Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: RbTzhxdWy7pApr5CkiR0jJmHIb9y5M1gzsVcg5tnUzI=
Subject key identifier: 7B:1D:6F:01:A8:55:75:A1:BE:74:00:00:0D:67:B3:78:34:9D:6E:04
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 0198850C31F943D43037B9AAA52F5C50279B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 3B
Signing time: Thu 07 Aug 2025 15:00:25 +0000
Manifest this update: Thu 07 Aug 2025 15:00:25 +0000
Manifest next update: Fri 08 Aug 2025 15:00:25 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: vXaoyZqSn79uZMDvCfNuac2+VyIYFCkp1VnsAxwJKVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:0c:31:f9:43:d4:30:37:b9:aa:a5:2f:5c:50:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Aug 7 15:00:25 2025 GMT
Not After : Aug 8 15:00:25 2025 GMT
Subject: CN=7b1d6f01a85575a1be7400000d67b378349d6e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:5a:20:22:2c:4c:04:a0:a5:ef:a6:92:0b:
96:88:a1:1e:9d:ac:34:8b:9b:6b:07:ff:ec:d3:6d:
d3:11:79:b0:69:bc:ea:2b:eb:c8:e4:40:2a:6c:31:
42:4a:87:e9:51:1b:f9:84:36:f8:e5:99:ac:3b:92:
fd:24:fa:a8:14:46:5e:95:6e:a6:11:1d:cb:6a:69:
b1:87:91:06:0d:1c:ee:a2:fb:5d:49:40:86:8e:e3:
4f:d4:4b:69:70:b7:f6:43:24:49:0f:bc:2f:73:4b:
fd:1e:8c:90:f0:7e:b8:18:57:1f:cf:82:46:e6:45:
75:ac:cb:72:fa:4d:71:5f:cb:38:98:b6:1c:94:37:
75:30:91:26:08:40:40:56:ac:f2:fa:a8:93:4c:12:
45:e1:e3:c5:5e:08:f2:20:a5:ac:a9:c4:40:83:1e:
54:fc:4e:67:70:00:82:8a:f2:ac:c5:d8:99:e3:8c:
82:78:30:2b:14:c2:4f:b1:60:34:8c:44:94:7f:bf:
ac:95:50:c6:c2:c4:ce:90:4f:a8:10:ca:5b:0a:88:
67:9e:05:a2:ec:b9:fd:e3:42:1c:9f:31:f5:10:11:
7d:9b:86:fd:1d:66:5f:70:c2:3a:0a:cb:dd:74:8a:
61:50:26:6f:1e:fe:30:f9:a9:db:d2:d8:0f:d5:7e:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1D:6F:01:A8:55:75:A1:BE:74:00:00:0D:67:B3:78:34:9D:6E:04
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:f8:de:43:0f:87:09:93:03:3e:70:a2:73:e7:08:20:bd:
f6:2f:0c:d0:69:8c:23:09:20:00:d4:86:7e:a1:50:f8:bd:e3:
af:d1:3b:e2:cd:41:9f:53:cd:36:45:c9:a9:fb:07:e0:3f:76:
4d:5e:0f:e3:31:df:07:c9:50:e8:f3:81:ea:7a:a9:87:19:ef:
43:5c:fd:05:5e:72:50:50:0c:75:78:52:d6:88:01:f2:00:d7:
a5:e1:cb:d6:61:32:fd:31:70:06:d3:70:93:7c:c0:42:41:63:
ec:08:0c:03:3b:72:85:a4:a8:ea:06:e0:9e:c5:c6:88:7a:75:
80:bb:ce:06:a4:2c:57:69:6c:8d:cc:db:f9:0b:a6:dc:ee:25:
8b:c1:dd:7e:41:64:f4:5f:66:cf:8b:3f:6c:cd:39:cc:5f:4b:
2c:e1:0e:19:7f:e7:e1:99:d9:c9:a6:0a:ae:94:d1:4b:d5:bf:
56:6e:a8:23:ef:19:64:d1:51:97:38:96:45:ea:ec:b8:a9:20:
aa:a1:fe:e1:10:f1:61:0d:23:f0:92:74:40:5a:f0:b0:51:14:
3d:7e:35:c1:5e:b2:78:54:08:69:b2:e9:ac:f3:f2:ec:0d:71:
79:70:44:0d:cb:fe:f8:20:79:50:50:9d:fa:2c:37:e9:53:0e:
ce:f7:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:02 2025 by rpki-client