Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json)
Hash identifier: 711g7dpK4Bmf19ZZkYaYPfYJ36tDMXB1/JzyIMx6o9s=
Subject key identifier: 46:39:CF:8B:03:6B:19:7E:1C:94:2A:2B:09:07:CD:E6:8E:F4:CA:52
Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251
Certificate serial: 019747428DC21A08BC2B3C5440AFB491375E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
Manifest number: 7A
Signing time: Fri 06 Jun 2025 22:00:33 +0000
Manifest this update: Fri 06 Jun 2025 22:00:33 +0000
Manifest next update: Sat 07 Jun 2025 22:00:33 +0000
Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: wx+CdAZeN4VycAKAYE44TaXP8garIqzevv8FMiIE2mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:8d:c2:1a:08:bc:2b:3c:54:40:af:b4:91:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251
Validity
Not Before: Jun 6 22:00:33 2025 GMT
Not After : Jun 7 22:00:33 2025 GMT
Subject: CN=4639cf8b036b197e1c942a2b0907cde68ef4ca52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:bc:c5:79:6e:0f:96:9c:f0:d5:8b:94:dc:
be:80:69:d9:7a:65:be:86:71:3a:1a:a4:99:f2:66:
5a:60:d3:95:d0:81:de:a1:91:5d:d6:4e:b7:f8:3a:
d0:98:60:a8:ff:0c:5f:9a:da:fd:ac:e3:e9:61:f3:
86:fd:74:ba:42:34:a0:fa:64:92:d5:88:cb:dc:53:
d1:35:40:ee:15:69:0d:3d:db:dd:a4:c5:ee:e1:90:
bd:a6:aa:f4:d3:97:b7:3b:86:9f:16:50:8e:7d:71:
fd:36:4d:2f:52:91:15:7d:a9:16:e9:6f:9b:b9:9f:
f8:22:ed:16:27:e9:82:6b:2e:a8:2d:47:60:17:fe:
db:f8:08:17:0d:17:00:8f:e8:92:99:02:ea:db:dd:
93:38:54:65:eb:69:94:a4:ea:f9:1a:4b:8a:90:9c:
01:3a:5d:65:c1:63:5e:7e:76:9d:5f:5b:c2:1a:9e:
3f:7b:70:e9:81:ea:aa:fe:b8:0f:77:e7:60:3f:1d:
d2:56:9b:14:f0:23:b5:81:73:af:04:2f:72:69:aa:
4a:9c:82:98:7e:df:f4:46:a0:1b:29:18:8a:75:94:
e5:7d:1c:69:96:7b:49:95:6d:6f:d4:46:f5:24:7c:
fa:74:18:26:be:35:c0:e6:49:34:6a:60:19:65:2a:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:39:CF:8B:03:6B:19:7E:1C:94:2A:2B:09:07:CD:E6:8E:F4:CA:52
X509v3 Authority Key Identifier:
keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ed:02:6d:70:fb:46:62:82:e8:e0:ea:a2:13:0b:6e:d2:51:
fb:52:d9:f1:72:2e:c3:40:5e:d6:74:a8:75:75:1d:fe:64:c2:
a1:23:42:bd:2d:80:8b:65:ee:e0:ca:c0:66:b7:ec:90:04:27:
c4:8c:a8:d7:9a:f6:21:40:d4:1a:f3:c7:f4:ba:a2:13:f8:38:
43:0d:cb:cf:fa:84:f3:49:49:8a:76:03:c5:51:2d:ff:8d:50:
41:41:03:ca:39:db:0c:7c:f1:25:3c:28:1a:c4:1e:3f:49:00:
84:d9:31:c8:64:6e:2a:ff:e5:dc:6d:7c:54:0a:89:95:2c:81:
78:98:9a:b5:fd:dc:7e:ad:54:db:3a:62:36:73:cd:ff:af:7e:
72:21:5e:4a:9d:7a:09:c6:f4:b4:cc:63:95:8a:21:81:fd:05:
62:53:8b:3c:b7:6d:bd:34:93:52:7e:6f:2a:72:c8:47:3e:b0:
76:67:07:f0:cc:50:40:fa:b0:ee:27:11:ec:05:24:26:91:7e:
e7:fa:79:cf:0c:62:7b:3c:20:03:f5:11:20:3d:3f:40:10:fc:
71:67:90:a6:37:91:3e:b4:6e:45:ff:e8:f7:4e:a4:7c:74:d3:
61:a5:0f:b0:3c:d4:3e:b0:bc:9a:b7:0c:07:17:0a:95:bb:c7:
56:26:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:00 2025 by rpki-client