Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
File: NkITiw7v_lajLMuqWNb_5u3D8p4.mft (raw, json)
Hash identifier: YOqApo2DDmH1pEDXnSvU+V31TGBhMmMgzHkydbGI+XA=
Subject key identifier: 33:B2:FF:12:4D:07:B4:C9:7F:DD:D4:A0:B1:BC:1F:A9:88:DA:61:96
Authority key identifier: 36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
Certificate issuer: /CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Certificate serial: 0198439AD7C2CB6B40DBF5631F83109EDD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
Manifest number: 0502
Signing time: Fri 25 Jul 2025 22:01:17 +0000
Manifest this update: Fri 25 Jul 2025 22:01:17 +0000
Manifest next update: Sat 26 Jul 2025 22:01:17 +0000
Files and hashes: 1: NkITiw7v_lajLMuqWNb_5u3D8p4.crl (hash: lb+MVqgqrPB1DrGFkk25SD1jNYPCd4L43/t7stF410Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:d7:c2:cb:6b:40:db:f5:63:1f:83:10:9e:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Validity
Not Before: Jul 25 22:01:17 2025 GMT
Not After : Jul 26 22:01:17 2025 GMT
Subject: CN=33b2ff124d07b4c97fddd4a0b1bc1fa988da6196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:83:82:b1:a9:63:53:cc:48:9b:a1:c4:63:
eb:fb:c2:d0:83:1b:f8:9d:e8:99:2e:40:54:00:79:
56:3e:78:59:a5:78:32:e2:35:13:6f:fe:1d:59:c8:
a7:00:5f:f3:c6:9a:b4:0e:34:ec:65:52:9d:7a:f1:
86:f1:0d:5a:16:2e:42:c7:53:32:99:6c:d3:6c:7a:
d2:16:d8:e2:bb:2e:71:7c:2e:04:a3:47:d5:00:61:
ac:26:fd:06:dc:84:b8:26:17:6b:14:6a:f1:d6:bf:
ff:ae:36:0d:b6:75:85:f0:bb:fe:a3:a2:be:e7:b5:
27:c4:8a:41:d7:c2:a5:b0:fc:d1:b9:98:af:65:da:
f9:21:b8:11:76:e2:27:33:cd:67:bf:63:82:9a:05:
7e:b2:d5:ee:aa:db:d0:64:fc:97:9a:82:ef:f9:2f:
aa:84:da:3b:e8:04:56:a7:91:e2:0a:4f:95:e4:28:
f7:05:44:91:81:56:77:8e:66:b9:dd:82:1f:22:4c:
67:25:09:58:bf:c7:da:0e:7c:96:94:83:07:24:9a:
10:b5:bd:bb:19:c7:0f:5d:ad:90:64:88:33:99:13:
e8:87:39:27:bc:e3:c9:e6:94:69:db:3e:7b:19:e2:
8a:39:97:4a:fc:a1:a6:de:e6:50:ac:f8:37:20:79:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B2:FF:12:4D:07:B4:C9:7F:DD:D4:A0:B1:BC:1F:A9:88:DA:61:96
X509v3 Authority Key Identifier:
keyid:36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:44:bf:f5:12:71:cc:46:ec:1b:6b:a9:ef:b9:b0:ab:f1:68:
0f:3c:eb:55:b0:fb:ee:60:9b:c1:6a:6e:e4:03:16:5e:c7:fe:
93:2a:2b:22:ae:f3:9d:ed:a8:44:e7:ca:da:20:af:8c:be:98:
ba:e6:b2:16:43:e3:1b:d6:03:5c:f9:83:16:ce:67:13:6c:77:
06:c7:f2:25:46:4c:b0:3e:63:8c:f8:bf:e2:51:15:d3:d8:a9:
b3:81:c1:53:c8:b5:79:60:fc:f3:d9:7e:38:5e:23:95:c6:80:
ab:eb:b5:40:db:42:1f:72:e2:a5:b5:b3:56:2e:78:54:67:e6:
44:59:a7:0d:9d:da:f3:50:51:4d:46:61:82:af:ce:fe:7e:cf:
8c:52:a7:8e:c5:46:67:1a:f1:c0:cd:cf:68:88:f6:43:d8:23:
00:31:fa:81:69:48:14:5b:02:92:9d:32:aa:cc:76:59:4c:ef:
49:e1:97:70:e7:c9:80:80:b6:7a:86:fe:15:de:6c:ec:60:8b:
31:f2:0c:ae:bb:9a:90:81:66:68:0a:a3:be:3e:57:9d:8f:ca:
66:51:cd:10:29:e1:ea:b7:0d:23:31:de:d9:9f:7c:80:71:93:
90:39:40:20:2b:a7:9c:fc:0c:bd:68:cf:4f:96:6e:d1:92:0a:
a1:cb:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:42:46 2025 by rpki-client