Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft
File: Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft (raw, json)
Hash identifier: A6Qvls5P/asi2t/QAV8qhTtCpdGANKXX1iXyyWRGhdM=
Subject key identifier: B6:0E:87:0C:63:8E:A2:A9:2B:37:B0:86:0F:8D:A9:5E:D3:56:05:AE
Authority key identifier: 36:4D:48:8B:8C:73:1B:91:D4:A5:A2:B9:0A:66:6C:EE:BC:0E:18:C9
Certificate issuer: /CN=364d488b8c731b91d4a5a2b90a666ceebc0e18c9
Certificate serial: 019873E29C088096290943885DFBC418C447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft
Manifest number: 0129
Signing time: Mon 04 Aug 2025 07:01:27 +0000
Manifest this update: Mon 04 Aug 2025 07:01:27 +0000
Manifest next update: Tue 05 Aug 2025 07:01:27 +0000
Files and hashes: 1: Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl (hash: CvaTLVDY1LorfXqwjZR3rfJ4M438wUqMiP/aVFRIFB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:9c:08:80:96:29:09:43:88:5d:fb:c4:18:c4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364d488b8c731b91d4a5a2b90a666ceebc0e18c9
Validity
Not Before: Aug 4 07:01:27 2025 GMT
Not After : Aug 5 07:01:27 2025 GMT
Subject: CN=b60e870c638ea2a92b37b0860f8da95ed35605ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:cc:bc:48:d0:18:02:31:f0:02:e1:c5:a8:
e2:9c:fa:11:5f:4e:02:3c:7b:0f:af:a7:17:0c:5f:
bd:ad:2c:aa:c5:e7:18:58:64:10:fb:ec:f4:3a:ee:
11:23:09:ad:19:a3:42:1d:bf:bf:78:3d:70:7f:36:
d2:c7:90:0c:dd:53:0f:3f:b2:c4:04:ae:38:42:21:
09:58:81:66:4d:f9:22:78:09:f3:dc:5a:c2:09:85:
78:7d:4f:3a:59:58:6b:b1:a7:68:6d:0b:27:a7:95:
30:f7:ba:22:f6:99:44:08:ac:7a:31:ef:1a:5c:4e:
0d:6f:1b:86:06:8f:44:69:d3:09:e6:ae:3c:9b:de:
95:fb:53:e8:d6:d1:0b:ad:50:68:f5:fb:30:14:5f:
2e:e9:0d:91:9a:43:8f:bb:d2:46:92:37:b0:68:be:
33:5d:70:94:6e:8a:0e:5f:f7:f3:34:a2:85:a0:ad:
9b:13:53:7c:7b:5e:5b:bf:b1:a3:05:5f:bb:a4:4b:
81:2f:10:6f:a8:b8:72:ae:b7:31:6d:fc:f0:af:84:
00:b0:0d:dc:e6:83:7b:3c:37:97:18:7c:f5:ed:04:
68:28:0c:57:af:57:ff:ac:05:82:62:f4:97:53:91:
df:94:97:52:00:35:69:9d:21:21:ff:22:1d:a1:54:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:87:0C:63:8E:A2:A9:2B:37:B0:86:0F:8D:A9:5E:D3:56:05:AE
X509v3 Authority Key Identifier:
keyid:36:4D:48:8B:8C:73:1B:91:D4:A5:A2:B9:0A:66:6C:EE:BC:0E:18:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:14:26:58:83:b2:f4:56:97:c4:7a:1b:5e:b6:cc:ac:89:b2:
fb:cf:af:e5:7b:0a:ff:4a:d7:6d:b2:64:8b:f2:8c:a7:fa:7b:
57:b9:7d:f1:dd:35:b9:49:2e:7d:1e:d4:68:1c:b5:36:38:2d:
a7:0d:5f:bf:1b:14:64:2f:3d:1d:19:fa:2e:b6:c1:1a:73:2d:
ac:44:76:9b:c7:9d:ab:17:20:96:3f:76:f4:ee:d1:86:e5:be:
c5:e5:18:ba:14:da:7d:c4:fd:65:a4:fd:55:b4:de:41:c6:17:
30:df:c5:61:11:ba:62:81:95:57:46:4b:6b:43:61:84:c3:00:
d4:d9:d4:1c:61:b5:86:28:42:e2:f8:26:bf:3f:18:e3:8c:b8:
dc:32:28:a1:cf:b7:53:f1:7b:47:83:d3:7f:3c:95:34:60:2e:
06:f4:70:e2:30:d3:62:79:6d:4c:1c:e2:8f:43:a5:83:8a:e0:
94:8c:d6:43:ce:00:a3:d7:7a:c2:6e:4e:d9:4f:02:5f:b5:b3:
5e:aa:2f:f4:8b:11:15:d7:28:6c:03:1e:cf:f7:f7:54:b7:d7:
b4:c7:1a:14:0e:26:33:6f:2e:b8:01:be:ac:33:93:ea:22:ad:
de:85:de:c2:dd:aa:d8:95:3b:08:21:a1:00:c7:85:2b:bb:7b:
aa:50:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:38 2025 by rpki-client