Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: ByNhZ/wXnyIaNcvb1YZCdlodviLxXI63fHahbtxwhsk=
Subject key identifier: 4C:96:BC:FA:9F:D6:E6:2F:42:DC:60:B8:E6:13:76:3B:BA:39:88:64
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 0198530E4F951B0B4AA79AA2509776274ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:01:43 +0000
Manifest this update: Mon 28 Jul 2025 22:01:43 +0000
Manifest next update: Tue 29 Jul 2025 22:01:43 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: sY/vwwOMArzdK+vBufSM5HcZ9h0ZwMRnudvh/FCSZik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:4f:95:1b:0b:4a:a7:9a:a2:50:97:76:27:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Jul 28 22:01:43 2025 GMT
Not After : Jul 29 22:01:43 2025 GMT
Subject: CN=4c96bcfa9fd6e62f42dc60b8e613763bba398864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:57:cd:28:0d:0e:75:ce:47:7f:b1:93:29:
bc:16:b2:aa:97:13:5f:22:31:7f:b0:1a:9f:18:2d:
77:53:94:14:21:d1:47:27:6f:43:fb:fe:ca:1d:16:
81:f5:3f:7e:68:e2:61:2a:18:43:36:73:c6:15:91:
4a:08:24:cc:4a:41:39:58:7c:38:02:2f:c7:99:60:
09:6c:75:dd:94:41:02:75:e6:f7:b7:f7:63:8d:a4:
88:04:38:0c:d6:31:ea:b4:ed:5c:29:63:2b:3c:cc:
04:71:56:f4:b9:42:ba:a9:7d:8d:e9:9b:b1:3f:3c:
72:b5:f2:c2:75:7d:f7:11:dd:27:25:9a:4a:5b:3b:
8a:cc:ce:8f:49:94:47:64:90:76:d6:6b:a4:6e:c6:
27:1c:cc:70:5e:e9:7e:2b:57:3e:c5:71:9c:13:6c:
53:7a:5e:57:14:21:b8:53:85:7f:a0:23:40:c3:11:
50:3a:b8:f7:3d:f3:b1:83:1d:2d:2a:be:82:24:59:
62:02:31:92:c8:e8:22:e0:3b:4a:dc:64:ca:e6:14:
d4:99:a2:d2:96:69:27:dc:a3:8b:ad:b5:b9:49:4b:
47:ed:dd:54:7c:6b:70:4e:49:a4:4c:8d:73:6a:74:
2d:0f:b1:48:ad:96:61:f0:ea:98:93:44:bf:7f:7e:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:BC:FA:9F:D6:E6:2F:42:DC:60:B8:E6:13:76:3B:BA:39:88:64
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cb:7d:db:ea:5b:81:59:3c:02:d6:59:41:f3:80:55:bc:ab:
9e:65:0d:25:f9:e5:0e:c2:35:d6:56:61:e5:1c:ff:2d:0a:2f:
2c:e5:26:40:29:98:20:6d:6d:b6:5b:6f:6d:f0:a6:7c:7a:6f:
bd:cd:25:70:d7:be:87:9b:e8:be:89:77:95:5e:c9:14:82:f7:
e3:d8:cc:63:5d:52:90:6b:85:9b:46:8d:57:09:21:05:78:e1:
60:fd:12:d0:08:e9:1c:03:00:37:0d:81:4c:a1:bb:4b:63:c1:
c6:66:ed:43:28:8b:16:21:65:9d:da:24:31:e8:bb:67:f7:32:
37:42:21:96:a3:98:d8:63:a1:8a:9f:5c:4b:91:75:f5:42:cc:
6b:65:89:1d:a5:c7:d0:63:8e:a2:eb:ab:d9:0d:ee:8f:50:96:
ab:d0:21:36:bf:67:1b:4b:b3:c9:e6:e8:9c:b8:78:6e:59:f9:
36:cc:1a:7a:4a:06:ea:c2:5c:dc:22:84:ac:b8:20:0f:31:42:
e0:41:e5:98:15:53:d5:cb:0b:20:56:39:52:ca:15:97:66:89:
5d:0b:a3:d9:0b:2f:9f:3a:7a:7e:88:1c:25:4e:09:b7:fc:b9:
3f:60:78:0f:69:9e:f5:ff:eb:96:97:e5:24:ca:5e:e9:a4:ac:
7b:f8:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:03 2025 by rpki-client