Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
File: nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft (raw, json)
Hash identifier: Jgsb1NykZqFyG08ohbPl4Db3hiL644C+Gx0J88mzNVU=
Subject key identifier: 75:A3:09:90:39:0B:42:13:E8:F1:8A:4E:7C:4A:4D:4F:FF:3E:4C:49
Authority key identifier: 9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A
Certificate issuer: /CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a
Certificate serial: 0199239ED76DAF1BDF99BDC00DBDBA6F4B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
Manifest number: 0143
Signing time: Sun 07 Sep 2025 10:00:36 +0000
Manifest this update: Sun 07 Sep 2025 10:00:36 +0000
Manifest next update: Mon 08 Sep 2025 10:00:36 +0000
Files and hashes: 1: nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl (hash: XDxZz/jiAwfejL9zjsorlFRkaWF5+k3yci5ygwVRSn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d7:6d:af:1b:df:99:bd:c0:0d:bd:ba:6f:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a
Validity
Not Before: Sep 7 10:00:36 2025 GMT
Not After : Sep 8 10:00:36 2025 GMT
Subject: CN=75a30990390b4213e8f18a4e7c4a4d4fff3e4c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:4b:23:7a:54:3e:cb:96:63:7a:52:d4:20:
67:44:f3:c8:59:1d:bc:f6:29:2f:c3:b8:70:9e:a1:
6e:1a:14:a5:48:be:c9:83:09:cd:21:4f:7a:70:a7:
9d:e8:a7:7a:49:1e:1d:53:57:27:f1:38:3c:c7:3a:
55:08:44:ef:8f:b0:58:ee:d9:03:35:69:9f:e7:73:
dd:24:35:61:14:6a:6c:38:24:7d:cb:f6:67:55:20:
ab:6f:81:3c:c0:bb:f0:0e:47:eb:5b:2a:f8:5e:2b:
7d:9c:4c:fa:02:58:56:10:fc:97:16:7b:fa:a5:42:
ac:c1:de:e6:05:2c:59:1d:e6:9b:dc:1f:65:76:3a:
55:a2:f0:8b:2f:5f:43:47:31:8b:2d:89:96:ed:51:
76:53:d1:f6:74:fd:85:e4:5b:b6:55:3b:3c:5a:42:
d5:a4:35:4d:c1:52:3d:6e:a8:0c:73:e0:3b:12:32:
82:5a:80:95:ae:ef:de:aa:77:e9:e7:11:88:17:3a:
72:4e:87:a6:fd:c7:30:2f:12:b2:46:27:02:27:7c:
48:e3:f9:a6:c2:d5:65:b5:23:4e:6c:bd:81:1c:c1:
f2:5d:55:c6:c4:8a:43:18:c1:12:0b:9d:5d:9a:c0:
eb:53:fe:5a:41:b7:47:a2:f5:02:e3:c9:8f:58:61:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A3:09:90:39:0B:42:13:E8:F1:8A:4E:7C:4A:4D:4F:FF:3E:4C:49
X509v3 Authority Key Identifier:
keyid:9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:62:6a:6d:90:c4:bc:86:99:9d:41:db:a3:e3:03:64:d7:7e:
18:a5:d4:ac:21:df:81:f2:91:b8:ad:d6:91:39:ef:5a:a4:7e:
1d:f8:bb:a2:e5:df:30:00:f3:f4:c3:71:d2:70:0a:51:e4:ab:
3e:99:c3:8f:92:52:5d:02:ec:9e:6f:34:ef:ef:28:3f:e0:7e:
0e:8f:2d:b0:86:b0:a9:0d:ee:b8:2a:92:7a:57:64:dd:31:ec:
d2:dd:a9:d1:d5:83:26:7b:2c:43:f1:cb:08:21:77:d9:ee:03:
f4:76:9f:5a:6c:18:bc:6b:8b:4f:1d:0f:27:df:fb:13:fc:92:
6c:30:b7:57:45:2c:eb:4d:f1:48:31:fc:c8:cb:b4:80:4d:f7:
24:0f:6a:73:7b:34:b7:d9:5f:8e:22:ff:fb:a1:d9:63:c6:1d:
de:20:d8:a6:53:95:c8:3f:90:8e:ab:0f:8e:d3:ce:f3:21:a7:
ba:4b:42:35:57:c2:01:7a:17:d3:e0:2d:2f:f6:58:d8:8f:ad:
79:70:95:a4:4e:1a:1f:92:c9:98:81:92:94:9b:67:f8:39:1e:
74:b0:c6:c4:30:be:e4:a3:c5:77:d8:94:98:88:b9:d3:11:5d:
55:12:a7:4a:2e:b3:c3:9d:2c:b3:73:08:f6:95:ff:76:96:8c:
74:8c:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:45 2025 by rpki-client