxY1PK7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:80:d1:1f:73:eb:86:6b:3e:48:a5:59:b4:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Validity
Not Before: Jul 29 11:09:27 2025 GMT
Not After : Jul 30 11:09:27 2025 GMT
Subject: CN=a6a07bea724ed57e6e62704335a079daf792274a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:2a:da:d0:f7:4c:05:12:52:15:29:fd:b4:
c3:e4:8a:61:4b:ce:b7:71:47:20:1a:1a:17:8e:cf:
d8:2c:e2:a4:32:05:85:ea:7e:c3:65:b1:45:3b:17:
57:d5:ce:74:85:70:9f:3c:f9:44:2f:19:9e:49:f6:
06:1d:7e:cf:3f:09:97:c2:2a:1d:65:7b:a4:15:c9:
7c:68:08:8a:2d:f4:cb:56:be:02:fc:e7:79:71:2c:
18:a0:36:e2:54:e1:14:61:86:39:33:02:4b:91:96:
18:34:20:53:10:87:41:2f:4e:7f:28:ed:b6:25:32:
19:3e:3d:2c:45:87:1e:0d:5f:5c:ef:5d:8a:99:33:
37:56:5e:3f:49:64:c2:db:b9:83:d4:ca:93:e2:9c:
71:e3:83:21:44:dd:8b:9b:11:80:6d:d2:ec:3e:a0:
7f:8d:36:6a:cc:bc:58:8b:52:58:d0:17:77:25:7c:
6e:70:94:df:95:9a:c3:c4:4f:46:25:37:0a:99:31:
8b:19:eb:f7:f4:97:8c:c0:60:fb:8c:19:45:24:c0:
37:d1:47:a3:bc:fa:87:0a:70:71:cd:6f:37:63:c6:
38:6d:4c:88:b2:6f:bc:51:84:91:f2:0e:23:13:e3:
e3:8c:b5:89:cb:6e:7c:e5:a8:e3:d0:72:8d:1a:b2:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:7B:EA:72:4E:D5:7E:6E:62:70:43:35:A0:79:DA:F7:92:27:4A
X509v3 Authority Key Identifier:
keyid:9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:29:ee:0f:f2:82:6c:73:b8:45:18:27:40:d2:52:aa:25:f6:
8b:cd:4c:a4:83:68:00:51:7a:03:d3:dc:22:ec:35:98:c4:00:
3f:ba:0d:27:3f:ae:f7:ae:4b:4b:68:f8:77:c5:dc:e8:36:fe:
2f:97:43:70:63:cf:83:52:3d:b9:a4:f0:a6:9e:35:08:fc:3c:
c9:bd:2a:cd:72:48:d8:60:35:73:3a:96:dc:16:ee:a2:6a:e4:
0b:10:f2:52:7f:19:92:11:cd:7d:d5:e3:ce:0f:40:d7:d8:20:
08:cc:3e:73:af:9c:80:06:cc:89:6b:06:20:ad:04:f5:2e:a7:
c8:f3:1c:ec:30:ea:9b:cc:75:c2:2a:24:a9:94:eb:a1:06:f5:
1c:ec:bd:a0:e0:51:6a:7a:d0:02:4e:77:25:94:1f:65:37:ad:
eb:cc:c3:b9:86:99:d3:9c:5e:1e:1d:58:94:64:51:66:df:11:
99:24:2b:5c:19:72:5b:6f:42:26:ce:e0:b6:f0:b4:2e:de:d8:
d8:7f:c9:d0:69:95:44:21:9e:53:62:40:e6:82:a1:13:dd:f8:
dc:b9:21:ca:9f:0b:93:2c:4f:99:a8:70:13:cb:1b:fc:8c:f3:
b9:52:39:5f:c9:3f:2e:c1:ac:a4:89:41:81:ba:98:da:6b:1a:
6d:1c:78:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 13:46:17 2025 by rpki-client