Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File: x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier: YUMA7VaJnLIIQj+tnZJEhf6J8egzhLhtXPhiZ56mi0A=
Subject key identifier: 36:B4:B4:DB:35:48:6B:0F:17:00:09:B7:3E:9A:C9:4C:45:F6:E6:16
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer: /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial: 019873E3929C46EDF4F39BE665CD443904FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number: CD
Signing time: Mon 04 Aug 2025 07:02:30 +0000
Manifest this update: Mon 04 Aug 2025 07:02:30 +0000
Manifest next update: Tue 05 Aug 2025 07:02:30 +0000
Files and hashes: 1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: zMe3K9wGdnyZn12de3xj1OAryrImVzIzLyBwCS1d2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:92:9c:46:ed:f4:f3:9b:e6:65:cd:44:39:04:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Validity
Not Before: Aug 4 07:02:30 2025 GMT
Not After : Aug 5 07:02:30 2025 GMT
Subject: CN=36b4b4db35486b0f170009b73e9ac94c45f6e616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:98:a8:82:fc:98:23:ca:30:9c:0d:dc:83:
22:b1:83:a6:64:9e:e6:bd:6f:b6:1e:d9:ab:45:2c:
0d:45:1d:b2:66:3d:12:8a:11:15:ec:2f:ff:cd:33:
59:1b:1c:61:48:c8:af:81:63:f0:07:43:e2:00:e6:
49:2b:d0:96:74:a9:83:3a:88:c2:9c:47:f0:37:82:
65:e2:7d:29:b7:ca:85:5e:ad:5a:de:e9:12:c6:ba:
31:ac:46:b4:e1:c4:51:4e:69:d7:7f:7c:43:15:df:
6a:0d:16:82:df:f3:b6:a8:66:e3:d7:39:a1:f3:31:
12:b9:c5:e5:a0:9b:12:f7:54:a3:c7:86:86:27:c2:
6a:06:f6:4a:5f:cc:c3:8f:bf:2b:81:fa:71:e7:e0:
81:f0:86:64:01:56:48:2e:6d:09:af:b4:56:44:59:
e9:90:b2:1c:47:1e:51:b6:2f:ed:c1:35:5e:7a:fb:
4b:5e:3a:0b:4a:1f:f0:a8:64:32:6f:07:dc:30:ec:
8f:8e:1d:ee:3e:85:73:83:91:c9:31:de:0a:72:cd:
73:a0:30:10:9e:f9:a3:2e:bf:46:28:52:c3:7d:d9:
e2:96:ae:f0:a4:87:50:69:98:d2:42:e9:f1:95:2d:
a6:fd:ee:25:ce:98:01:74:74:e8:d5:1a:32:26:70:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:B4:DB:35:48:6B:0F:17:00:09:B7:3E:9A:C9:4C:45:F6:E6:16
X509v3 Authority Key Identifier:
keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2a:13:6d:ba:5e:47:83:f0:32:ee:de:fc:4c:88:00:b2:71:
45:5a:fd:c0:b0:6a:99:a7:e5:5c:9a:31:01:b6:c4:e2:b1:dc:
9e:04:8a:f7:f3:bd:93:d7:02:76:2b:26:42:07:0c:7a:e6:83:
48:d2:c4:d4:f4:3d:fa:85:5c:9e:f2:1d:8b:32:a2:dc:cb:61:
5d:b5:72:d8:e0:1c:b1:15:42:05:39:8d:61:17:24:55:a3:5a:
4d:3e:f5:38:99:b8:e3:0d:4a:e9:93:c3:7d:ee:88:66:cb:a8:
47:97:9a:b4:6d:61:3b:dc:80:5d:f5:8b:1a:d6:9a:8d:a6:fa:
92:9d:05:09:68:77:55:19:a9:59:53:10:4b:4d:db:86:98:b3:
b3:98:5d:43:93:5a:4a:99:a9:8b:1f:2d:70:c5:fe:d9:5f:05:
a1:19:61:fc:64:e2:85:33:28:00:46:87:ba:84:a9:e3:c6:53:
e5:57:71:65:17:39:b1:ea:d1:50:46:71:37:0c:2e:84:f1:f5:
de:3f:05:a1:99:38:8f:93:09:71:81:e0:52:02:0b:ee:b7:94:
05:9e:20:e7:c1:89:36:08:15:7c:94:4a:21:cd:b2:8f:c7:e1:
0c:20:83:da:74:ff:af:92:5e:7a:63:8a:36:47:82:b1:44:34:
75:ad:d4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:46 2025 by rpki-client