Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json)
Hash identifier: 1rbJESCQvLgDcIXaOxDa8nnfZuGq1wQaxznHfJUNVVI=
Subject key identifier: D6:41:B0:97:07:47:FF:8F:BD:5C:15:0C:83:5B:5B:FB:35:69:7B:9F
Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Certificate serial: 019896001352AD83C6A13162E7BB09584791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
Manifest number: 022A
Signing time: Sun 10 Aug 2025 22:00:44 +0000
Manifest this update: Sun 10 Aug 2025 22:00:44 +0000
Manifest next update: Mon 11 Aug 2025 22:00:44 +0000
Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: 17RkYeY6bQt5xLYvyGAuIpB/BOjvdqp0+hT0qYqTDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:13:52:ad:83:c6:a1:31:62:e7:bb:09:58:47:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Validity
Not Before: Aug 10 22:00:44 2025 GMT
Not After : Aug 11 22:00:44 2025 GMT
Subject: CN=d641b0970747ff8fbd5c150c835b5bfb35697b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:4a:a0:c3:4a:1d:76:91:af:6d:42:68:49:
09:5e:22:a0:21:34:c6:d3:20:ef:b9:a3:f5:81:95:
e9:54:9d:a1:fe:9b:9b:fb:24:6f:f6:ca:51:ed:01:
4e:9d:e5:eb:47:90:79:f8:05:23:fb:f1:35:50:78:
86:5d:55:1a:be:5c:f1:3c:a6:b5:30:98:9b:46:6d:
f3:0d:03:da:f0:af:95:c0:2d:6b:a2:90:d1:6e:e9:
82:46:f3:c5:33:03:df:09:1d:a6:f4:d4:d9:ef:ab:
59:da:21:03:94:3d:f4:a8:40:f9:5f:4d:3d:fb:9b:
5d:2c:dd:02:d4:72:83:01:83:7d:03:64:8a:10:ba:
30:fb:7f:ba:b8:2d:06:2e:a3:91:38:fb:ed:36:be:
47:7b:a6:37:0a:91:3a:53:00:38:da:8d:10:39:07:
e6:f5:01:d0:f2:2d:f3:71:6f:16:78:0e:ce:56:19:
0b:36:b7:6c:41:ee:06:d0:46:87:3c:1b:65:b2:35:
2d:d9:b2:77:e5:c7:62:c4:a9:c0:8b:86:db:60:e1:
27:d7:52:0a:94:33:60:d0:22:ec:1a:d6:98:fc:fe:
b7:d5:a9:72:b9:cd:fd:71:94:7d:79:30:29:80:33:
f2:5a:d6:ef:8c:62:9a:e2:43:69:c9:25:97:c1:de:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:41:B0:97:07:47:FF:8F:BD:5C:15:0C:83:5B:5B:FB:35:69:7B:9F
X509v3 Authority Key Identifier:
keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6b:88:24:a0:5f:9b:3a:5b:58:d9:4d:54:79:cd:6c:3e:a0:
84:f8:0b:3f:20:f8:83:7f:39:7a:be:0b:7c:fd:34:4d:a8:4d:
94:64:49:dd:ff:b4:4c:ee:a3:26:c9:9d:2f:d2:f1:2f:b2:38:
b0:36:a2:14:b0:c1:04:13:bb:de:84:21:b7:d1:99:a7:53:41:
8b:4a:dc:b6:11:f2:93:e7:5f:ac:0b:de:e8:74:8f:f7:e4:bf:
5c:63:cd:ce:0e:48:1c:f7:dd:45:5f:be:1a:68:c9:47:4d:f1:
ae:59:ce:47:66:6c:2f:1a:2c:f1:33:34:d9:26:94:0d:88:6d:
9f:bf:f5:a0:5f:a1:c4:80:9b:ef:bd:dc:39:e3:75:08:89:90:
45:fa:ed:32:aa:37:2c:e4:c9:88:b4:0d:35:fe:d3:bf:be:64:
cc:57:5c:2e:72:96:e0:54:c4:90:19:d0:31:66:aa:f2:0c:9a:
91:9f:bc:3e:fb:86:34:c5:1f:6f:5d:64:0c:91:35:8d:72:ae:
a1:4a:a9:4c:d6:c6:f8:7a:c0:c1:6d:5e:cd:d2:13:ec:e8:f7:
9d:24:79:cc:06:bf:25:7a:2c:75:b7:82:ad:96:fb:4d:d0:09:
d3:e2:0b:16:4d:e8:08:fa:48:ed:56:ab:8a:de:ea:49:f4:3b:
b5:08:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:14:08 2025 by rpki-client