Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json)
Hash identifier: 3XtcdoyN9t/dtElUzBEhIBh55OcqtfrqDfrkneCrjLo=
Subject key identifier: 51:5F:CC:0A:3A:E6:D4:D5:E6:7A:B5:7E:70:9B:BF:37:33:3F:55:7E
Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74
Certificate serial: 0199240D3CEF0F14FFCCF9071FD877548EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
Manifest number: 0190
Signing time: Sun 07 Sep 2025 12:01:11 +0000
Manifest this update: Sun 07 Sep 2025 12:01:11 +0000
Manifest next update: Mon 08 Sep 2025 12:01:11 +0000
Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: r3a3oFGPhEUAsa0GZzBr4216lhWIB4/Z1bODpi7wsUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:3c:ef:0f:14:ff:cc:f9:07:1f:d8:77:54:8e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74
Validity
Not Before: Sep 7 12:01:11 2025 GMT
Not After : Sep 8 12:01:11 2025 GMT
Subject: CN=515fcc0a3ae6d4d5e67ab57e709bbf37333f557e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bb:b4:e8:25:cf:13:ab:cf:ad:cf:30:c3:f8:
00:db:bb:58:f2:43:cc:d2:53:f3:78:78:db:5a:61:
54:d5:fd:f5:91:75:2b:2d:4e:21:0f:36:ed:1b:88:
63:fe:cf:b4:da:9a:c0:46:03:c6:5c:5a:7f:4f:ad:
da:5d:60:a1:86:66:8b:60:e3:99:c9:e2:96:b7:b4:
54:d8:1d:2d:6f:14:53:13:ee:1f:be:4a:81:68:00:
5c:47:1e:0e:fd:9a:14:5e:15:3e:21:cf:8b:27:8a:
cf:47:be:e9:38:ab:00:9b:11:65:07:80:68:18:8e:
07:e5:92:7e:af:85:6f:bb:f3:ed:da:91:79:79:9f:
99:be:a2:49:b4:76:62:da:32:26:61:8f:8d:3f:cc:
da:e6:bd:04:32:8d:fa:9d:62:f1:95:8a:32:81:c2:
88:e3:99:a3:95:31:b8:85:e7:d1:53:3c:12:97:fe:
df:17:05:d0:45:83:b9:a7:6c:0e:22:7d:09:7d:c4:
be:a5:6c:67:22:33:15:3b:a7:2b:c7:8c:05:c2:8b:
f0:47:47:58:74:f1:3b:76:dd:65:90:e6:05:ac:47:
0c:2c:e3:7d:88:97:b1:ac:15:ca:69:2a:97:0c:b6:
37:62:82:3e:3b:10:47:0c:a2:42:69:c6:71:84:c5:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:CC:0A:3A:E6:D4:D5:E6:7A:B5:7E:70:9B:BF:37:33:3F:55:7E
X509v3 Authority Key Identifier:
keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8b:dd:e7:2e:f9:63:a9:80:8c:9a:5f:12:af:80:f9:59:89:
73:6d:80:31:4e:2f:93:2e:89:d8:75:77:2a:0f:7e:34:0c:e0:
10:e6:2c:a1:43:b3:2b:2f:b3:22:17:ae:ad:57:b7:7c:5b:52:
2b:bd:e9:fa:ce:20:37:12:8a:d8:e2:1e:99:ea:ea:b3:8a:46:
ca:51:be:1c:06:33:ab:93:9b:8d:0a:02:c7:25:8b:22:51:74:
63:27:ae:39:ea:fd:4f:75:a6:5e:4d:60:0c:38:ac:6c:b8:ba:
64:bd:de:35:0a:8a:6d:30:25:d5:06:8d:4f:26:54:6b:89:87:
1e:52:01:03:6f:bc:3f:02:7b:a8:30:30:9f:e5:bd:eb:4c:13:
8f:be:b7:41:b8:bf:3a:b7:88:d2:46:25:ea:81:11:20:3a:0f:
01:6c:a3:a4:59:fd:09:a7:6f:30:03:85:c8:3d:6c:32:06:b4:
65:17:45:06:a1:27:9c:86:ea:b9:c6:2c:ff:99:b4:89:a6:db:
05:bd:8c:10:21:88:4f:42:e2:b6:29:0b:c6:68:8d:76:55:ad:
e3:13:52:06:1d:a8:34:7b:f9:88:4a:28:df:ab:56:5d:c8:70:
e6:2a:06:53:9d:cf:e5:98:3d:91:b5:0e:f9:ca:81:43:6a:e4:
81:56:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:20 2025 by rpki-client