Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
File: nTXgMBWeVx-qvTebUsHZoa77FEQ.mft (raw, json)
Hash identifier: H2Ve9W5ZslnWsw9zTp+2pTkAnKbSG9OHBsq0Y9RuMDY=
Subject key identifier: 42:4E:E8:AE:EA:FA:72:37:F4:B8:1E:97:99:D7:3D:F2:5C:A1:EE:C5
Authority key identifier: 9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
Certificate issuer: /CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Certificate serial: 01974D44F261D2AA505CCEFAE5645B9BE44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
Manifest number: 07
Signing time: Sun 08 Jun 2025 02:00:53 +0000
Manifest this update: Sun 08 Jun 2025 02:00:53 +0000
Manifest next update: Mon 09 Jun 2025 02:00:53 +0000
Files and hashes: 1: nTXgMBWeVx-qvTebUsHZoa77FEQ.crl (hash: +Isls6OoH+ejVaT63ZJLPQaM6mGSuYhFftGvu2TGNv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:f2:61:d2:aa:50:5c:ce:fa:e5:64:5b:9b:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Validity
Not Before: Jun 8 02:00:53 2025 GMT
Not After : Jun 9 02:00:53 2025 GMT
Subject: CN=424ee8aeeafa7237f4b81e9799d73df25ca1eec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:76:6b:fd:5c:a8:e9:64:5f:46:33:2d:56:
c0:ce:d6:01:82:84:9b:4b:96:74:44:37:c8:89:f5:
a3:b8:6b:a4:74:8d:43:37:35:0d:c3:12:98:73:47:
f7:69:47:1f:1d:9e:43:9b:73:2c:3c:45:c5:80:9c:
0d:0e:23:c8:80:12:b1:7e:d6:ad:fa:78:e1:72:17:
38:5a:7a:7a:ae:f5:1f:17:67:71:d7:de:51:ee:97:
51:fb:f7:91:2f:93:51:18:4e:5a:de:c2:41:2b:39:
1b:8e:bf:1b:7c:87:b3:72:97:4d:47:b8:01:93:67:
69:0a:79:00:6b:d0:35:03:34:75:a2:87:b0:91:5a:
ff:d6:d4:3c:72:ac:58:55:70:62:33:0c:83:cb:75:
25:e5:6f:09:a7:ae:0f:48:d8:34:7a:de:c9:2e:b8:
58:80:b0:63:8f:35:6d:39:fb:91:21:cb:98:10:36:
ca:29:09:f8:78:96:37:20:16:51:05:82:5f:f9:d3:
be:21:0e:9b:79:43:b3:9c:10:6f:72:f2:9e:0c:f6:
cb:ed:f7:ab:7d:0f:54:92:bf:56:b9:e5:78:ec:8e:
02:4f:1a:86:98:bc:fa:05:69:f1:77:a2:70:22:e9:
d0:8a:ad:06:59:1c:95:e7:7a:c8:4e:e9:81:b8:7a:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4E:E8:AE:EA:FA:72:37:F4:B8:1E:97:99:D7:3D:F2:5C:A1:EE:C5
X509v3 Authority Key Identifier:
keyid:9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:40:26:4e:be:6f:26:7b:65:e9:39:a7:01:05:b5:ad:54:e1:
97:07:ee:8b:f7:cf:5d:37:d2:52:00:51:08:b6:6f:8e:b0:9a:
f1:f2:b5:6d:2f:77:95:83:74:13:ed:88:98:59:8e:3c:2c:c6:
ba:67:55:32:d3:1f:c8:43:2e:fb:23:d8:9b:ff:e5:b4:be:9b:
6f:7a:c1:d7:b3:e8:53:58:b1:ae:ce:b2:70:95:10:db:78:c0:
b8:8a:49:a7:a1:31:f4:69:38:c4:e0:ec:cd:cb:d4:ef:65:a9:
a4:44:37:48:e2:6d:f2:97:9b:6b:f0:2f:b8:13:45:55:c5:82:
9b:dd:09:13:e4:43:77:f1:4e:29:6a:6e:f3:2b:e5:8f:8c:89:
df:26:92:8a:a0:11:ac:4e:5e:fd:d1:a3:7c:04:d2:53:4f:b5:
a3:d2:35:bd:d6:86:50:1e:9c:40:ec:84:c6:f5:2c:fc:be:b3:
87:ac:51:84:14:b9:31:07:ad:d9:3b:08:a8:5f:9e:1c:c4:95:
6a:dd:36:c4:61:db:e9:3b:9a:39:57:1e:bf:a3:7c:d6:33:0f:
c2:04:de:a3:e5:76:e9:50:2b:03:e2:82:7d:05:9a:df:5d:f2:
bf:30:23:71:c8:58:5c:a3:1f:90:51:8d:d6:75:b7:03:bf:b4:
d5:a3:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:22:33 2025 by rpki-client