Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: eA37oxCMRWM8YIl6KgRhUn4bP9U6COSG5OBLK6F9svY=
Subject key identifier: 78:93:F6:5F:CE:8A:5F:28:8D:FC:24:4B:27:F2:E4:0D:E6:77:5F:DC
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 019852687A8AE65F8B715C76FD5A2709A6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 15EC
Signing time: Mon 28 Jul 2025 19:00:35 +0000
Manifest this update: Mon 28 Jul 2025 19:00:35 +0000
Manifest next update: Tue 29 Jul 2025 19:00:35 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: e8+Ii97H8UvJ1QAJcRyN1tqzn7Fz0d0xCc/nJWCX9f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:7a:8a:e6:5f:8b:71:5c:76:fd:5a:27:09:a6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Jul 28 19:00:35 2025 GMT
Not After : Jul 29 19:00:35 2025 GMT
Subject: CN=7893f65fce8a5f288dfc244b27f2e40de6775fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:c5:67:b2:41:89:0c:02:3d:06:58:b5:2a:
db:f6:aa:2a:b4:6f:0f:83:5d:13:b2:fa:ba:40:49:
e8:86:bc:a5:7e:cb:7f:7d:dd:88:b2:e4:cc:9b:1b:
a8:fa:25:82:39:e9:b8:63:e8:7d:79:4b:c4:28:e3:
ac:64:0e:a9:bc:19:9c:01:46:2d:49:f6:4c:90:48:
06:01:7c:01:c5:15:0a:ad:3a:b1:fe:8a:46:15:d4:
e1:22:b2:e4:4d:d5:b4:07:9d:83:7c:b7:f1:7e:23:
56:fc:1e:5b:75:7e:07:6f:84:85:7b:c9:a8:a2:64:
11:6a:80:9b:26:f7:aa:aa:3f:34:fc:25:61:f5:32:
7a:bb:3b:81:12:0a:37:84:b7:05:25:91:06:d3:d6:
93:a6:a4:9d:d4:ea:1e:17:7a:4a:0d:5e:92:02:8c:
38:f2:7c:be:79:a7:9a:36:a1:7f:ba:f7:3e:48:42:
f9:8d:8f:86:19:85:86:80:33:d1:30:1c:8a:2d:7d:
e7:b8:9f:16:17:4e:fd:a3:47:74:01:78:18:db:25:
28:18:36:fb:0c:a5:43:54:91:b1:ea:c0:b5:ca:da:
12:84:b6:31:17:c5:10:d5:e2:f3:8f:94:5e:27:26:
ad:80:f3:02:d7:2c:d2:3e:09:67:04:eb:25:08:99:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:93:F6:5F:CE:8A:5F:28:8D:FC:24:4B:27:F2:E4:0D:E6:77:5F:DC
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:54:c7:47:f8:66:69:56:ba:c0:65:3d:fe:9c:13:4f:03:1c:
0a:6c:b0:d5:18:09:44:8c:4c:53:8e:1a:92:6a:f5:58:8c:ac:
ce:d0:d4:1b:02:6f:8d:11:53:5c:bc:59:12:60:62:bf:c5:34:
ef:cd:39:5c:25:a2:d5:f6:07:cf:68:7d:6e:ac:b0:30:93:ad:
a7:14:c7:9c:12:9f:bb:e9:a0:f0:bb:e7:e0:c7:d5:bf:3c:6b:
02:85:ce:ef:dc:1a:25:69:dc:d2:b1:7f:00:e4:2b:99:e2:36:
dc:28:22:d4:53:0f:f0:ae:30:a4:18:fc:ac:66:fb:f6:d5:bb:
55:fe:32:d8:ff:21:9b:50:80:86:f7:1a:cb:33:d4:05:6f:85:
87:a6:b5:45:a8:da:fe:9d:68:ee:ec:8d:59:8f:6e:33:29:87:
f8:ec:12:c5:8d:21:91:a4:6b:c4:a7:74:3e:9c:81:39:14:89:
da:27:b5:26:94:8e:46:73:ae:ed:2e:e2:a7:09:e7:49:57:74:
04:8e:39:1d:25:10:cf:8e:f3:4e:c9:52:d8:e5:71:94:94:a6:
cd:f5:0e:bf:3b:00:f7:b9:68:73:0b:b7:6f:ee:3d:dc:cd:54:
05:2e:97:d7:1d:f2:4a:f1:15:b6:46:b1:6a:c3:b5:90:46:fa:
2d:17:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:05:19 2025 by rpki-client