Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: En5mfXP/p7nwnLxMAOA/4OBwqk+un+ujtaSQYvXI9X4=
Subject key identifier: D1:83:86:B0:80:6C:52:C2:D8:EE:C8:FE:5F:EB:F3:C1:04:D4:EA:6D
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 01987B9D8658D76B8B8246CDE0999CC3D1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 08C9
Signing time: Tue 05 Aug 2025 19:02:57 +0000
Manifest this update: Tue 05 Aug 2025 19:02:57 +0000
Manifest next update: Wed 06 Aug 2025 19:02:57 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: 5MGj+tx808FBxEE7IBruVioXh14IEMimADBHk5n1T3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:86:58:d7:6b:8b:82:46:cd:e0:99:9c:c3:d1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: Aug 5 19:02:57 2025 GMT
Not After : Aug 6 19:02:57 2025 GMT
Subject: CN=d18386b0806c52c2d8eec8fe5febf3c104d4ea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:76:da:9d:a2:b9:2d:c0:9f:0f:ce:97:71:
17:f0:dc:32:e4:5a:33:63:a5:5a:60:d7:83:1c:2d:
82:84:1e:3f:94:d6:7c:3e:4c:55:fd:64:1d:6a:8f:
c2:bf:79:eb:2e:ee:4b:59:e6:42:73:45:40:be:0e:
bf:af:99:01:1e:bd:b1:2b:0d:38:9c:60:a8:58:59:
12:57:49:27:ce:55:66:74:85:c3:f7:6b:2b:09:3b:
54:d8:8f:03:52:67:5f:22:59:a6:f5:42:d5:2b:cc:
ba:75:0c:2f:eb:72:fe:80:82:c7:fa:17:f8:1d:89:
59:f8:01:ea:3e:df:b1:25:78:15:0e:a3:71:75:e7:
00:95:1c:0d:34:a2:a5:8a:a4:fb:98:d8:f8:fc:64:
5a:71:6d:3b:52:ea:2d:48:05:a8:41:0c:31:d7:4e:
70:28:43:c7:39:ed:13:fe:ad:aa:a7:c8:d4:75:c4:
64:fe:e5:cf:19:38:99:ce:33:04:90:2d:b5:66:03:
9d:1a:40:c7:fc:89:3a:02:ea:30:c8:67:e0:7a:5c:
88:4b:64:dd:78:88:5b:24:dd:50:9e:fd:52:cf:20:
47:91:97:f7:49:34:ec:5a:7e:6c:a6:81:1d:40:e0:
8b:28:8f:e4:2c:df:b0:ca:24:24:04:4c:53:34:8b:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:86:B0:80:6C:52:C2:D8:EE:C8:FE:5F:EB:F3:C1:04:D4:EA:6D
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ae:1e:3a:a1:74:21:9b:8e:51:ca:e1:97:55:81:99:3e:34:
d5:03:61:49:af:de:38:90:26:de:bd:94:1d:61:6c:aa:85:02:
5a:3c:c8:b5:16:40:59:b9:91:16:88:09:d1:d0:7e:d7:20:1e:
d9:00:1e:07:a5:b7:2f:5f:ec:de:0e:e2:03:97:a9:a9:55:94:
1c:64:9f:17:4f:41:e4:ca:c7:19:86:e9:0f:d7:3a:ea:dc:e1:
8b:1f:97:fa:5c:c7:a2:ef:5e:3b:fc:da:12:93:e6:82:32:73:
26:ec:46:83:ec:76:3d:29:01:91:51:22:49:70:5a:30:75:75:
43:37:86:ef:fe:48:39:06:91:ff:51:fb:27:38:e6:71:86:ec:
3a:de:09:45:9f:98:93:0c:93:ba:93:28:55:b2:4d:9f:eb:52:
8d:c8:6a:4a:b4:a3:f4:55:25:30:b0:84:fc:3e:92:e7:2f:10:
a7:a1:69:08:70:da:a9:04:ab:c3:43:f5:36:7b:9e:2d:9e:57:
20:ac:ac:42:72:f5:b8:f8:e0:d6:59:1a:dc:f2:ff:09:47:8c:
94:4a:17:46:1a:4e:1e:2c:d1:cb:e1:c5:0f:9a:de:a0:61:6d:
29:2f:75:99:88:bf:0b:e0:e4:24:b7:b1:30:6d:0b:62:32:60:
99:db:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:04 2025 by rpki-client