Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier: qUbnpumYbFjsXx1WOJKiDkeii8usy96NNdWZe0el5Gs=
Subject key identifier: 64:67:28:C7:A8:78:FF:70:CD:0F:A4:AD:A3:71:49:C6:DF:8C:E8:D5
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial: 019921B105666ACD47E04D742CDA3F9EA85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number: 071F
Signing time: Sun 07 Sep 2025 01:01:13 +0000
Manifest this update: Sun 07 Sep 2025 01:01:13 +0000
Manifest next update: Mon 08 Sep 2025 01:01:13 +0000
Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: wdQbdx60Tq1KEGsPSIf8JQcDqw61cTPhk7DQjqCQDik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:05:66:6a:cd:47:e0:4d:74:2c:da:3f:9e:a8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Validity
Not Before: Sep 7 01:01:13 2025 GMT
Not After : Sep 8 01:01:13 2025 GMT
Subject: CN=646728c7a878ff70cd0fa4ada37149c6df8ce8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:9e:11:0a:a6:21:16:93:c1:da:26:45:52:
a2:01:64:26:f1:c1:89:26:70:6d:92:8a:5e:ee:3e:
b2:0d:8e:73:3c:c7:8b:4a:63:76:00:60:4a:02:05:
ca:e5:64:9d:ea:34:49:d6:53:5d:da:a5:ee:e1:06:
6a:ac:e2:a6:88:ad:04:47:79:f2:99:69:9d:d7:62:
9f:ae:08:12:05:85:03:ca:bc:5c:b9:62:6f:1b:26:
da:65:d2:e4:95:24:56:b5:5f:c9:b3:c1:01:75:00:
24:51:92:df:a9:fb:d0:dd:87:1e:c7:44:b2:ae:ce:
6e:60:21:23:8b:c1:2e:34:bf:55:3a:ab:b4:9d:4a:
63:20:a9:80:e4:e0:b1:c3:56:b0:b6:58:61:a3:9b:
87:37:de:77:6f:31:cc:15:e6:48:da:b4:29:d4:6c:
3c:73:c7:6f:97:b6:41:a8:e2:44:38:0d:5b:14:47:
3c:f7:b7:46:5b:0c:54:c7:78:f1:e9:dd:c9:f1:d4:
f0:93:a5:51:3e:3e:71:99:a3:dd:f6:a8:bb:44:17:
93:36:ee:f9:de:52:a2:e5:88:f1:c3:98:20:56:f2:
d0:cb:7a:67:5e:56:c7:fe:f3:07:8d:49:42:18:15:
70:8c:e5:6d:f1:c4:7b:3f:71:20:d4:c1:f7:91:00:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:67:28:C7:A8:78:FF:70:CD:0F:A4:AD:A3:71:49:C6:DF:8C:E8:D5
X509v3 Authority Key Identifier:
keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b7:5b:27:db:df:69:d2:62:80:22:f8:a3:21:d0:e2:a5:f7:
c4:e8:bc:c3:02:28:ae:d8:d8:b2:8f:47:f7:df:b3:af:38:34:
90:8f:2b:76:a9:5d:b9:4f:88:9d:67:61:b9:7c:a1:91:f8:94:
fc:60:34:87:3c:77:54:1d:07:eb:35:f2:e8:6f:b5:7a:41:64:
fa:c3:4d:0d:12:a9:ed:5b:02:ca:bd:c4:53:31:23:71:95:de:
c9:d2:ba:eb:85:fa:37:00:99:91:99:5d:a9:2a:04:e9:4a:71:
eb:6e:86:64:2d:bb:b1:51:de:67:0b:af:28:9b:cd:b4:55:be:
66:27:c3:2e:04:ef:58:52:41:ac:a3:55:c4:96:d0:05:b9:36:
71:9a:76:06:e0:8a:c8:dd:dc:b9:40:eb:96:c8:56:e9:4e:4b:
dd:99:fd:35:87:a4:88:38:3f:18:76:28:53:7a:1c:77:0e:0d:
3c:6a:90:cc:0e:49:3f:d7:b9:98:d2:33:49:08:56:da:15:a4:
88:98:90:4d:9f:b8:9e:73:28:7d:6d:ac:2b:a7:7b:c6:8e:70:
3b:d8:44:29:75:05:34:78:95:3c:50:4b:39:26:ff:81:6a:e4:
af:9b:03:7e:f0:6f:08:dd:95:55:4c:46:41:80:02:05:11:4a:
01:0c:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:51 2025 by rpki-client