Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier: tLubiGrVSfCOMC9N+A3Erfk9ebFM+RdTHc9eaOsvjyo=
Subject key identifier: 6B:A6:25:34:3D:08:88:B8:9E:45:74:91:2E:BD:8A:3F:AD:32:EE:4B
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial: 019883554A8D04F65467BFEAC8036CAD2716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number: 071B
Signing time: Thu 07 Aug 2025 07:01:01 +0000
Manifest this update: Thu 07 Aug 2025 07:01:01 +0000
Manifest next update: Fri 08 Aug 2025 07:01:01 +0000
Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: qrh61AUt1uSZwkcWbyzYiS2/zHIzpnPETV8BDLdStsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:4a:8d:04:f6:54:67:bf:ea:c8:03:6c:ad:27:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Validity
Not Before: Aug 7 07:01:01 2025 GMT
Not After : Aug 8 07:01:01 2025 GMT
Subject: CN=6ba625343d0888b89e4574912ebd8a3fad32ee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:8c:e1:53:ad:3b:f8:c1:76:a9:45:7a:5c:
90:51:08:f4:67:01:e3:fe:d7:28:80:c9:8f:df:85:
4c:b9:9d:68:f8:0b:4a:ef:a4:a4:19:25:eb:da:42:
bb:3d:3e:75:dc:f5:ee:81:d0:d7:51:0c:83:30:aa:
61:b0:66:a1:7f:fa:9c:40:32:38:8b:97:42:9d:84:
29:6f:37:4d:63:76:db:ae:cf:a8:ec:86:bd:3e:cf:
5b:43:5c:3c:cf:9f:8f:65:05:2b:aa:0a:eb:49:5c:
01:c3:1a:bb:8d:ca:f4:ec:75:68:da:73:d5:f5:5c:
a2:72:4f:a5:1b:9d:e5:47:e5:53:ed:d9:f1:4b:44:
3c:65:51:8e:6e:d4:80:bc:fa:f9:cc:f0:29:56:7b:
e5:6b:f8:8d:3c:e1:6b:73:96:6b:53:9f:5a:a1:38:
9e:0b:95:56:f0:1d:7f:34:b5:c4:1d:8b:18:50:ee:
0c:93:71:5e:23:ea:07:d3:46:69:9c:0c:93:07:74:
74:3e:10:1c:21:91:14:34:7c:cb:4a:26:64:b2:bc:
1e:78:c4:0e:71:f6:1b:3e:f7:4e:d0:b3:d5:1c:87:
58:aa:16:70:dd:89:be:ab:8c:12:58:39:5a:0b:6a:
af:e1:c9:33:97:0f:75:f3:fe:76:17:35:fa:b3:cd:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A6:25:34:3D:08:88:B8:9E:45:74:91:2E:BD:8A:3F:AD:32:EE:4B
X509v3 Authority Key Identifier:
keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9b:c1:ec:46:96:1d:94:b0:e1:3a:24:cb:a0:5e:e2:fa:45:
ac:97:79:17:20:6e:58:47:ba:26:17:f1:cc:99:a3:6f:14:4b:
e3:a8:9f:6a:88:43:05:1f:bd:67:d6:c0:23:b4:ee:dd:d1:6b:
ef:ad:6b:9c:c6:87:f5:fc:62:f3:95:c2:bb:82:7d:34:df:18:
8e:44:a6:59:e4:18:2d:4b:5b:b9:a8:0c:71:ec:11:16:1e:ab:
aa:ea:9d:a8:dc:5a:e9:e3:19:ce:7e:bf:52:3c:ca:d2:59:93:
61:d0:96:e8:e2:a8:83:21:f0:af:a0:99:7c:72:79:6f:e5:91:
89:9d:ef:7d:b6:34:9f:d2:3b:ca:eb:3a:b3:7e:58:e4:4b:56:
24:08:bd:f6:17:ad:88:32:19:c3:dd:1c:32:18:49:07:79:12:
5a:4c:63:d2:09:50:2a:ac:de:66:60:ff:da:4f:f4:b8:c8:13:
e0:3b:1c:0a:a5:36:46:d6:df:45:32:6b:42:fc:4d:cf:2d:e1:
11:52:73:d7:33:58:e9:08:0e:dc:81:da:11:e3:41:d2:13:5f:
ef:15:60:cc:7d:1a:37:9a:35:e0:92:f3:db:df:8a:44:8a:a0:
9c:e0:ee:02:c0:52:6e:7b:f9:36:3c:e3:fa:13:58:98:ca:a3:
52:ce:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:59 2025 by rpki-client