Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: QVOCdL5x2i1nT1yd4Mg7XNQB4upjuVD711xEJN3cYmM=
Subject key identifier: A9:40:B0:AE:29:1E:A9:6E:08:99:89:8E:D2:D2:99:B0:A7:CA:75:C0
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 019893A47535C0A039BDB819B017F345ED0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 1033
Signing time: Sun 10 Aug 2025 11:01:25 +0000
Manifest this update: Sun 10 Aug 2025 11:01:25 +0000
Manifest next update: Mon 11 Aug 2025 11:01:25 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: zT5AKavh8QkqNJfcbHR45FWSarp22QMYhNjC7S7m5IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:75:35:c0:a0:39:bd:b8:19:b0:17:f3:45:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Aug 10 11:01:25 2025 GMT
Not After : Aug 11 11:01:25 2025 GMT
Subject: CN=a940b0ae291ea96e0899898ed2d299b0a7ca75c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:f5:b4:95:18:27:ac:ac:de:ef:24:ac:94:
b4:1d:29:92:21:f8:2b:39:95:ed:a0:69:40:15:7f:
f9:bc:97:d7:9f:71:94:38:ca:55:af:8e:55:94:92:
62:af:71:72:7b:15:d6:a6:3c:f3:12:f6:4e:b2:28:
e0:22:b1:84:57:39:75:0b:2c:ab:1b:6f:e8:2d:42:
36:d3:20:83:27:40:8f:3b:ee:a7:8a:d7:a9:c7:14:
04:6c:de:3a:b3:53:4e:e0:d4:25:be:a3:58:7f:11:
c2:a9:4a:49:b6:8b:00:9b:c2:6a:92:2a:cd:c9:47:
e5:a7:50:52:68:aa:f1:af:57:d0:9c:a6:5b:d9:c0:
e8:a6:cf:a7:54:bb:0d:9c:95:92:cc:f2:cb:f9:b2:
37:98:d0:8a:91:64:0d:70:2f:1d:61:63:a9:e6:d2:
86:fe:86:f9:5d:4d:b7:68:f2:ec:e0:96:1d:9f:d1:
8a:04:64:8f:36:fe:b4:dc:e2:66:7d:c9:55:c0:19:
36:be:b3:5d:95:eb:fe:54:9d:83:82:df:00:51:5b:
1a:93:a6:d8:07:54:78:86:d4:a7:4c:dd:c8:b9:47:
51:46:90:03:cd:39:df:09:ed:5c:21:d1:5a:96:b8:
4d:9d:b9:ba:43:4d:fb:11:81:38:3c:05:9c:0a:ba:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:40:B0:AE:29:1E:A9:6E:08:99:89:8E:D2:D2:99:B0:A7:CA:75:C0
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:62:d0:60:d1:b1:00:22:d0:4d:f6:97:8b:75:8b:1f:c0:b4:
dd:6e:41:36:44:f1:02:61:12:ae:b3:e3:f5:c3:3d:a6:aa:9c:
58:2d:82:de:45:57:39:59:4a:b0:8b:6d:4c:e6:be:a5:ae:31:
22:b8:30:05:8c:25:fa:34:d5:49:e6:f3:45:0e:23:7c:8d:cd:
1e:8d:0a:46:f9:62:ca:8c:68:68:00:b8:5b:fb:cc:d0:df:8b:
82:b2:39:d0:08:4f:92:78:6d:32:90:7a:b0:b1:2b:c0:8a:ea:
4d:12:b3:6f:27:30:58:4e:ef:61:10:6e:35:d7:43:0a:56:d0:
7b:1d:c0:8f:84:db:57:cd:bf:93:b6:da:2a:75:e0:97:96:3f:
4a:a9:35:db:5d:06:a9:0c:de:de:f6:7d:2c:a8:5f:53:67:dc:
fd:65:8e:b9:9b:d6:ac:14:cf:eb:da:b6:7d:b9:9f:7a:40:88:
f2:89:68:01:2f:3f:d2:76:19:ad:5d:6d:bf:34:1e:e2:db:b9:
d0:b3:cd:80:3f:9b:24:9b:6c:97:3a:73:a2:a1:a9:00:85:c4:
3a:b8:39:f3:35:a0:b6:1d:ec:6d:b3:19:c2:99:aa:e7:ff:b0:
3e:8f:3e:02:9f:68:5f:ee:a3:2c:c3:94:80:14:71:79:72:1e:
2f:d7:51:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:42:51 2025 by rpki-client