Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: mvkRWenQm/wxOFGc9Jet3lNyCQis2cJEfKC2BKO2koY=
Subject key identifier: E0:A2:22:7E:20:54:FD:F4:13:ED:35:B1:07:F7:CA:20:7E:18:B1:E4
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 019891476E861986B0E0E4BA2B779AC51C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 0523
Signing time: Sun 10 Aug 2025 00:00:34 +0000
Manifest this update: Sun 10 Aug 2025 00:00:34 +0000
Manifest next update: Mon 11 Aug 2025 00:00:34 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: SPrQqedAcaKO4PnsPIGjrCw+11qC5QZmR4pq0K1W+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:6e:86:19:86:b0:e0:e4:ba:2b:77:9a:c5:1c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: Aug 10 00:00:34 2025 GMT
Not After : Aug 11 00:00:34 2025 GMT
Subject: CN=e0a2227e2054fdf413ed35b107f7ca207e18b1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:56:3e:24:9d:99:d3:6d:4e:19:ee:22:2e:
42:50:ba:78:62:3c:92:24:5b:92:07:05:2a:1e:36:
03:18:e2:53:15:28:c5:35:7d:70:7c:34:3c:7c:75:
70:a5:79:cd:c4:e7:fc:d1:2a:81:12:ac:be:5e:9c:
29:4f:49:0e:9e:8d:0c:63:52:e7:99:94:70:f0:3d:
d9:e2:c2:e5:13:4c:41:a1:41:f7:8a:44:4e:15:94:
3d:ff:cf:e3:82:93:48:c8:41:77:93:ab:c5:a1:11:
33:63:fd:9b:f7:94:81:1b:c6:22:87:61:34:24:ec:
ee:a9:2b:35:98:f8:ee:d7:0c:73:bd:13:c2:a1:17:
2d:87:82:97:8e:e2:c0:ae:82:ac:0e:68:26:e8:fb:
b5:e2:73:3a:08:ce:2e:8f:dc:f6:c6:98:ff:ef:15:
0e:cb:4c:15:bc:96:e9:d6:2d:3d:97:38:8c:c8:d8:
eb:03:52:0b:e1:ab:d4:d7:43:af:5d:b1:b4:82:95:
72:b3:45:20:1d:f2:2c:33:01:80:71:55:7e:bf:5b:
24:c2:63:a3:3a:e8:66:6b:ca:07:76:80:84:41:34:
d2:0a:24:c2:1b:2c:96:47:c5:0a:59:90:d0:1d:dd:
d0:81:df:4e:d9:ba:85:23:4e:0b:dd:df:44:b2:a6:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A2:22:7E:20:54:FD:F4:13:ED:35:B1:07:F7:CA:20:7E:18:B1:E4
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:be:b1:36:79:eb:79:3c:b6:9b:ee:60:e9:81:bb:f5:ba:53:
9e:e8:6c:54:16:11:c4:c7:20:36:47:13:fb:02:58:4a:d2:db:
4d:c2:4e:bd:c0:60:6e:f9:e4:05:0e:4c:b4:14:ff:ee:1f:37:
06:13:78:6d:16:e9:36:4e:8b:ca:a0:5a:1e:4b:8f:31:ff:37:
fa:a8:8d:c7:92:dc:63:70:1d:94:4c:49:3a:a3:5a:3e:ed:72:
12:6d:a0:62:c5:db:e3:24:58:f5:cc:a3:22:d0:0c:79:a7:80:
ee:27:e3:cb:f7:5e:ff:17:dd:19:b2:bb:30:8e:df:61:e0:1c:
1e:77:a2:60:e6:39:31:96:b9:f5:ae:5a:b6:85:05:9d:11:d7:
b9:60:7c:16:a2:ac:a2:b0:a5:12:95:a5:dd:37:7f:cb:8f:72:
c0:27:17:d1:06:30:f9:8b:25:25:90:1f:d0:70:22:49:22:54:
2b:0c:72:0a:c2:3e:c7:ae:37:db:69:a6:d1:da:98:2f:0e:ba:
70:2b:09:f0:a2:74:bf:0a:b4:8e:b9:0e:1c:13:f2:0d:ec:f0:
22:26:cc:a7:df:d1:16:a1:67:db:8c:19:c8:5d:9d:c9:77:7f:
c7:6c:45:0c:50:6b:47:06:a5:e4:a7:8a:90:18:dc:23:f0:3c:
49:5d:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:20 2025 by rpki-client