Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: EQcgFODgYVjLeGyoxDnU4syM5+ixXwzqxXbRwS4JoIM=
Subject key identifier: 86:40:3E:5E:AE:15:E3:D2:0C:06:92:B2:A5:B7:A1:32:42:AC:B3:E6
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 0197C9F12E40964E7B359BFE114D528C7721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 33
Signing time: Wed 02 Jul 2025 07:01:55 +0000
Manifest this update: Wed 02 Jul 2025 07:01:55 +0000
Manifest next update: Thu 03 Jul 2025 07:01:55 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: P2SLIfr0mM91yxlhQu3uN2wTIgK7MjFzEz19OUhEhCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:2e:40:96:4e:7b:35:9b:fe:11:4d:52:8c:77:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Jul 2 07:01:55 2025 GMT
Not After : Jul 3 07:01:55 2025 GMT
Subject: CN=86403e5eae15e3d20c0692b2a5b7a13242acb3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9d:fa:40:e1:46:4b:14:42:cd:24:66:a2:42:
ee:56:f8:c8:9d:e4:f9:b8:9a:da:c2:fb:d5:72:5e:
d6:9e:cc:64:49:eb:c2:5a:1c:1b:4f:58:a3:ff:11:
fc:f3:38:fb:c9:32:9b:9c:0f:0d:9f:b9:23:95:f6:
ba:61:b6:c0:2a:51:07:75:36:f9:46:47:c3:05:6c:
4a:db:19:ff:4a:1c:6c:73:55:8d:c8:c8:ad:db:56:
53:07:c5:3e:87:4f:9a:ad:7b:12:ab:bb:e4:1b:fb:
5c:2a:10:14:72:b5:50:1d:c0:94:83:1f:1c:cb:84:
d9:6c:78:48:02:1e:f0:7f:b9:a3:0b:a6:73:3b:9d:
5e:49:7e:76:4e:07:47:94:ae:17:b5:e1:42:a9:d6:
d9:86:91:ee:e0:4e:a4:a3:41:52:f0:71:f1:01:1e:
17:3e:25:a6:d7:1c:de:27:3c:1e:e3:1c:ae:fc:d3:
46:3f:f8:0d:5c:19:ed:b2:f6:87:28:b1:b3:3e:eb:
99:02:8f:9d:14:26:3a:1a:9d:f2:de:d7:47:ce:c9:
68:be:29:dd:7d:af:bb:85:cd:ac:db:08:d6:cc:1f:
03:4c:73:b3:77:76:3a:ef:79:04:3b:55:a3:eb:af:
29:f7:0c:e9:c5:53:42:19:09:a2:de:68:68:5a:5a:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:3E:5E:AE:15:E3:D2:0C:06:92:B2:A5:B7:A1:32:42:AC:B3:E6
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:10:ea:44:0d:c3:ca:3d:64:da:a7:0b:f8:45:d0:40:d4:
74:1f:4e:9d:fb:17:84:80:b7:a7:9b:9e:5c:d1:78:39:83:ad:
46:61:8f:5d:0c:37:d3:90:a6:d4:c8:bd:60:54:1b:1b:f4:62:
57:58:37:d2:ae:4c:4f:4c:5c:30:25:f7:e4:82:34:18:17:eb:
76:a2:66:5b:2b:50:50:90:f6:ab:00:d1:cc:34:a6:1a:ba:27:
a5:5e:d3:4a:a4:b0:14:e2:e4:50:6f:b0:b5:38:21:9e:9f:02:
f3:60:4b:a9:70:fb:7c:7c:48:83:55:ca:8d:04:a9:9b:22:99:
78:97:71:d6:0f:27:cf:d2:ec:8d:14:fb:84:54:04:19:ec:50:
fa:fe:11:5e:d7:39:9e:f0:e4:18:81:dc:19:cd:58:fc:02:ff:
80:18:45:6f:e2:f4:56:4f:f3:da:50:4d:7c:8d:e9:5d:5a:5e:
e4:58:af:90:56:5a:75:ef:81:89:a6:76:36:11:dd:99:c8:e1:
98:3d:26:54:2b:a3:36:59:5a:c6:23:f7:24:4b:43:7c:e1:09:
8d:86:1d:b1:fb:23:81:41:99:d7:80:ae:14:a9:5e:3f:7a:8d:
1d:24:e6:fd:e3:3b:dd:0c:b3:c3:88:8d:9b:94:91:31:f6:80:
49:c1:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:45:33 2025 by rpki-client