Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
File: nTW9eP7OI2XlsT9SOIfS2NakU_k.mft (raw, json)
Hash identifier: krbHZ5fY1bqEizYraci3z9HFYkQlxm2GyYiCceGQXdI=
Subject key identifier: 0C:78:AB:84:A5:B4:C3:A7:E1:BA:17:74:D8:16:D3:74:68:ED:1B:C5
Authority key identifier: 9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
Certificate issuer: /CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Certificate serial: 019873747BCE387E1E8796BF84A6E358079A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
Manifest number: 39
Signing time: Mon 04 Aug 2025 05:01:10 +0000
Manifest this update: Mon 04 Aug 2025 05:01:10 +0000
Manifest next update: Tue 05 Aug 2025 05:01:10 +0000
Files and hashes: 1: nTW9eP7OI2XlsT9SOIfS2NakU_k.crl (hash: qH+r2JIYcHFfN/JW/TVe1uSu+hpnEwW+0siStwaOrCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:7b:ce:38:7e:1e:87:96:bf:84:a6:e3:58:07:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Validity
Not Before: Aug 4 05:01:10 2025 GMT
Not After : Aug 5 05:01:10 2025 GMT
Subject: CN=0c78ab84a5b4c3a7e1ba1774d816d37468ed1bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:3b:bf:5a:79:55:ed:94:6c:ec:2d:8c:83:
c7:4e:ac:fa:10:37:e7:dc:ca:af:bb:89:c4:c8:86:
3f:b1:0a:bc:ab:99:4b:a7:14:2a:99:e3:4f:13:3d:
57:b0:b6:9f:fb:4f:2b:69:8b:c5:e5:c6:69:0b:ab:
4e:2d:f8:88:31:08:fd:a3:bb:ff:b8:93:ac:72:73:
06:da:c3:60:43:da:58:14:85:8e:6b:8b:2a:19:a1:
e4:96:b1:83:8d:d0:de:82:cc:71:e4:97:24:b8:e9:
d9:74:95:7a:02:73:f4:05:bb:a3:03:d9:3b:9f:a8:
b6:08:2b:49:3d:64:cf:57:7e:01:3b:42:7e:8e:63:
ac:8d:b3:79:85:91:a0:43:c5:c8:bf:2f:70:5e:34:
1e:e8:8c:04:1a:c4:0f:02:f5:43:a9:fa:22:9c:8d:
1d:86:ae:0b:41:bd:22:5b:58:e7:30:41:1d:6f:e1:
12:8e:e4:f2:74:c1:3d:db:f1:40:ee:0e:e5:6b:a4:
2d:29:3f:50:7a:2b:88:f4:77:1b:68:f7:a3:e9:cf:
a8:9b:a3:f0:49:d7:fa:c8:96:3c:df:1f:3f:c8:36:
32:ec:79:74:ef:e1:0f:7a:f7:65:67:cb:da:72:68:
e0:63:93:2e:68:c5:02:48:15:2a:dd:73:5f:b5:2e:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:78:AB:84:A5:B4:C3:A7:E1:BA:17:74:D8:16:D3:74:68:ED:1B:C5
X509v3 Authority Key Identifier:
keyid:9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:f7:1a:69:e2:ca:b4:15:ef:26:8d:03:62:2e:2e:e3:33:
39:a6:fe:7b:93:54:43:63:4b:9e:35:e3:35:07:3e:7c:b6:b2:
ff:db:58:f6:8b:a0:ef:1c:80:50:11:7c:05:86:ec:01:c9:10:
9b:21:28:0f:9a:60:10:d2:cf:2d:46:e9:a6:b8:31:95:b8:42:
f0:6a:61:05:08:3e:20:03:2f:d0:ca:39:f6:0b:18:a0:8d:07:
a7:9f:72:9d:24:88:36:6e:00:9d:d4:ca:11:85:3d:e6:d4:c0:
5a:21:6b:c3:b7:60:31:12:d7:cf:22:fd:6d:9c:8a:fe:66:63:
90:19:df:42:55:17:2f:fe:a9:d4:94:5d:1c:bf:47:50:40:30:
6e:bf:93:eb:13:4a:ca:40:ed:0b:0a:4e:a2:64:62:cd:bf:91:
2d:0e:19:00:e6:d1:eb:87:66:93:bf:29:a3:a7:16:8f:e3:99:
4f:01:d5:a7:dd:c0:2e:ef:4a:04:56:cf:40:d3:cb:86:77:ed:
79:13:61:de:22:1c:61:4b:f0:e6:57:a5:e6:3c:53:2e:62:8a:
d1:54:83:e2:cd:77:19:6f:23:05:fa:a3:24:24:2b:c7:44:cf:
cf:df:15:42:a5:13:4d:c6:b5:1d:a6:b4:67:94:05:b7:f7:83:
2b:bd:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:35 2025 by rpki-client