Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: bAnpa03GdwzcnxT5tCj4fcDPm/BcJBgJ+iy0GQo4XV0=
Subject key identifier: 41:45:4F:55:CB:B7:93:A7:8D:0C:5B:F8:FF:CF:47:A4:85:A4:A3:BA
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 01989E5FAEB34FD796169F9E335530FB846C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 07C3
Signing time: Tue 12 Aug 2025 13:02:07 +0000
Manifest this update: Tue 12 Aug 2025 13:02:07 +0000
Manifest next update: Wed 13 Aug 2025 13:02:07 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: RFHA6m9CqrGG3q175B/ahdQILJYHGwDELLTF+aFnHcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:ae:b3:4f:d7:96:16:9f:9e:33:55:30:fb:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Aug 12 13:02:07 2025 GMT
Not After : Aug 13 13:02:07 2025 GMT
Subject: CN=41454f55cbb793a78d0c5bf8ffcf47a485a4a3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:40:28:a1:74:d6:35:36:00:45:60:c6:a4:c0:
74:ba:9e:31:5f:b7:a0:0a:cd:aa:24:7d:f3:fe:c3:
a2:2f:cc:b8:6d:fc:8c:a8:cb:44:d0:6a:90:11:15:
6c:f7:47:d2:80:05:67:4d:34:d5:1a:24:1b:93:8c:
76:7c:c8:8d:f7:f4:57:9f:9f:99:41:be:71:30:cd:
44:ff:fe:d1:cc:d0:4c:94:ec:38:78:d8:eb:ba:a8:
98:10:73:6e:6a:69:b5:52:d7:67:b4:70:1d:23:b8:
08:21:26:64:06:c4:db:86:b6:70:41:92:6a:dc:00:
3c:4b:f7:90:13:ad:0e:38:8c:71:26:e7:77:87:86:
09:f8:42:fe:95:17:05:4e:86:2c:fd:80:ff:31:62:
85:a9:1f:dd:d5:10:7f:98:1f:de:b2:a7:b1:39:5f:
05:84:03:37:d5:0b:6b:33:7c:91:14:f4:c8:0e:5f:
10:bf:d6:c6:f6:0e:0e:05:e6:de:ff:0a:12:b2:e7:
22:6c:ca:25:18:d8:87:69:37:60:96:d1:1c:84:81:
75:49:66:f1:ad:99:0f:51:67:57:4c:0a:de:d0:f2:
e6:aa:10:95:c8:05:5e:9f:3e:63:ea:c6:40:89:ba:
00:c7:e8:4b:19:b0:ec:c1:29:af:d4:94:ad:44:75:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:4F:55:CB:B7:93:A7:8D:0C:5B:F8:FF:CF:47:A4:85:A4:A3:BA
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6f:9b:31:d0:81:e2:86:a6:bc:93:8b:e9:ef:aa:cf:37:13:
7a:d1:da:61:7e:30:3c:4c:f6:cd:b6:48:44:dd:ac:0e:c8:0d:
ab:f6:bd:3f:3e:60:e1:f5:3b:32:6f:84:0b:30:27:74:59:9a:
3f:6a:3e:d8:62:0d:d2:22:66:85:a9:3f:16:5b:09:02:18:df:
0e:e4:be:e9:48:93:4f:80:e9:52:f9:2a:b2:94:61:63:25:6d:
61:d9:89:81:5e:50:e6:02:72:2a:c6:16:1d:47:0d:31:7c:70:
6e:94:c8:1e:09:ea:45:b0:9c:06:9a:1c:12:45:e9:9b:a0:8b:
55:ee:e0:c3:ee:6f:5c:5c:86:1d:3d:44:47:f7:de:d0:5b:ee:
8c:2b:ff:f4:61:2e:b6:38:cc:5e:a9:8f:67:71:e7:f1:df:81:
6a:6e:63:31:48:6e:07:1e:c9:a0:dc:84:ea:4a:55:4f:e6:5b:
e4:6c:49:b2:e8:8b:63:3d:af:13:9a:b7:d9:0b:df:cc:7c:d3:
bd:28:58:0b:5b:31:54:30:72:4f:1b:be:be:44:d9:a8:1d:eb:
69:69:2d:41:8e:bd:b1:da:7e:0b:48:ac:a1:58:47:a1:18:cc:
a0:09:7d:5e:d6:0f:92:67:c3:61:7f:8a:2f:d3:c8:0c:53:1b:
f6:2d:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:44 2025 by rpki-client