Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: 8XBS0VtyX40e3YJhRMnHoNTDdEHyXFo2feDw5Kc9ZPo=
Subject key identifier: 01:A9:6A:09:64:2C:09:C8:4A:D6:34:D8:F3:84:CF:9D:48:B9:82:85
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 01984AAEE21D62BBF4D7C709A72C5807011E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 03B3
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: YmdP2mh2uz/+pQoRFgmaq65R19z9VwjVS0iEuFAIcmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e2:1d:62:bb:f4:d7:c7:09:a7:2c:58:07:01:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=01a96a09642c09c84ad634d8f384cf9d48b98285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:81:38:49:14:e9:4e:c9:02:e3:86:31:0a:
74:e1:e4:f6:06:e3:42:4b:53:40:fb:db:8e:8a:a5:
53:58:be:8d:f0:85:e5:9d:a6:de:2e:56:3c:86:93:
70:35:ea:fb:7b:90:c6:62:19:17:f1:f2:ab:88:da:
f3:fc:f7:3f:fc:5a:2e:cb:c8:16:0e:72:a0:4f:f2:
66:04:c8:0c:bc:b4:01:e5:6e:23:81:79:f6:c3:9c:
3c:d3:cb:f6:0c:59:76:af:47:b5:67:c2:4a:70:95:
43:8a:51:c7:9c:6c:c8:25:1a:78:38:64:21:91:ea:
d3:f1:97:77:c5:5d:b1:75:63:60:21:6c:d3:62:1c:
db:ac:5d:4a:29:ba:69:0c:54:06:03:8b:fe:b4:88:
81:5f:ac:10:bd:23:33:9d:fc:61:c3:a6:dc:1c:f7:
77:78:20:82:d6:ed:ea:36:27:4e:8d:b8:fc:70:b9:
40:13:7e:ef:09:2c:41:da:f5:21:95:ce:e4:52:30:
bd:19:13:1d:49:b4:6f:19:53:72:fc:9a:a7:b4:2f:
71:27:2d:4e:54:3d:a2:c0:03:cd:4c:84:c4:bd:cb:
f6:22:93:82:35:18:49:66:6b:62:1f:6a:fa:37:aa:
c9:d5:89:eb:e0:98:dc:08:6a:83:8b:50:9a:de:18:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A9:6A:09:64:2C:09:C8:4A:D6:34:D8:F3:84:CF:9D:48:B9:82:85
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:39:fd:ef:73:61:02:42:71:6a:17:c0:08:b7:4b:4d:fc:b4:
15:03:01:a8:13:1f:cd:af:46:f5:cf:52:25:b9:aa:c4:7c:dc:
c4:cd:ce:b0:56:65:23:71:4f:e5:45:c1:df:8e:4b:4b:e8:cd:
85:8e:09:e5:9e:69:5c:01:4f:2a:33:3a:96:35:ac:6d:be:90:
70:04:08:43:db:9a:8e:af:11:ed:74:ae:c0:a5:5c:9d:04:52:
37:b6:06:95:ad:f0:1e:4b:56:99:41:c7:1c:0b:d4:ea:49:b3:
22:3d:f6:25:be:5d:9f:31:ad:1e:8e:53:ac:cb:0f:6e:b8:50:
ca:c7:75:2b:00:84:84:65:d4:25:95:a7:94:96:e4:c8:a0:11:
89:cf:89:8f:02:3f:f9:73:ca:7a:53:5a:f7:b5:37:7a:4a:ac:
aa:5e:6a:47:23:72:f8:8f:6c:dc:c0:06:81:53:6c:f2:30:a4:
65:af:93:cb:34:c6:dc:52:d5:4e:f7:66:81:ad:05:27:e8:ae:
e0:99:d9:1f:e1:36:aa:10:dd:d9:38:40:75:9b:60:df:44:52:
e8:c9:d7:03:9c:2e:1f:10:3a:97:ae:58:47:36:7d:48:0e:2a:
5e:7d:23:9d:1b:87:2b:6e:af:68:1f:bb:bf:03:03:66:d6:e2:
64:6b:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:59:49 2025 by rpki-client