Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File: _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier: P8Sa8O7ZtQ0LbIGLEEdt7t+hqC7jvlGdYok+IFUoBpE=
Subject key identifier: 52:9E:FB:36:24:73:9F:98:6C:CD:6C:86:6E:9F:96:28:BC:64:F0:9A
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer: /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial: 01989148727FC2A31FCD749BB8AB4E6B11A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 00:01:40 +0000
Manifest this update: Sun 10 Aug 2025 00:01:40 +0000
Manifest next update: Mon 11 Aug 2025 00:01:40 +0000
Files and hashes: 1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: nqFXLGlXhpOUjM8LoWum1Pohoy9ADIrRQ6R+5FP5rC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:72:7f:c2:a3:1f:cd:74:9b:b8:ab:4e:6b:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Validity
Not Before: Aug 10 00:01:40 2025 GMT
Not After : Aug 11 00:01:40 2025 GMT
Subject: CN=529efb3624739f986ccd6c866e9f9628bc64f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:c1:95:64:05:65:d0:19:50:df:55:e6:c6:
e3:60:0d:12:d1:43:a2:34:27:7c:e7:cc:b0:f0:34:
5a:e5:38:de:c3:2b:29:d7:b2:f1:7a:79:e4:7e:c6:
1e:b1:68:d0:e2:21:4c:b1:b5:fb:67:70:98:d1:2d:
f5:49:48:41:bb:71:ea:d6:5a:36:87:9c:e3:99:5d:
cd:b6:af:88:00:a3:1a:d5:77:03:4a:35:85:f8:be:
c4:f7:2d:40:02:bc:c8:9d:89:5f:dc:e2:b4:23:66:
52:55:39:bf:dd:d8:fa:3a:57:0b:89:47:67:8f:b6:
dd:13:a7:a5:8e:a9:23:fe:85:a3:c2:5e:b6:79:af:
d1:49:ca:57:87:0c:0a:4e:bf:cb:fa:b0:a5:d5:01:
25:4f:31:22:07:b6:ad:b7:25:e7:c4:f9:47:05:7b:
5e:04:1c:70:f6:81:fe:a3:8d:ad:71:01:26:da:0e:
f3:44:f8:17:45:67:16:07:ec:4d:55:64:97:64:b6:
9b:60:43:78:bc:0c:a7:57:e0:52:3d:e0:a7:12:98:
80:d8:49:2a:4f:5e:e8:cd:08:23:a8:99:7f:d0:49:
9c:25:9d:07:e3:af:19:e6:e1:32:19:c7:9a:37:92:
0d:71:70:17:58:82:f2:30:75:16:e4:28:07:28:e2:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9E:FB:36:24:73:9F:98:6C:CD:6C:86:6E:9F:96:28:BC:64:F0:9A
X509v3 Authority Key Identifier:
keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:06:2d:db:fe:a0:6d:ed:3d:8e:f5:de:13:cc:94:66:38:4d:
c6:2e:16:48:ea:48:4b:58:de:26:3a:4d:ad:86:d7:b2:db:b3:
89:9e:a2:5c:bf:d9:4f:a4:00:84:cf:c0:c4:6d:66:64:ff:84:
42:70:7f:a3:de:52:c9:62:07:7e:d9:9a:be:7f:86:40:c6:6a:
9f:aa:30:9f:cd:c3:ab:a2:5a:8f:55:c8:78:d2:91:76:3f:37:
e3:78:ab:e4:9d:ef:d9:62:a2:b1:ec:3b:2d:b6:65:65:df:7b:
95:38:81:66:07:41:33:b1:16:65:5b:8c:89:54:fb:75:3c:40:
0f:c1:38:a8:db:b8:cc:91:f7:04:7e:6b:2d:68:95:0a:aa:92:
7b:82:6e:25:1d:e4:06:95:ae:d0:12:85:ab:3f:de:3f:41:23:
51:d2:05:aa:dd:c3:d3:6d:a9:3b:56:79:b7:6f:ef:7f:de:e8:
43:7b:32:e4:4f:0b:63:69:f4:11:84:5d:0c:e3:86:19:ad:d4:
ca:c3:c7:1b:fc:52:da:43:24:7f:03:18:a7:83:e2:96:ee:75:
86:54:c8:ba:a0:d9:f6:73:a7:dd:68:96:2c:8a:41:8c:00:d6:
fb:66:af:38:3c:e8:1d:c9:68:b5:70:2c:13:1c:cd:23:96:c7:
c3:59:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:49 2025 by rpki-client