Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json)
Hash identifier: 0MT1wYyU1GTl6S7G/HwTElfm1ijfM5vKulB352ksMBU=
Subject key identifier: DC:C1:1F:48:2F:B5:9D:32:CC:B0:06:EA:E9:23:2F:2C:77:FA:09:B2
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 0199239F04E3D82CFE027E250EACD3B2F7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
Manifest number: 0158
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: gh5EQ/NKFlNv4WDYJmqLLHVF7lRiA+0tuPl8VYjHf6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:04:e3:d8:2c:fe:02:7e:25:0e:ac:d3:b2:f7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=dcc11f482fb59d32ccb006eae9232f2c77fa09b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:ad:e3:79:da:ec:b5:68:f1:25:54:bd:85:
29:fb:33:8e:68:45:eb:87:08:55:5b:48:9b:5a:0b:
1f:76:0b:20:93:cb:df:24:b3:77:ff:64:5b:3b:5d:
ae:9d:c0:0a:04:0e:a9:b0:a5:6e:4a:87:9f:a5:b7:
0c:a9:80:9d:2a:bd:da:ed:33:c7:4a:2c:d9:d9:4e:
65:77:35:05:10:7d:6b:20:27:ff:f0:8b:f1:4f:33:
27:97:e7:a6:99:ee:e8:25:85:ee:7b:19:4c:c4:4b:
ef:cf:4d:44:e7:43:fc:0e:20:0c:df:9d:6b:eb:96:
be:37:8a:94:31:69:1a:0d:25:d5:29:d8:77:0f:79:
aa:f2:78:86:66:45:df:d7:c5:ee:f0:c2:40:3b:b1:
30:21:4b:e5:50:84:20:a4:b7:a5:d0:87:5f:d3:70:
d9:a9:86:b0:85:8b:9c:d6:19:e3:6c:2a:68:3b:4a:
82:86:c7:fb:7d:0f:6a:84:43:fb:f2:9d:67:95:63:
b9:c6:c5:e5:cc:75:5d:96:4a:c2:3e:ce:a5:d5:35:
45:db:5e:8e:9f:e5:d4:89:d7:18:01:2c:5a:86:fa:
09:fe:09:58:5b:fb:58:44:f5:10:98:d4:01:09:29:
a7:17:8e:d0:b4:87:21:dd:32:33:78:8a:7d:8e:71:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C1:1F:48:2F:B5:9D:32:CC:B0:06:EA:E9:23:2F:2C:77:FA:09:B2
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1f:22:c9:c8:ad:be:12:26:7d:3d:08:4a:2c:06:33:cf:ee:
c3:05:b5:8f:0d:30:ee:dd:1b:cf:07:2f:81:29:3a:6d:d8:a9:
42:66:e8:9e:3a:de:2d:54:bc:c0:c0:9a:0c:f8:5d:1d:ef:5d:
a8:28:02:45:8f:c3:43:7e:97:f0:ab:6d:01:0b:da:44:5d:dc:
80:dc:ef:f3:ec:d6:99:ad:5d:55:46:eb:5d:a2:ec:ca:15:97:
d8:b3:81:06:82:bc:02:91:89:6c:eb:e3:4a:99:70:2a:66:44:
01:b9:71:79:d0:83:9c:4a:53:41:ba:10:58:19:b3:5a:82:47:
6c:c6:7c:80:1a:53:33:7a:77:71:43:50:33:83:d5:e6:6c:64:
67:b6:8e:58:20:35:5a:e0:b9:0c:17:9f:cc:00:82:10:e8:75:
87:f0:0d:36:1e:d5:07:9b:15:5d:59:05:b6:4f:d0:da:04:73:
20:8e:f2:5b:74:e2:52:cb:68:ae:f4:46:4e:5b:15:3f:06:b0:
de:5a:01:49:ed:22:82:4f:73:45:d2:44:9d:1f:3d:de:a4:44:
38:7b:e2:20:e6:f1:b0:4b:f5:72:14:15:6d:41:22:86:20:29:
36:6b:31:df:d8:5e:a7:90:36:6f:ea:a1:0c:67:dc:34:05:09:
61:4d:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:04 2025 by rpki-client