Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: Ii/PlpNrzIP2nVqGJW1LvlBxqIoTTel1a89IhpQ8QrQ=
Subject key identifier: DC:29:05:53:BB:F9:34:F7:0A:DE:41:2D:16:1C:5C:C4:F5:25:E3:F5
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 019847E546224FDEBD42955EAAB4D50074E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 03CB
Signing time: Sat 26 Jul 2025 18:01:04 +0000
Manifest this update: Sat 26 Jul 2025 18:01:04 +0000
Manifest next update: Sun 27 Jul 2025 18:01:04 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: oFEE20p9VMHUEQZpsEhmQyluLBa/y7iBAcByFdJa/SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:46:22:4f:de:bd:42:95:5e:aa:b4:d5:00:74:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Jul 26 18:01:04 2025 GMT
Not After : Jul 27 18:01:04 2025 GMT
Subject: CN=dc290553bbf934f70ade412d161c5cc4f525e3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:56:a9:ec:f5:fd:60:4c:d8:7c:82:b3:3a:
81:91:cf:4c:53:d4:62:ad:bc:4c:c0:53:20:4e:7b:
eb:38:87:4b:64:24:ec:35:02:5f:ad:5c:35:5f:91:
0b:49:ca:d4:54:df:17:95:0a:cc:38:48:e3:d1:45:
1f:ca:ee:60:e5:18:60:43:04:0a:3c:84:6f:9f:ac:
c4:dc:5e:6b:f3:a2:25:b5:30:17:66:e1:a2:fb:23:
25:49:6b:e7:f4:ce:20:f4:ab:9e:bd:c1:ea:58:36:
dd:65:6e:31:7b:03:2d:92:ae:a1:63:eb:f2:27:b8:
0b:59:bc:35:66:06:b3:5f:69:76:80:b6:ca:ab:11:
cb:9b:5b:99:a1:3f:20:66:99:78:38:f8:09:c4:ae:
10:8b:17:c2:04:9e:3a:b5:f9:4e:a0:00:33:95:9e:
01:c5:1d:b0:1e:f9:46:5d:2a:17:f8:a2:7c:73:67:
9f:0f:37:b0:d0:3d:de:1a:e6:2f:e3:fe:b7:36:6a:
b9:01:4f:ea:2f:92:df:d1:bd:10:d4:1b:f9:87:b5:
55:4a:f3:d7:20:28:ae:d3:42:49:26:47:84:40:c5:
db:8e:c8:c7:50:45:29:3c:73:9c:df:3c:22:9b:74:
80:38:f6:23:0e:ed:ed:9c:00:9c:81:4b:1e:bb:b1:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:05:53:BB:F9:34:F7:0A:DE:41:2D:16:1C:5C:C4:F5:25:E3:F5
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e0:7d:e2:0e:43:5f:11:69:6c:aa:6e:30:cd:ab:3e:af:9c:
96:8b:d2:02:7a:79:f3:65:f4:0b:71:f3:f0:e1:67:6a:d6:a7:
28:66:0e:fa:fa:1e:0c:e0:a8:34:ee:7d:53:9d:9e:59:35:42:
73:93:af:b3:60:5c:1f:1c:3a:00:a6:ed:f9:ef:61:6a:40:be:
c1:3c:1b:79:92:96:be:ec:e9:90:17:fe:4c:e7:5d:97:04:2e:
90:7c:da:ae:19:02:aa:f5:a2:0e:f2:77:ea:cf:8a:0e:9d:c9:
cb:15:3e:6e:71:8a:7e:14:34:89:90:cc:69:8b:e8:2d:f8:1a:
a5:bd:61:2c:86:9c:2f:a2:c8:4d:ec:23:c7:10:fc:cb:06:cd:
a2:18:04:6e:3b:c2:c8:10:a7:6f:5a:fa:14:1a:93:7b:f6:45:
a5:46:84:2d:e5:45:be:3e:b4:96:cd:49:2e:c0:89:19:8a:7e:
e5:86:a9:72:04:33:80:20:86:47:49:b3:2a:93:40:7d:5d:8c:
cc:5b:0c:de:ba:bc:d6:76:fd:27:b2:23:2c:e2:49:d2:7a:ee:
cd:b9:cf:9e:58:31:9e:c7:f4:c3:d1:0f:e5:cd:cc:60:2b:77:
72:80:7d:b9:4f:cd:33:07:f6:e5:8b:d3:8b:24:41:5c:fd:13:
14:47:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:51 2025 by rpki-client