Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: PjlLP/ZoMUxiJnl4PjNNUjXPrGhZb67P8wbr6zi/few=
Subject key identifier: B0:32:9A:39:46:9A:45:CE:CA:31:01:F6:FE:05:FA:A2:B2:08:C1:EE
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 0199225563F3752F94C4E32BDF37EF626555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 01D0
Signing time: Sun 07 Sep 2025 04:00:45 +0000
Manifest this update: Sun 07 Sep 2025 04:00:45 +0000
Manifest next update: Mon 08 Sep 2025 04:00:45 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: VynqKHzO4um7+EbBASyIARD/GpOdHN0ymOMldo2pKu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:63:f3:75:2f:94:c4:e3:2b:df:37:ef:62:65:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Sep 7 04:00:45 2025 GMT
Not After : Sep 8 04:00:45 2025 GMT
Subject: CN=b0329a39469a45ceca3101f6fe05faa2b208c1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:e2:e8:e0:4a:ae:0e:ea:6c:ae:12:90:12:
c7:69:79:2d:3e:31:a7:74:78:d2:bc:02:7e:67:54:
16:57:9f:77:30:5e:c3:b8:8e:81:84:a8:5e:27:1c:
6f:10:a0:e6:c9:dd:1b:98:d1:9a:88:0c:ab:a4:c5:
ce:7f:f1:e5:19:02:fb:51:ab:ea:20:97:af:5e:14:
84:10:d1:48:c9:76:57:22:98:a8:73:10:8b:03:97:
a4:ce:f0:3d:fb:79:5e:c3:80:39:dc:54:ad:62:23:
ae:34:00:17:63:d3:a4:fb:16:7d:aa:76:c2:2d:17:
77:20:72:c3:5e:b4:d5:08:5d:5e:00:97:cc:3a:f0:
79:84:4c:50:a1:8f:c0:ef:28:77:62:14:99:dc:93:
30:25:fa:9c:f6:bb:fd:54:75:9d:4e:0d:a6:e4:12:
6e:e5:e8:4b:c5:c5:79:19:24:63:c7:85:5d:1e:a1:
e7:30:c9:6d:de:f5:fc:83:7a:4a:01:7a:26:fc:e5:
c6:38:c1:54:7e:22:85:78:45:bf:50:c8:12:12:7e:
16:15:16:3c:b5:e8:cb:75:a7:df:c2:38:8f:32:65:
1d:68:cb:ff:2a:cc:83:5c:e4:b6:c0:bc:d2:82:94:
db:fe:d5:f1:e1:9d:be:8b:71:3b:8d:3e:6e:36:83:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:32:9A:39:46:9A:45:CE:CA:31:01:F6:FE:05:FA:A2:B2:08:C1:EE
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d0:8d:c9:d4:d6:dc:a0:44:7b:b4:89:a8:29:31:46:ed:0f:
dc:19:fb:f9:ec:02:22:28:d5:35:f8:36:95:b4:46:40:23:b4:
81:b5:7f:8e:7c:cb:ea:ea:ac:d9:2f:3c:2d:d7:87:8d:e5:ec:
a7:29:0c:a9:ee:5c:51:49:03:c7:28:99:1f:e0:1c:01:ca:36:
d3:c0:63:db:71:44:a3:fb:ee:cd:5d:ed:b0:21:65:6c:e6:98:
d3:42:f0:43:fc:3e:1d:c9:e6:1d:c9:01:02:41:58:4a:a4:42:
4b:25:c6:dc:98:fe:a4:46:a4:48:3f:33:67:28:2f:af:14:85:
81:1b:c6:be:10:50:fa:33:78:0e:88:c4:b2:1a:d4:4a:4e:f2:
3e:16:d2:5c:da:d5:dc:c2:59:01:63:13:1f:e7:de:f6:a3:37:
22:9e:a7:7c:e2:eb:c8:37:f4:84:89:86:9a:4d:93:de:f2:b3:
66:46:34:97:0a:25:41:04:af:26:3e:c2:da:a4:4a:73:bf:ae:
fe:a9:cc:cc:42:da:7c:91:27:6b:06:77:5f:ff:e2:70:73:e5:
0a:df:60:de:0f:a1:67:2f:76:55:b7:a8:b8:39:3a:6f:fd:f8:
8c:ae:cc:8a:37:23:f0:dc:b3:1e:44:46:1f:3a:62:4a:88:f7:
12:7d:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client