Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: qakGTpB8yRuHQ3g9s+O1sftHEhZXmSYllD75MeuKNI4=
Subject key identifier: FD:71:8F:9F:8C:29:29:61:C0:51:D1:AF:4E:FB:D3:9D:D5:A4:4B:5F
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 01988F593CAF6990B964E9B2648B7FE169FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 0313
Signing time: Sat 09 Aug 2025 15:00:46 +0000
Manifest this update: Sat 09 Aug 2025 15:00:46 +0000
Manifest next update: Sun 10 Aug 2025 15:00:46 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: UUbJc+97ZcSOAOkAhTc3LUlf2O8UMcMcXdLRr17JR2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:3c:af:69:90:b9:64:e9:b2:64:8b:7f:e1:69:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Aug 9 15:00:46 2025 GMT
Not After : Aug 10 15:00:46 2025 GMT
Subject: CN=fd718f9f8c292961c051d1af4efbd39dd5a44b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:44:dd:96:3a:5e:91:0c:ad:91:f6:66:95:
a4:a9:1f:50:bf:a0:c4:e7:d0:b0:9e:e5:79:f1:13:
ae:d3:ab:6d:be:54:8f:96:2f:2d:50:3b:20:57:62:
a2:c3:d1:2b:df:52:de:55:3d:51:04:e9:03:fd:e5:
a4:64:7a:87:6a:d5:7d:a1:0a:df:17:f6:ff:f4:5f:
21:e5:fb:d2:69:10:b2:dc:cb:18:8c:1a:99:22:81:
c3:ce:ab:06:8c:ee:fd:fa:f9:7a:ae:50:13:49:7a:
89:c5:d9:8d:cb:fa:8c:d9:a5:9f:97:7d:ff:64:a5:
ce:3f:f6:c3:ae:d5:7d:79:24:95:55:f6:78:79:36:
c8:00:24:a2:35:18:eb:7e:ff:98:63:68:84:83:a8:
92:28:dd:99:f4:c5:5b:2b:c2:d2:c7:0f:67:22:40:
32:9e:c6:cb:82:42:7a:37:a9:cb:c8:f0:8e:30:46:
a8:f6:b8:b6:85:48:4a:a9:0c:c3:fe:48:b8:5d:f7:
fc:9d:13:72:35:c0:70:1b:4a:22:db:b5:bc:40:db:
0c:f1:26:fa:53:ac:bc:30:17:1d:14:0f:bd:08:e9:
d7:7a:ab:40:de:95:98:07:f3:f4:31:71:17:c4:0c:
7f:ce:81:03:82:f5:90:a5:fa:a5:ce:91:59:fb:e1:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:71:8F:9F:8C:29:29:61:C0:51:D1:AF:4E:FB:D3:9D:D5:A4:4B:5F
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:49:16:14:ef:cf:5d:36:a9:22:cb:51:3f:40:88:b0:c8:ba:
b2:e9:4e:96:d1:a1:48:11:af:ab:c3:34:ae:7f:b2:bb:9a:71:
ef:6c:c2:3c:8d:b0:4b:88:7f:71:b1:5a:ea:eb:ae:bd:e4:24:
4f:bb:b5:0b:96:7e:6b:df:81:6c:c6:97:b1:2b:8a:02:15:2b:
2f:d5:43:35:e8:57:eb:b9:82:05:69:32:e1:13:8b:3a:06:65:
0c:8f:f2:cc:e1:b8:02:f7:42:06:89:39:e4:cf:30:b5:c9:93:
d3:4e:8b:32:2a:df:39:d1:6a:a8:06:81:b7:71:69:28:21:b7:
8f:61:8c:69:d8:3c:0f:39:13:65:9c:39:d2:18:d4:41:3c:98:
00:61:09:19:33:5b:50:25:e1:0e:3b:87:25:dd:77:89:06:ca:
fe:d2:e8:1d:b6:fc:ca:33:58:94:42:c9:26:dc:d1:a1:dd:f8:
03:90:72:22:0a:d8:ad:78:ee:a6:48:67:8f:1d:e6:a5:9d:9b:
0d:f5:ba:03:d8:03:c9:bd:e1:28:4a:14:2b:83:7d:c0:8b:f0:
05:a1:39:07:23:2e:d9:d9:19:2c:59:e1:41:53:cc:da:f9:11:
e7:2a:32:b1:ca:9b:21:a4:72:54:8f:39:8a:62:f6:71:1c:f0:
a7:e7:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:53 2025 by rpki-client