Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: TrZmt4uqFfkSQPmyAP3uG03GtfH/LULFUQpKJqArNI4=
Subject key identifier: D3:51:79:D1:4A:2A:84:C8:2F:15:22:97:49:C4:D1:C1:D7:9A:4A:FA
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 01992255E53D63EDDF02E4413001685BE23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 1119
Signing time: Sun 07 Sep 2025 04:01:18 +0000
Manifest this update: Sun 07 Sep 2025 04:01:18 +0000
Manifest next update: Mon 08 Sep 2025 04:01:18 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: Blf2oxj657KTf1Vaut7llw4uppM2167sgFpJNss8uI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e5:3d:63:ed:df:02:e4:41:30:01:68:5b:e2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Sep 7 04:01:18 2025 GMT
Not After : Sep 8 04:01:18 2025 GMT
Subject: CN=d35179d14a2a84c82f15229749c4d1c1d79a4afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:31:e5:14:5d:22:f9:e5:70:39:2d:a5:e3:
02:03:d1:dd:da:da:9e:dd:cf:fe:90:4a:8b:7f:a3:
8b:63:67:e3:ed:8c:ff:98:6a:2f:10:a0:1b:e7:9c:
f7:1c:41:55:17:0d:96:6a:03:33:df:6e:47:de:54:
f5:94:cc:ad:71:3a:1f:cb:76:a1:05:e2:44:97:1c:
d8:01:e1:34:ae:a6:91:3d:d7:3a:5a:f3:a9:3e:4a:
7f:45:01:35:ca:20:9b:ca:86:d6:d9:95:1e:c1:85:
d8:2f:1a:5d:cf:2a:5b:da:d4:b9:e3:a7:5f:83:5b:
1f:15:98:9d:87:a6:5c:78:79:52:c4:8a:9c:a7:8f:
05:77:f6:e6:a8:0a:0b:40:9b:a7:07:c3:4e:56:28:
1c:dd:42:cf:22:99:f4:5b:6f:03:7f:62:ab:e7:ba:
f8:42:cd:27:14:ac:4d:a4:ca:32:9f:15:f3:2d:31:
61:da:6e:b1:ae:2f:22:56:68:e8:8d:ae:a8:e6:32:
88:5d:c9:b3:f8:e7:20:3f:3d:d1:13:e8:dc:1a:db:
56:ec:16:88:1e:53:b8:79:4f:d6:02:23:fe:de:20:
91:d0:1c:25:8d:7f:71:4a:d5:27:8e:8a:2a:68:88:
70:11:e7:ca:0c:d5:6a:a6:d5:26:fe:13:9a:11:fc:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:79:D1:4A:2A:84:C8:2F:15:22:97:49:C4:D1:C1:D7:9A:4A:FA
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8c:40:d2:14:41:6e:8b:e0:50:79:d8:28:2c:ea:9c:8c:9c:
18:38:19:87:69:f5:29:2b:4c:8c:d0:7b:a5:a6:17:a5:29:ed:
52:63:de:67:9e:28:27:31:6d:95:91:c8:4c:bf:72:b2:3c:db:
29:74:ab:ee:87:43:98:41:9c:22:a1:f1:49:d7:6b:9e:f8:f6:
11:d5:66:39:81:31:74:56:23:3c:f5:f1:10:0f:31:e4:d7:ef:
e7:bf:c0:70:bc:d5:1f:ce:2e:0c:34:ad:94:0f:b2:32:2d:08:
a7:dc:18:8f:14:8c:98:f7:fa:80:79:68:2d:8d:7a:a2:8d:66:
4f:ac:51:0a:6a:b9:71:1c:ad:be:bd:98:1a:35:bf:42:40:d9:
71:77:32:8e:2d:dd:01:9a:91:da:77:0e:8a:7d:a1:7f:f5:72:
9e:f9:b0:94:e5:7e:44:11:24:df:09:64:0d:c1:00:a9:0d:e6:
ea:fc:00:65:bd:64:e2:39:ee:2b:8b:d7:b8:61:46:53:3f:11:
6b:b3:89:85:96:8a:3e:b8:5a:fc:5d:b9:ab:18:47:02:d7:35:
f1:b9:7a:80:42:d5:4e:a0:35:bd:9d:cf:fd:28:5e:5a:1d:9a:
e0:e6:52:f3:64:68:d4:1c:54:00:91:c1:d0:0f:85:9f:71:8a:
a3:6c:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:31 2025 by rpki-client