Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: tEWCkoHFlue6eI7PCXKQB23+BcIVz5ArW1jDyPgnd0k=
Subject key identifier: 7A:CD:87:CB:35:2D:CA:9F:FD:DA:81:F0:0A:A7:BB:9E:18:F1:74:A1
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 0198E2D11BAF556CDF438407A8091E737664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 164E
Signing time: Mon 25 Aug 2025 20:00:11 +0000
Manifest this update: Mon 25 Aug 2025 20:00:11 +0000
Manifest next update: Tue 26 Aug 2025 20:00:11 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: X7ZLvXPC5reIA4ebU6vOsvqEPji5DBK+FutBt+Mc1Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:d1:1b:af:55:6c:df:43:84:07:a8:09:1e:73:76:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: Aug 25 20:00:11 2025 GMT
Not After : Aug 26 20:00:11 2025 GMT
Subject: CN=7acd87cb352dca9ffdda81f00aa7bb9e18f174a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f7:39:bf:36:f8:a7:d9:cb:a8:c0:71:38:65:
ad:08:ea:70:91:da:4d:32:58:40:0a:8d:43:31:40:
7b:ab:7b:4f:27:92:78:ed:03:8d:f4:10:d0:a7:8b:
9d:c5:ac:59:f1:5d:95:84:3d:ac:10:58:83:2a:25:
34:e6:59:40:10:da:2a:7e:b7:da:aa:17:9a:b8:3b:
3a:30:6c:7c:3c:cc:67:f9:4a:45:ca:83:09:ac:7b:
15:48:c0:7c:98:bc:33:b2:45:2f:10:31:63:76:52:
5c:47:3d:26:86:97:97:59:bf:a8:d4:62:7a:74:9d:
d7:a8:69:82:8b:e2:35:68:9f:a6:25:e2:24:07:32:
a3:77:58:2c:3f:b7:a2:a6:4f:07:a6:db:69:a5:1b:
22:08:09:b4:df:86:0d:60:72:07:d1:16:59:a0:01:
32:8a:42:ae:ca:9b:3f:fb:3c:ee:d4:44:93:0b:5f:
a4:d1:3a:ff:08:c6:44:9f:c4:17:7c:94:f6:4d:57:
f2:6e:8c:1d:31:c6:7f:37:c6:7e:bc:b2:d6:0f:19:
61:7c:09:c3:e9:ed:65:c3:73:ea:cf:f1:d6:bf:47:
a4:e2:26:59:3b:8e:ad:a3:19:15:12:20:98:11:48:
61:e6:16:b3:bc:c9:e9:6f:b0:4a:ae:f6:01:36:cb:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:87:CB:35:2D:CA:9F:FD:DA:81:F0:0A:A7:BB:9E:18:F1:74:A1
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:0b:a9:0e:92:78:e3:f1:64:6a:9e:5e:f8:f8:2a:c6:7a:67:
72:27:50:38:b6:64:59:80:a1:7c:2f:69:ff:08:67:73:e3:7a:
dd:71:28:43:95:e4:5e:62:1e:96:4d:49:26:72:c9:1c:0d:59:
09:21:a2:2e:35:94:4c:cf:a3:1f:fb:1d:f4:ec:9e:f6:d5:e9:
70:81:78:f8:5b:d3:48:b4:ca:ec:04:9c:d1:8a:61:ea:50:63:
4a:d8:f5:0a:8b:57:9a:e5:bc:cc:bf:ed:b4:8b:55:b9:99:03:
fc:d9:bc:a4:4f:9f:af:87:8c:63:e7:d2:30:a9:6e:68:6d:e1:
1a:82:0a:cf:99:ad:a9:ab:f5:ca:85:ff:60:9a:41:49:03:da:
7b:36:20:0a:12:cd:7c:bd:a9:7e:e7:f6:75:44:db:19:85:41:
9e:92:d9:91:3d:97:d5:47:c1:fc:37:05:ac:99:35:9a:75:2b:
35:43:c2:52:ca:9c:9c:bd:09:8d:1a:93:47:c7:c6:04:af:37:
e0:c3:f9:d7:1b:28:56:bb:36:3a:d6:7e:dc:08:9b:3b:b4:64:
2a:e0:f2:c9:3c:a3:de:4d:f5:a9:4c:7b:62:71:13:b1:dd:be:
8f:5d:ee:30:4a:90:13:84:2d:52:2e:fd:dd:73:52:79:57:f4:
50:c3:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:42:08 2025 by rpki-client