Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: FQT7R4yhOyJoppmNIHGXqLtnfORpSAftGNOCCx+DsRs=
Subject key identifier: 39:C8:31:E6:8B:89:BD:4B:FB:06:06:2F:63:69:76:46:9D:9B:6E:8B
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 01989F3A6DA74A2B1E6AE92A4ECBB83F7B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 17:01:03 +0000
Manifest this update: Tue 12 Aug 2025 17:01:03 +0000
Manifest next update: Wed 13 Aug 2025 17:01:03 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: BKiOqTkWpZuTqOygSS3LVlbRzhygVu4z4iNHKsEg1Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:6d:a7:4a:2b:1e:6a:e9:2a:4e:cb:b8:3f:7b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: Aug 12 17:01:03 2025 GMT
Not After : Aug 13 17:01:03 2025 GMT
Subject: CN=39c831e68b89bd4bfb06062f636976469d9b6e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:81:53:eb:7b:1f:39:50:d3:36:5c:22:c0:
41:be:d1:74:5d:bb:53:74:4e:06:6d:cf:78:2c:45:
6b:61:e4:3e:97:47:dd:92:93:d1:2a:9a:e2:71:40:
d1:b1:6c:c6:07:29:ca:8a:30:80:dd:94:1c:f9:e4:
48:5e:98:a7:46:ee:af:6e:f4:b7:30:4d:dc:a6:c4:
84:6b:d7:eb:30:92:5e:93:51:23:cc:f6:49:a7:7e:
5d:68:74:c9:ec:e5:0f:3a:97:47:18:14:88:9b:6f:
8e:11:4f:23:b5:49:9a:9b:77:c7:5e:55:a5:88:2c:
17:e1:de:2b:60:bb:c0:1c:05:8c:2b:70:81:db:c5:
e2:36:25:35:f1:c0:3e:b4:90:f9:57:f7:e4:4b:d4:
55:1b:68:29:fe:6f:3a:c6:82:5b:a0:3f:44:ce:de:
70:19:07:50:9e:c7:36:ee:a7:c9:14:f5:8f:ed:8c:
c3:1c:ea:31:ff:f8:02:b2:23:1a:32:cb:a9:b9:73:
78:5b:70:85:41:11:35:f9:8d:0f:7a:d8:2f:b5:f6:
3d:21:ba:9b:6e:fe:ab:b2:c0:69:8e:3e:ce:65:19:
e9:57:45:c4:13:4c:ef:f0:40:e0:d1:62:5a:86:a5:
7e:d9:fd:20:79:5c:c7:f9:df:a3:ef:7c:5d:3d:ad:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:31:E6:8B:89:BD:4B:FB:06:06:2F:63:69:76:46:9D:9B:6E:8B
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c5:0a:02:ca:0f:4b:7d:22:6c:4c:3e:8e:81:7b:1c:8f:b7:
05:26:6e:d0:33:c6:77:87:ff:e5:c6:7b:ab:54:bf:0c:cd:14:
9b:23:bc:1b:05:f8:ef:30:1c:fd:80:d9:fc:8d:31:b9:fb:23:
c5:de:a0:44:e1:c6:18:49:76:73:75:81:76:f6:91:0f:38:7b:
7e:4f:c0:00:f3:d6:c8:a4:be:9f:7f:3b:ed:12:85:9a:14:26:
7d:af:94:1d:4b:ce:10:94:8d:14:33:c9:89:56:8b:d1:3f:21:
c2:46:44:cf:c6:37:6e:e1:8c:4a:c5:d2:9e:a1:bd:45:30:fb:
91:63:a7:96:64:ce:89:d3:4b:42:2a:81:dd:50:f5:98:d0:04:
64:3e:4c:54:9a:e9:4f:1b:b2:b0:16:ab:c1:59:88:bf:9c:69:
a1:ee:f3:24:47:a7:c5:c0:36:f9:98:ca:97:97:db:47:2b:b7:
09:d4:9c:73:3d:15:e0:c3:d2:c6:3b:3b:16:08:ac:24:46:d4:
62:1f:f3:d8:1b:17:70:2f:32:21:12:2f:4f:c4:59:a6:73:10:
1d:f8:0f:e3:5d:cb:ca:63:31:26:d9:e1:cf:5f:b2:8f:41:a4:
8a:57:40:fb:f7:18:8a:45:ca:5d:75:e0:63:64:99:4d:a9:3b:
58:5f:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:15:23 2025 by rpki-client