Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: d/6WqDmwCiVlE2Hgcmsi3QL6by/jhbqt+FLhq5JSgXw=
Subject key identifier: 0F:D0:4E:CD:C5:B7:86:E5:9B:3B:31:03:9F:DB:89:A9:AC:01:65:EF
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 019873E2C7A7F674AB1B5AB42774B03F2C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 02FA
Signing time: Mon 04 Aug 2025 07:01:38 +0000
Manifest this update: Mon 04 Aug 2025 07:01:38 +0000
Manifest next update: Tue 05 Aug 2025 07:01:38 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: R+bZrYfvNT/d+PrdunvJ2vM5W3Zf5ydt7t6Zw68kLxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:c7:a7:f6:74:ab:1b:5a:b4:27:74:b0:3f:2c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Aug 4 07:01:38 2025 GMT
Not After : Aug 5 07:01:38 2025 GMT
Subject: CN=0fd04ecdc5b786e59b3b31039fdb89a9ac0165ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:41:95:01:00:f4:23:70:95:97:20:3e:11:
3c:73:4a:7e:e7:6d:f6:90:04:03:b7:24:0a:34:14:
52:b3:9f:aa:33:80:62:1e:7a:5d:fd:aa:7f:f6:f3:
ae:d3:38:81:42:1d:71:dc:ed:e9:0a:b3:52:8c:13:
d5:1c:22:f3:08:6c:0d:52:5b:00:83:0d:30:fd:cc:
ac:0a:fb:aa:46:99:81:e1:b7:f7:e2:80:bc:5e:20:
09:4b:2c:a3:d7:5e:24:4a:3e:29:75:67:bc:e4:e4:
be:59:56:34:19:ff:f0:38:6f:4a:7e:41:31:53:16:
de:56:65:35:17:01:bb:f6:3e:01:8b:1e:89:ba:60:
91:00:dc:45:00:40:87:d2:bf:a9:be:cf:5a:22:62:
79:4a:dc:f9:02:c9:fd:d3:2d:19:66:65:0e:1b:4a:
7b:01:0e:a4:8c:31:19:62:c8:9c:60:28:26:24:bc:
6f:7e:f9:c2:2d:2c:b5:b4:a5:6c:67:23:95:8e:0c:
98:30:3f:86:eb:a0:68:e6:02:f0:49:32:d2:1e:61:
04:32:17:aa:49:62:21:4f:03:62:a9:70:a5:ed:8c:
8a:ed:be:ff:d4:00:7d:73:5d:46:39:39:07:43:52:
f2:cc:03:26:fe:c8:7d:e4:bb:33:07:70:bb:20:8d:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:4E:CD:C5:B7:86:E5:9B:3B:31:03:9F:DB:89:A9:AC:01:65:EF
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:03:df:61:b9:a0:99:35:b0:da:aa:d9:ba:0f:76:96:07:32:
97:39:55:ae:72:15:e0:55:86:22:e3:fb:96:e0:af:4a:05:b6:
e1:50:4b:e8:6f:8d:69:f2:17:b4:6b:d2:8a:06:e1:c7:e3:bd:
79:eb:c9:f3:32:30:2d:a8:b3:99:79:f8:57:2e:f2:f8:69:eb:
73:e1:4b:6f:53:d2:a1:93:a9:95:2d:10:45:c1:9f:b3:f4:1a:
11:c9:af:a0:6e:8c:65:d9:e4:08:c4:03:05:9f:1d:f9:e3:3b:
85:2d:da:2a:59:26:0b:81:c7:0b:9a:31:8b:ca:d4:1d:1e:a3:
7d:fa:b2:d8:54:6f:ee:1f:f4:c5:c4:72:f1:7c:3e:17:cb:09:
55:80:eb:05:73:76:77:76:e8:bd:f0:92:e7:57:46:c2:ae:22:
20:d1:7a:22:ad:52:02:9a:3b:0e:8b:25:2d:e7:ca:35:73:18:
ef:b3:33:65:c9:85:39:ea:ce:52:cd:58:e1:01:c8:fa:49:a6:
74:39:64:09:46:ed:dd:43:76:80:b2:d3:5d:27:6b:b7:62:2a:
5a:45:3a:98:22:98:be:f2:9a:52:9b:b8:64:71:1c:ec:8e:5e:
24:b3:84:b8:2b:1d:ad:61:96:f0:c7:61:52:e8:d4:0c:93:36:
28:b1:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:46 2025 by rpki-client