
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json)
Hash identifier: ACppd4Y14ltnfgZbEX3LiNqylImA8HrSkdDE2qmtGY4=
Subject key identifier: A7:6B:8D:75:E4:E6:FF:F4:78:B8:A2:BB:70:85:18:06:66:97:F0:B8
Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74
Certificate serial: 01988B7D35D0985579A96AD83705210628BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
Manifest number: 0141
Signing time: Fri 08 Aug 2025 21:01:35 +0000
Manifest this update: Fri 08 Aug 2025 21:01:35 +0000
Manifest next update: Sat 09 Aug 2025 21:01:35 +0000
Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: eg+3w2XpatkcGdOF96zL12LL3ScsCJyLeUW1pllK+jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:35:d0:98:55:79:a9:6a:d8:37:05:21:06:28:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74
Validity
Not Before: Aug 8 21:01:35 2025 GMT
Not After : Aug 9 21:01:35 2025 GMT
Subject: CN=a76b8d75e4e6fff478b8a2bb708518066697f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:00:a3:5a:1a:40:c8:8d:37:bb:37:07:4a:
8e:0d:59:07:f9:49:16:b5:24:34:95:bc:90:10:5e:
66:07:a7:22:4b:ae:9d:c1:1b:6e:e6:0b:67:f1:8e:
c5:a2:48:f0:20:09:1f:01:e9:df:09:9d:59:c7:f9:
1f:7a:83:cb:3e:60:34:30:ca:c3:8e:c2:ed:de:92:
4b:18:e5:fc:7d:8e:c1:36:14:3e:9b:ba:9e:bc:cc:
e4:01:56:63:04:2a:61:18:c6:a0:ac:58:54:8b:0c:
35:ed:64:ae:07:25:3d:24:9a:ac:bf:09:40:70:78:
1d:72:58:4c:6f:e0:30:43:17:6a:13:b6:39:88:ef:
89:da:40:82:6d:5a:bf:a5:21:06:09:ff:08:3f:56:
91:54:59:57:84:c2:36:e7:4e:e0:80:06:71:63:3f:
8d:3c:3a:a5:b9:e3:e2:34:f0:07:bf:09:4f:0a:c3:
d4:9d:cc:05:b1:d8:77:d0:bc:95:39:e3:ac:8d:22:
69:23:14:2b:77:ca:8e:aa:04:4e:e8:17:95:68:cf:
97:49:d7:af:45:0a:ee:53:b3:b5:c3:75:a5:11:0a:
b3:92:7b:b9:76:ff:86:03:86:17:e5:b2:a4:ea:19:
6d:68:3e:4f:1c:fb:f6:e1:8b:b9:6d:b8:86:71:00:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:8D:75:E4:E6:FF:F4:78:B8:A2:BB:70:85:18:06:66:97:F0:B8
X509v3 Authority Key Identifier:
keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d9:0c:2c:de:52:fd:44:df:5a:2c:2c:12:65:f6:30:78:cf:
fe:96:df:d5:24:33:10:f9:2a:fb:41:21:4c:63:b6:28:16:a5:
69:ef:ef:3b:77:3d:ac:a8:8c:be:a6:e7:55:c4:b4:94:b4:26:
a0:9a:18:df:61:79:e8:98:9d:d1:aa:95:f9:a9:ce:85:0a:bf:
0a:83:b6:4d:7d:26:46:3c:4f:97:68:6c:cf:89:81:61:18:f3:
84:0e:7e:74:0d:20:52:b5:bb:42:71:5a:34:ac:cf:ea:84:b0:
ca:31:0b:b4:f0:37:16:20:cd:0d:ed:9f:d3:af:ae:41:63:ad:
d3:60:e7:07:a4:fe:30:7a:f3:17:31:c5:1a:56:53:cf:29:45:
b4:33:05:45:c9:b6:98:73:5d:20:0b:d7:d0:47:fe:e3:5c:1a:
3f:d3:ca:e3:3a:94:1f:52:05:f3:dd:e9:68:de:ef:5a:45:fc:
36:01:ef:2f:2d:70:14:44:53:12:27:b5:ca:e8:6f:35:a9:01:
fc:aa:eb:23:33:09:2c:b8:48:27:2e:d4:b0:95:17:97:54:16:
cc:81:0e:4c:61:c6:00:a3:43:d8:46:0e:9a:da:eb:1b:19:e1:
ef:89:97:b4:d1:dd:ab:03:1e:9c:4a:9b:1d:ce:33:45:86:4f:
4f:b4:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:08 2025 by rpki-client