Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
File: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft (raw, json)
Hash identifier: L0pJ1WZ/Xe1cpmsZLnjp7socQEx1ywhceUQm/5rxDgg=
Subject key identifier: 74:11:14:A1:63:B8:5C:57:9B:A7:18:AF:B1:5D:D7:38:6A:2D:76:5E
Authority key identifier: 9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
Certificate issuer: /CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
Certificate serial: 0198936D062E9CAC47F1C388C9F4A92F15E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
Manifest number: 070C
Signing time: Sun 10 Aug 2025 10:00:52 +0000
Manifest this update: Sun 10 Aug 2025 10:00:52 +0000
Manifest next update: Mon 11 Aug 2025 10:00:52 +0000
Files and hashes: 1: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl (hash: yKdfyNDWL69u3puBuHBfiDcaeuCrzrLPH7h2uU0gywM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:06:2e:9c:ac:47:f1:c3:88:c9:f4:a9:2f:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
Validity
Not Before: Aug 10 10:00:52 2025 GMT
Not After : Aug 11 10:00:52 2025 GMT
Subject: CN=741114a163b85c579ba718afb15dd7386a2d765e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:fc:85:e9:03:c5:6f:8d:b6:08:de:5a:4c:
2b:c7:54:37:38:6a:34:0e:27:b8:ed:0f:a6:af:d3:
39:3f:6f:1a:26:91:02:7b:ac:87:39:11:ec:3f:fb:
4f:a4:2a:b4:fc:f9:65:99:95:78:d9:4a:20:aa:0d:
fd:50:9e:98:58:c8:a6:2f:17:63:d9:86:7e:13:31:
20:01:29:ce:e6:0f:a7:51:d4:25:9f:c0:47:bb:fc:
bb:a7:23:d7:39:7c:eb:5b:8a:2b:5a:56:fc:65:f2:
f9:a6:ce:06:ad:96:30:1a:c7:28:0c:53:f3:b1:df:
2d:a7:a6:79:9b:af:3d:0c:e9:26:e7:79:12:5c:17:
e0:d0:aa:d7:3d:a0:50:e5:e5:2b:68:6a:ec:29:ad:
0e:3d:67:97:f3:2b:a9:de:6f:d1:49:d6:ac:8a:3c:
b1:6f:b6:4c:7e:6d:34:c4:9e:54:83:ac:a8:11:f1:
db:b7:52:51:95:39:bd:5d:ba:a4:e4:75:e0:75:bd:
02:30:6f:5c:3f:67:54:8f:1f:98:73:19:35:90:0b:
11:b1:a2:2c:91:6e:d9:b8:48:4e:5d:c3:13:d9:44:
43:4a:4a:c3:06:bb:20:0e:8a:d3:b7:38:73:f1:5c:
15:d1:9f:df:5e:4f:27:e8:24:ba:e3:e1:db:0d:a5:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:14:A1:63:B8:5C:57:9B:A7:18:AF:B1:5D:D7:38:6A:2D:76:5E
X509v3 Authority Key Identifier:
keyid:9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:48:04:19:d7:d3:9e:d4:d3:c0:5f:ae:3f:cf:a9:a8:9e:7b:
ce:d4:ca:86:ef:1e:8d:e9:04:6b:76:93:1a:2d:b9:59:e5:74:
e4:99:08:31:96:34:64:36:f7:69:9e:94:28:7c:e3:ab:21:c0:
ea:3f:a5:c4:3d:32:bc:77:62:c6:57:37:d4:98:5c:e6:1b:c6:
dd:9f:ec:06:5b:20:75:d1:63:52:2a:35:af:a9:3c:6a:fb:25:
32:b8:e9:29:03:be:37:ce:0e:91:a7:2d:3f:9d:32:13:f3:af:
ef:ed:1a:18:b4:28:6e:f0:9f:d1:6e:c2:c6:1d:a8:ec:7e:19:
14:91:25:d7:8a:15:ca:55:55:e0:79:01:0f:80:e0:3d:86:d8:
83:e7:7c:72:3a:78:7c:3d:9a:67:7d:2f:a8:2c:e5:e1:76:51:
6c:57:f2:38:fa:98:b2:0d:95:9f:52:48:26:60:94:87:a6:95:
c2:25:a0:1f:c9:87:f7:e2:cb:ac:82:bb:62:80:42:0c:5d:4a:
f2:90:03:71:15:83:09:5a:f7:88:9c:8a:08:85:30:dc:ba:ff:
9b:c5:da:c4:3a:f1:f2:2f:f3:73:1a:bc:e3:b0:68:62:96:fa:
8e:9f:a1:7e:8d:ca:67:73:6b:19:f9:f8:9e:b0:3b:b2:87:d1:
73:eb:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:47:02 2025 by rpki-client