Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier: 7UYsIf3h//QUh8iw+wRfzUlOV1ApUafodY4jFvJtvPg=
Subject key identifier: 56:42:14:9F:25:7F:57:EB:26:A9:0C:E1:FE:33:EB:31:83:32:C5:02
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 0198A0BAAE2ACFD166B8D4742F1E49F9B1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number: 07C7
Signing time: Wed 13 Aug 2025 00:00:45 +0000
Manifest this update: Wed 13 Aug 2025 00:00:45 +0000
Manifest next update: Thu 14 Aug 2025 00:00:45 +0000
Files and hashes: 1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: EvYGnTyV6olPGGWZXsSj2LDOSa6RhD9UHS0ILPJwbJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:ae:2a:cf:d1:66:b8:d4:74:2f:1e:49:f9:b1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Aug 13 00:00:45 2025 GMT
Not After : Aug 14 00:00:45 2025 GMT
Subject: CN=5642149f257f57eb26a90ce1fe33eb318332c502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5c:8e:ab:cc:63:54:1f:9d:21:fb:36:a4:e8:
46:e5:d4:72:d5:53:f3:d8:cc:24:ab:e2:88:b7:eb:
db:30:dc:ea:b0:19:32:b1:54:43:0f:71:f1:57:00:
eb:1e:ae:f8:c2:de:39:ab:5b:4f:d0:f5:8f:52:21:
47:d9:64:33:37:06:be:4a:4e:bd:ad:0e:bd:4c:dd:
60:91:86:4f:0b:0b:53:c5:b3:46:42:99:b5:84:65:
e3:0a:9e:71:83:16:b4:b5:23:a6:f2:cf:fb:e7:8e:
05:b8:fe:21:b0:68:eb:e9:71:1f:64:19:0b:4e:f9:
87:c1:cc:bb:cf:9e:19:68:a1:da:b8:14:17:3f:34:
c2:39:f4:26:6e:72:20:ee:40:21:40:f2:90:9c:90:
43:42:db:f4:66:1b:cf:82:b0:b3:35:a7:e8:b0:57:
8b:79:4d:3c:c8:78:71:80:6d:23:c4:a2:f4:00:b5:
86:f6:38:a1:2b:63:05:4d:17:9b:fd:03:38:07:1d:
d8:24:c1:b9:2a:75:46:70:90:6b:02:f1:84:17:44:
2b:e4:84:90:a2:b9:7e:8a:6d:7e:7a:b1:84:52:a1:
72:54:9e:00:af:81:7c:c9:eb:aa:d5:ed:4e:34:28:
3d:f7:79:f9:92:f2:bf:3d:7d:33:a6:c6:2e:12:81:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:42:14:9F:25:7F:57:EB:26:A9:0C:E1:FE:33:EB:31:83:32:C5:02
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:85:0a:e0:60:1a:99:e5:09:ab:57:57:e7:c5:79:37:29:dc:
39:68:bc:97:53:82:9c:2b:02:6e:39:20:fb:eb:11:59:ff:60:
b7:06:7b:2f:28:38:4e:a9:a9:83:eb:f3:75:b5:14:8d:a9:3b:
73:af:cc:bc:a9:fe:3c:bf:69:66:cc:3b:d7:6d:b7:83:64:93:
49:ed:fe:b4:d4:24:b9:7c:da:1e:2c:f4:71:5a:f5:52:90:a8:
fc:e4:c0:3f:3d:4e:e9:ff:70:a2:e4:30:ab:d0:ce:01:49:e0:
12:bc:7a:74:1f:24:68:d5:0f:70:a0:1b:22:fe:3f:73:7e:63:
4f:fd:24:8d:90:72:e3:8c:85:cd:29:6b:bd:42:e6:fa:5e:58:
20:ab:f1:36:18:8d:44:5d:fc:cd:7b:fe:0b:70:1a:5b:74:83:
27:fd:a6:d6:8f:22:95:fe:35:2a:78:f6:09:f3:c9:4d:af:dc:
cc:84:11:f9:34:17:d4:ac:63:2e:f3:9c:a4:b9:c6:7e:42:48:
85:3e:61:1e:94:a6:d9:8c:cb:73:e9:63:e8:91:bc:ae:54:da:
5c:91:6e:ce:fd:27:38:a6:8c:fb:48:38:d3:7f:1f:08:24:53:
88:ec:23:08:27:15:49:b5:88:2d:35:50:01:f6:b6:f5:d7:39:
25:42:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:32 2025 by rpki-client