Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File: x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier: QN0JNw9AZ+y7oO4LrFnmeevgerONpNgU2+pccPTw3Rg=
Subject key identifier: 49:EF:BA:54:17:55:9B:52:16:1E:86:5A:94:C8:42:1B:F3:C9:D8:9A
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer: /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial: 01974A43811FD0BA0C9B61FD3AD2AA23D672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number: 33
Signing time: Sat 07 Jun 2025 12:00:27 +0000
Manifest this update: Sat 07 Jun 2025 12:00:27 +0000
Manifest next update: Sun 08 Jun 2025 12:00:27 +0000
Files and hashes: 1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: 1rAcLbCYwUsesN8Y78TFu2F253+F2ZaMTXAVGmq4e6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:81:1f:d0:ba:0c:9b:61:fd:3a:d2:aa:23:d6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Validity
Not Before: Jun 7 12:00:27 2025 GMT
Not After : Jun 8 12:00:27 2025 GMT
Subject: CN=49efba5417559b52161e865a94c8421bf3c9d89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:85:dc:7a:0e:01:91:01:02:af:14:f3:fd:
34:18:33:47:4c:41:39:ca:e2:36:00:72:93:ef:84:
ff:ea:bb:be:56:e5:5d:58:6f:a3:6c:25:d5:07:8c:
93:11:9c:a2:5f:e3:90:47:3b:40:1a:a7:48:2d:7d:
5b:61:5c:3e:89:22:e3:52:b2:01:15:72:90:c0:17:
63:e3:f5:2b:eb:c9:31:c6:3f:ca:48:dc:ef:c6:6d:
a9:bd:41:5e:b8:cb:a3:74:02:16:70:c7:3c:5b:b9:
eb:cb:cd:39:26:c1:8c:fa:b1:21:33:6a:3b:3f:1c:
20:22:74:2f:56:e1:6f:f4:0b:55:a4:bd:ac:ce:29:
82:16:72:0a:e3:14:2c:31:30:f9:2b:1b:cb:5d:6f:
6c:77:91:d0:fd:ef:f9:55:45:d9:a3:2e:d2:c2:7b:
8e:00:68:96:c9:95:e1:34:5b:56:38:4a:ff:7a:b5:
0d:4a:e9:fe:97:a1:b0:3a:9c:c0:3f:09:6f:9a:1b:
3f:5a:39:78:9a:18:6e:db:48:86:b5:ab:ff:c6:54:
dc:99:54:74:21:08:35:1d:92:42:f0:8a:26:aa:85:
05:79:31:5d:c0:ef:b9:2c:de:95:bf:2d:8d:e3:a3:
17:e0:db:95:42:60:cc:7b:5e:67:21:fb:90:25:98:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:BA:54:17:55:9B:52:16:1E:86:5A:94:C8:42:1B:F3:C9:D8:9A
X509v3 Authority Key Identifier:
keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:02:26:9d:07:34:3f:aa:d2:24:ae:a8:2d:3d:eb:2e:0c:ce:
11:0b:08:58:0a:62:e4:1a:bb:a2:9d:61:15:ec:05:8f:6d:a7:
de:5e:83:cd:60:b0:c6:21:56:a4:df:29:ba:09:18:8a:fb:47:
10:bb:b3:94:bd:df:d0:27:dc:d6:86:0b:b2:12:8a:b0:a8:3a:
7d:07:2e:f5:b4:e2:10:71:eb:95:fa:f3:69:94:f1:35:9b:40:
31:2e:8a:ff:72:20:03:5b:86:ab:b7:b3:66:a2:95:87:9b:76:
49:16:16:26:14:11:ae:24:7a:9d:14:b2:b9:7f:81:de:73:db:
84:09:12:f7:a7:91:d8:1c:a7:43:74:91:1e:ab:86:4d:db:76:
f5:db:e0:3f:e7:1c:7d:51:36:36:d7:67:cb:f1:b5:3f:6f:2c:
ce:c3:88:c9:e7:a7:ea:72:b8:09:af:7c:2b:a3:cf:1d:dc:86:
c1:a1:5a:49:18:dc:7a:74:3f:87:52:6d:91:a8:e8:c9:61:09:
fc:8d:1e:e9:0e:53:60:6a:12:34:03:77:60:06:2c:24:17:db:
b3:7a:30:6f:f0:2b:23:82:cb:d5:d5:41:ee:f0:f5:49:47:7d:
86:0f:72:f8:f6:1a:23:90:de:86:15:e7:8c:c3:42:dc:93:91:
79:f9:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:52 2025 by rpki-client