Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: XKu2OyUyEwMlRVDyMSXzOh8KsCnaWwr5nrYcZt0Ddb4=
Subject key identifier: 4A:8C:57:6E:C8:6E:0B:97:6E:55:3D:2E:53:BF:7E:2C:30:10:0E:61
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 01976D3D9E7AB360BA1BFF660DC88EA6319D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 068D
Signing time: Sat 14 Jun 2025 07:00:44 +0000
Manifest this update: Sat 14 Jun 2025 07:00:44 +0000
Manifest next update: Sun 15 Jun 2025 07:00:44 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: OGbW5yAjpMu6ohCbe69NJ0WqQVSX0AofmWlciGDfjZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:9e:7a:b3:60:ba:1b:ff:66:0d:c8:8e:a6:31:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Jun 14 07:00:44 2025 GMT
Not After : Jun 15 07:00:44 2025 GMT
Subject: CN=4a8c576ec86e0b976e553d2e53bf7e2c30100e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:b6:c6:ee:fa:fd:08:50:18:f8:6e:18:46:
8a:6c:bd:26:23:d3:40:71:c0:e1:92:3c:e0:dd:62:
01:3b:e8:59:e8:43:14:44:aa:91:9b:30:50:ac:f0:
da:06:72:41:df:de:32:76:cb:07:31:08:b5:95:ab:
73:24:44:f8:93:5f:1c:6f:d0:33:23:91:22:17:74:
23:2f:7b:64:13:7d:77:69:13:ef:03:d6:76:45:f6:
0b:77:60:f6:d6:31:f7:4f:2f:73:80:10:80:f8:76:
cd:33:55:4b:fb:8f:84:a2:4b:40:1a:ef:fa:50:43:
f1:7e:b1:c2:4d:1b:a7:34:e0:86:31:8e:c2:2d:a3:
ed:41:1e:94:22:fe:07:97:38:9d:98:51:fb:48:0f:
56:f5:d5:bd:58:33:84:b2:48:f1:e3:94:fa:4b:cc:
b3:fb:c2:a5:6c:f7:1e:4b:2b:e8:f1:34:f0:91:f4:
59:3d:33:0c:e8:fa:0a:19:40:af:82:2c:a6:47:a9:
66:f0:f8:e2:f0:53:ab:5f:e2:c3:d8:ff:34:bb:da:
9c:23:c9:43:ee:43:61:26:aa:03:b9:50:3d:fa:8f:
2d:8a:af:5c:22:90:a2:80:0d:77:aa:c3:aa:98:07:
9c:24:76:ac:cb:f4:11:8a:02:6e:45:53:c1:6a:34:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:57:6E:C8:6E:0B:97:6E:55:3D:2E:53:BF:7E:2C:30:10:0E:61
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:01:ac:e3:f1:12:da:c0:72:63:77:63:63:af:15:00:25:53:
af:a9:b7:a8:5d:6e:37:c1:67:07:b0:02:3a:a9:39:26:93:72:
6b:39:6f:c4:45:06:59:89:15:b1:4f:3f:7c:6c:a7:2d:9f:7f:
81:bc:bc:15:0e:3f:b8:b4:e9:bb:c8:82:e1:48:58:42:9b:44:
85:0d:8b:ff:3d:0c:a8:34:61:75:d5:d2:77:7d:b3:a6:d5:79:
df:18:27:87:18:2f:9c:8f:2a:e4:8e:8b:f1:dd:a9:9d:70:45:
74:4c:c3:3e:ce:62:57:05:dd:a0:88:3e:eb:a8:6d:48:76:8e:
95:e4:02:71:70:0b:d1:2f:e3:24:0d:6e:74:bd:6c:91:2e:b6:
84:10:12:7a:bb:1f:db:f6:1e:9c:5e:84:ce:91:a2:5a:ad:5c:
fd:c6:4c:b4:3d:75:79:1e:7c:43:5f:1a:60:4f:81:9e:b8:1f:
62:81:7e:75:11:9a:87:75:d0:13:69:0c:c3:99:28:f6:15:a0:
ee:51:fc:f1:c6:c6:03:64:2c:b3:15:71:54:4b:f0:9e:3a:30:
29:eb:1e:9c:ca:09:29:f8:12:8e:5a:4d:4c:15:84:69:c9:93:
10:d7:d4:30:b7:54:a1:f6:e9:11:ea:57:58:61:cd:9e:b6:2e:
37:41:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:40 2025 by rpki-client